last executing test programs: 6m54.011316701s ago: executing program 32 (id=246): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffff", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x5ee, 0x30, &(0x7f0000000440)={0x11, 0x8100, r2, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 6m32.249004505s ago: executing program 33 (id=625): sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001f00)=""/50, 0x32}], 0x1) 5m59.930005824s ago: executing program 34 (id=1775): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x1, 0x7, 0x1, 0x7fff, 0xfffffffa, 0x5, 0x6412, 0x6710}, 0x20) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m57.493877976s ago: executing program 35 (id=1827): unshare(0x28000600) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000480)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x0, 0x0, 0x300010000000, 0x0, 0x0, r0}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x5000, r0, 0x0, 0x0, 0x7, 0x0, 0x1, r2}]) 5m57.261208206s ago: executing program 36 (id=1834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5m53.890569979s ago: executing program 37 (id=1907): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000540)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000340), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 5m39.285635914s ago: executing program 38 (id=2332): syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 5m31.130831691s ago: executing program 39 (id=2506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x288, 0x2e8, 0x2e8, 0x288, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x138, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_team\x00', {}, 'macvlan0\x00', {}, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@state={{0x28}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendto$inet6(r1, 0x0, 0x0, 0x20004000, &(0x7f0000000080)={0xa, 0x4e22, 0x40000000, @empty, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000001180)={0x7, {{0xa, 0x4e24, 0x7, @loopback, 0x6}}, {{0xa, 0x4e21, 0x8000, @loopback, 0x4629}}}, 0x108) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001200130628b57000fdd3df2506ff01fc00004e2200239e8927000600000009000000090000007d00014afb909eac16394b7e7100e61e70783e85d29f65c6c92e1f"], 0x4c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x4000000) 5m1.990068592s ago: executing program 40 (id=3116): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x6a52) 5m1.676983032s ago: executing program 41 (id=3122): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@ip_retopts={{0x10, 0x0, 0x1600bd75}}], 0x10}}], 0x1, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000001280)={0xc8a, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0x69, 0x9dff, 0x1, "8003e3ffc3802000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 4m58.58001887s ago: executing program 42 (id=3159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569", 0x7d}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 4m55.38603418s ago: executing program 43 (id=3183): socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/icmp6\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, 0xffffffffffffffff, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m48.770915459s ago: executing program 44 (id=3233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a0008", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4) 4m47.130028269s ago: executing program 45 (id=3263): unshare(0x2040400) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x402, 0x0) poll(&(0x7f00000000c0), 0x0, 0xf0) 4m45.601465775s ago: executing program 46 (id=3279): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fed, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m33.585715408s ago: executing program 47 (id=3487): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000c80)={0x0, 0x4007, 0x10021da0, 0x0, 0x4, "42f42749a2ed195a14c8497fdc7e8e5aec8a76", 0x512a, 0x1c680}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @initdev}, &(0x7f0000000440)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r1, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/198, 0xc6, 0x0, &(0x7f0000000680)=""/102, 0x66}}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) listxattr(0x0, 0x0, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) 4m28.945893984s ago: executing program 48 (id=3550): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0x4a042) ioctl$BLKDISCARD(r0, 0x800812a0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m28.056934638s ago: executing program 49 (id=3565): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r0, &(0x7f00000018c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x0, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x200005, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44480) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m26.956858099s ago: executing program 50 (id=3578): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0xfffffff8, {0x0, 0x0, 0x4a00, 0x0, 0x2844a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 4m25.944446539s ago: executing program 51 (id=3584): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 4m19.755371644s ago: executing program 52 (id=3602): socket$inet6_icmp(0xa, 0x2, 0x3a) mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4m14.529739945s ago: executing program 53 (id=3677): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x6, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000005) 4m14.503014768s ago: executing program 54 (id=3679): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r3, @ANYBLOB="80007f000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r4, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/190, 0xbe}], 0x1, 0x70, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) setsockopt$inet6_int(r5, 0x29, 0x5, &(0x7f0000000080)=0x860b, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x4, &(0x7f0000000400)=0x80000001, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0x4, 0x6, 0xfe, 0x8, 0xfe, 0x9, 0x5, 0x1, 0x0, 0x0, 0x20, 0xff, 0x0, 0x22}, 0xe) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r8, 0x84, 0x20, &(0x7f0000000040)=0x10001, 0x4) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 4m14.105836209s ago: executing program 55 (id=3684): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 4m13.117817826s ago: executing program 56 (id=3693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0xffffffff, 0x91b1}, [@TCA_NETEM_CORR={0x10, 0x1, {0xb7c, 0x6d, 0x9}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) 4m11.502660583s ago: executing program 57 (id=3705): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 4m7.020309208s ago: executing program 58 (id=3725): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, 0x0) 4m1.426671547s ago: executing program 59 (id=3800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) bind$inet(r4, &(0x7f0000005440)={0x2, 0x4e20, @remote}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r5, 0x0, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xf4}}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000100)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "c9ecc7f124cb9d75603eda7dd510038dc129097c8920f8a5373f6640edd79d71791b0d44527e367c4c74304f168e249b40ec72b5df3aba8b27050b73febc9f91", 0xc}, 0x48, 0x0) socket$kcm(0x29, 0x5, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x2000, 0x0) fcntl$notify(r9, 0x402, 0x8000000a) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x89a2, &(0x7f0000006b80)={'lo\x00', @ifru_data=&(0x7f0000006b40)="03ff6990c215fd687edda96e483aadf0a8847f396dfb27a2a0398329ffb775f6"}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r10, 0x8040942d, &(0x7f0000000140)) recvmmsg$unix(r8, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000002c0)=""/220, 0xdc}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f00000003c0)=""/108, 0x6c}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/101, 0x65}], 0x8, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000001900)=""/121, 0x79}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/140, 0x8c}], 0x1, &(0x7f0000001b80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001c80), 0x6e, &(0x7f0000003fc0)=[{&(0x7f0000001d00)=""/226, 0xe2}, {&(0x7f0000001e00)=""/233, 0xe9}, {&(0x7f0000001f00)=""/44, 0x2c}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/65, 0x41}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x6}}, {{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/84, 0x54}, {&(0x7f00000050c0)=""/70, 0x46}, {&(0x7f0000005140)=""/123, 0x7b}], 0x4, &(0x7f0000005200)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}], 0x5, 0x2101, &(0x7f0000005400)={0x0, 0x3938700}) 3m53.852160369s ago: executing program 60 (id=3883): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="05", 0x1}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x0, 0x41, 0x8, 0x2, 0xffffffff, 0x3, 0x7fffffff}}], 0x30}, 0x0) 3m49.253569449s ago: executing program 61 (id=3920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m40.9898716s ago: executing program 62 (id=4036): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r0, &(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x2, 0x4}, 0x3}}, 0x10) (fail_nth: 1) 3m9.90707032s ago: executing program 63 (id=4445): r0 = getpid() timer_create(0x2, &(0x7f00000000c0)={0x0, 0x2, 0x1, @tid=r0}, &(0x7f00000001c0)) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000100)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@nouid32}, {@barrier_val}, {@grpjquota}, {}]}, 0x44, 0x7b1, &(0x7f00000004c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x683, 0x0) renameat2(r1, &(0x7f0000000200)='./file1\x00', r2, &(0x7f0000000240)='./file0/file0\x00', 0x1) recvfrom$unix(r2, &(0x7f0000001140)=""/4096, 0x1000, 0x10040, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 3m5.071066941s ago: executing program 64 (id=4515): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffc, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 2m1.933885576s ago: executing program 6 (id=5515): setresuid(0x0, 0xee00, 0x0) r0 = io_uring_setup(0xaae, &(0x7f0000000300)={0x0, 0xbfffeffe, 0x800, 0x7, 0x2}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x550, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x20000040, &(0x7f0000000080)={0xa, 0x4e1f, 0x80000004, @loopback, 0x55}, 0x1c) recvmsg(r3, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x2041) close_range(r1, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000001de23015"], 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0xc800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffb4fb}, 0x94) 2m1.759450899s ago: executing program 6 (id=5519): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x2, 0x0, 0x70bd2a}, 0x10}, 0x1, 0x7}, 0x4010) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x2c020400) (async) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/162}, {&(0x7f0000000000)=""/33}, {&(0x7f0000000140)=""/44, 0x4}], 0x4e, 0x300, 0x8000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_USERDATA={0x5, 0x6, 0x1, 0x0, 'C'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m1.59125937s ago: executing program 6 (id=5523): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x2f, 0x9, 0x7, 0x4, 0x4}) syz_emit_ethernet(0x52, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8100000086dd6d4f022c001800fffc020000000000000000000000000001fc010000000000000000000000000001060105"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8915, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000028c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002980)={&(0x7f0000002900)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80a0) 2m1.409330974s ago: executing program 6 (id=5524): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x5, 0x7ffc0002}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000002030104000000f4ffffffff000000000800010001"], 0x28}}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x401}, 0x14}, 0x1, 0x0, 0x0, 0x4008084}, 0x10048000) r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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") execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r2 = socket(0x10, 0x803, 0x0) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)='./file0\x00') r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB="3add431205f71598f7a71bb880f7cd4173c80fc182581d5d056c46873cec843e465369eb5915fe44ec"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)={r2, r6}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getpid() getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000080)={0x1, 0x8, 0x3, 0x104, @vifc_lcl_ifindex=r7, @local}, 0x10) 2m1.217930698s ago: executing program 6 (id=5528): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x204801, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x10016}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) pipe2(&(0x7f0000000000), 0x4000) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x3, &(0x7f0000000040)=0x1000000fff, 0x12) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 2m0.463647235s ago: executing program 6 (id=5536): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) rmdir(&(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffffd, 0x8) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0xfe33) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080073000000000085f73eafd5d1cf6f44dd89"], 0x3c}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x32}}], 0x40}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa930}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000540)="76cb0de207ccb2e5d3e16c3b864f5f3ea268309d733c5f2490846ba16ea5190a898d9cd166690fff3571e47e2361b8f3a8850177fe906dc77f6b21189ce13b2919fe79f115e7da4df6b5c35deb40b5ebe1971b1761004476e06d9b01a97cf78c1c002891c6f37b55cddc6738209254ba0441e88105066cf935327d7dc2d9128bab42b5694e9424858c8f72af1ab36211a427a3fba4f7ab8040d9d151feb11941431955139347f2debfe2f37ca9c32ea8", 0xb0}, {&(0x7f0000000600)="ba0cb076346405b47e7e38f11b25f716c5a470b0e513ebef6b2724bb40828dca4ec52d2c8246ebbdf1f8a038f2cee5abd556d41723d45c2f6f2b9683fdefb979aa", 0x41}], 0x2, &(0x7f0000000680)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x2e, 0x1a, '\x00', [@generic={0x7, 0x57, "8ea5822c64c7f4b4ef5cde5b5875efbc06551828d144c130b00a33b8d05d1f807792a1401401928647a5d48a37a41b6c3c97c5a348a2ec6ada663170cc4039cdc3f5549c079f01d24a70b9f7980df228eec631aef9272d"}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}, @pad1, @generic={0x8, 0x40, "33b23056ddc4029071a0a6c9c428b38f0bab6bb15cb78217c2800089b99ff3532c9de967fb6c58504e7fbf975d7f3cc94282b007b88d9a68979fc9a955f7a026"}, @ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x18, {0x2, 0x4, 0x6, 0x8, [0x7, 0x8]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd}}, @hopopts={{0x60, 0x29, 0x36, {0x8, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x18, {0x0, 0x4, 0xf8, 0x9, [0x10001, 0x8]}}, @pad1, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, @enc_lim, @enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xcef}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x62, 0x18, '\x00', [@generic={0x5, 0x8a, "9672e47c4ac2252c13ee751aed44454585a86ae1e27510cb4d7e6b0eb4523c6cdd6cef5e63751690ed9c905e8adf2fa3714f2fe870edf9cd7f4b861eba27ec899c44b925b1d5920fd06d8792e89f37368ba71fb123474cec86d08091b496e8630695a8168a892a1ce64ef06b66e0c0dbd35fa964432b2cfe45a99a902866bc25aac57d8de4ef9a35e058"}, @generic={0x0, 0x1e, "58920198107becd1437f1e81b23ad9fffafcd53b64beb09b0226f50ec700"}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x0, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @remote, @mcast1, @local, @remote]}}}, @hopopts={{0xd0, 0x29, 0x36, {0x59c67c7bb7e35388, 0x16, '\x00', [@generic={0x3, 0xaf, "e6f9d0e5f95d7fe7952c088f4f1a33bb43ce82c692594e3955d6295c22d9c0996358b3d48db999ba87a48eb06f00f98664a2749242325a6b93ad95e1cc28f5b37c9de8d5aecd4069bd98000191cfa67b122e0dce12d2cdc48fb2242eb8b1f5bd7778dab1bdd861f9190f0377c575e3a778e3548b87a3ca016d8e8171f8be97dcbb372443143b5d5eaa2d7e86502f29b9f7a0eff7c7935b13a204cb6debf82fbd3bcd5f3871c9f9d48bc7f8662285ca"}]}}}], 0x3f0}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x400}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a80)="7b2c3f4063edb22669fb1a9dc47e7783fe8cb79d150b88ae50b0ee091de6ea11d7a023eb3cf021ee02f4c329cc965751c514190c20417275df45862d28ac30b93ba00ccaeda5705bf1553ece17efd8d3126ab8056ae26449e004efb33afb86bec6bda05afe6f70f810a6fd14ca2f2a579b2aac6232583de57e0af065dd8a164e4b6fc760a9c10c985a2913be05dce7de7adbd1aea3a144cdf91949971235fbb8e2a38cc926d7c6a63f5f95ace1a65758", 0xb0}], 0x1, &(0x7f0000000b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @hopopts={{0x80, 0x29, 0x36, {0x33, 0xc, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0x1a48, [0xfffffffeffffffff, 0x0, 0x609a9cbe, 0x7, 0x600000000, 0x6000, 0x0, 0x6, 0x9]}}]}}}], 0xb0}}, {{&(0x7f0000000c40)={0xa, 0x4e21, 0xb, @local, 0x1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c80)="a2bbfbb7ddf332811245dc066f574cc1e95570def20e78063b94f52820a36be19b62dd4a65167eedf31076930c40369839839050ec7cf4fde76c42cc52b1f4e5340ef83e16cac716ab6986d4597ada6b3138de9bbc0e9ebe0379209739fc471c55c1be29a9a1c463b9", 0x69}], 0x1}}], 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x13, r7, 0x28e2d000) ptrace(0x10, r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r6, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 2m0.4301344s ago: executing program 65 (id=5536): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, 0xe, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) rmdir(&(0x7f0000000040)='./file0\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffffd, 0x8) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0xfe33) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080073000000000085f73eafd5d1cf6f44dd89"], 0x3c}, 0x1, 0x2, 0x0, 0x1bb581880d1753e}, 0xc890) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}, @tclass={{0x14, 0x29, 0x32}}], 0x40}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa930}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000540)="76cb0de207ccb2e5d3e16c3b864f5f3ea268309d733c5f2490846ba16ea5190a898d9cd166690fff3571e47e2361b8f3a8850177fe906dc77f6b21189ce13b2919fe79f115e7da4df6b5c35deb40b5ebe1971b1761004476e06d9b01a97cf78c1c002891c6f37b55cddc6738209254ba0441e88105066cf935327d7dc2d9128bab42b5694e9424858c8f72af1ab36211a427a3fba4f7ab8040d9d151feb11941431955139347f2debfe2f37ca9c32ea8", 0xb0}, {&(0x7f0000000600)="ba0cb076346405b47e7e38f11b25f716c5a470b0e513ebef6b2724bb40828dca4ec52d2c8246ebbdf1f8a038f2cee5abd556d41723d45c2f6f2b9683fdefb979aa", 0x41}], 0x2, &(0x7f0000000680)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @rthdrdstopts={{0xf0, 0x29, 0x37, {0x2e, 0x1a, '\x00', [@generic={0x7, 0x57, "8ea5822c64c7f4b4ef5cde5b5875efbc06551828d144c130b00a33b8d05d1f807792a1401401928647a5d48a37a41b6c3c97c5a348a2ec6ada663170cc4039cdc3f5549c079f01d24a70b9f7980df228eec631aef9272d"}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xf}}, @pad1, @generic={0x8, 0x40, "33b23056ddc4029071a0a6c9c428b38f0bab6bb15cb78217c2800089b99ff3532c9de967fb6c58504e7fbf975d7f3cc94282b007b88d9a68979fc9a955f7a026"}, @ra={0x5, 0x2, 0xc}, @calipso={0x7, 0x18, {0x2, 0x4, 0x6, 0x8, [0x7, 0x8]}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x3}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xd}}, @hopopts={{0x60, 0x29, 0x36, {0x8, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @calipso={0x7, 0x18, {0x0, 0x4, 0xf8, 0x9, [0x10001, 0x8]}}, @pad1, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}}, @enc_lim, @enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0xcef}]}}}, @hopopts_2292={{0xe0, 0x29, 0x36, {0x62, 0x18, '\x00', [@generic={0x5, 0x8a, "9672e47c4ac2252c13ee751aed44454585a86ae1e27510cb4d7e6b0eb4523c6cdd6cef5e63751690ed9c905e8adf2fa3714f2fe870edf9cd7f4b861eba27ec899c44b925b1d5920fd06d8792e89f37368ba71fb123474cec86d08091b496e8630695a8168a892a1ce64ef06b66e0c0dbd35fa964432b2cfe45a99a902866bc25aac57d8de4ef9a35e058"}, @generic={0x0, 0x1e, "58920198107becd1437f1e81b23ad9fffafcd53b64beb09b0226f50ec700"}, @jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @mcast2}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @rthdr={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x0, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @remote, @mcast1, @local, @remote]}}}, @hopopts={{0xd0, 0x29, 0x36, {0x59c67c7bb7e35388, 0x16, '\x00', [@generic={0x3, 0xaf, "e6f9d0e5f95d7fe7952c088f4f1a33bb43ce82c692594e3955d6295c22d9c0996358b3d48db999ba87a48eb06f00f98664a2749242325a6b93ad95e1cc28f5b37c9de8d5aecd4069bd98000191cfa67b122e0dce12d2cdc48fb2242eb8b1f5bd7778dab1bdd861f9190f0377c575e3a778e3548b87a3ca016d8e8171f8be97dcbb372443143b5d5eaa2d7e86502f29b9f7a0eff7c7935b13a204cb6debf82fbd3bcd5f3871c9f9d48bc7f8662285ca"}]}}}], 0x3f0}}, {{&(0x7f0000000380)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x400}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a80)="7b2c3f4063edb22669fb1a9dc47e7783fe8cb79d150b88ae50b0ee091de6ea11d7a023eb3cf021ee02f4c329cc965751c514190c20417275df45862d28ac30b93ba00ccaeda5705bf1553ece17efd8d3126ab8056ae26449e004efb33afb86bec6bda05afe6f70f810a6fd14ca2f2a579b2aac6232583de57e0af065dd8a164e4b6fc760a9c10c985a2913be05dce7de7adbd1aea3a144cdf91949971235fbb8e2a38cc926d7c6a63f5f95ace1a65758", 0xb0}], 0x1, &(0x7f0000000b80)=[@flowinfo={{0x14, 0x29, 0xb, 0x80000001}}, @flowinfo={{0x14, 0x29, 0xb, 0xff}}, @hopopts={{0x80, 0x29, 0x36, {0x33, 0xc, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @calipso={0x7, 0x50, {0x2, 0x12, 0x4, 0x1a48, [0xfffffffeffffffff, 0x0, 0x609a9cbe, 0x7, 0x600000000, 0x6000, 0x0, 0x6, 0x9]}}]}}}], 0xb0}}, {{&(0x7f0000000c40)={0xa, 0x4e21, 0xb, @local, 0x1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000c80)="a2bbfbb7ddf332811245dc066f574cc1e95570def20e78063b94f52820a36be19b62dd4a65167eedf31076930c40369839839050ec7cf4fde76c42cc52b1f4e5340ef83e16cac716ab6986d4597ada6b3138de9bbc0e9ebe0379209739fc471c55c1be29a9a1c463b9", 0x69}], 0x1}}], 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000001000/0x200000)=nil, 0x200000, 0x1, 0x13, r7, 0x28e2d000) ptrace(0x10, r6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$setregs(0xd, r6, 0x9, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r6, 0x1, &(0x7f0000000340)={&(0x7f0000000240)=""/204, 0xcc}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) 1m40.745867946s ago: executing program 5 (id=5833): r0 = memfd_create(&(0x7f00000004c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07\x8ex\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x1) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0'}, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0x94) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x1, 0x1b1, &(0x7f0000000280)="$eJzs2zFrE2EYB/DnahrTOiSDkzjc6BSafoIGqSAGBCWDgqDYBqQnBQsBHWw3B7+EH8bBVT+JYwfhpLk0aUKEGpocJL/fkodc/rnnfcMleQJ5ff/90cHxSe9V70fUkiQ29iKN8yQasRGXzgIAWCXneR6/8zzPb5/F1rfI87zsjgCARfP5DwDr5/mLl0/anc7+szStRWRf+t1+t7gtjrd78S6yOIydqMefuPiCMFTUjx539nfSgUZ8zU6H+dN+99ZkvhX1aMzOt4p8OpnfjO2r+d2ox93Z+d2Z+Wo8qI7ymxFRj19v4ziyOIiL7Dj/uZWmD592pvJ3Bo8DAACAVdBMRwbzezUm5/dmc/L4eD4u8u3k2r8PTM3XlbhXKXftALCuTj5+OnqTZYcf5ihqw+eYM3694ud2cZIFnuKGisstHd2zt4z9+d+ierXDqWJrwa1Wlr7kJCLK2vDvEVH6yz3XRT0oSngzApZqfPWX3QkAAAAAAAAAAAAAAPAvy/hfUdlrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD9/A0AAP//W1+CbQ==") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f00000002c0), 0x15000000) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(r1, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = open(&(0x7f0000000680)='./file0\x00', 0x40480, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m39.810694307s ago: executing program 5 (id=5845): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000200081054e81f782db4cb904021d080006007c09e8fe04a1180008800a00142603600e1208000f", 0x2b}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002340)={0x20, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1m39.449431213s ago: executing program 5 (id=5852): r0 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0x2000e7b6, 0x13500}, &(0x7f0000000280), 0x0) poll(&(0x7f0000000a80)=[{r0, 0x1000}], 0x1, 0x6) 1m39.325953569s ago: executing program 5 (id=5854): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x8000, 0x0, 0xf9, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r0 = syz_open_dev$hiddev(&(0x7f0000000100), 0xe08, 0x200) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000240)={0x1, 0x3, 0x4, 0x1e17}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x26000400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000340)={0x90000019}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) 1m38.834035782s ago: executing program 5 (id=5861): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x1, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x8, 0x80000003, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) flock(0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="02e006ec7d009b2a01a68f9488dafcb3e30b23e6caf21f6bc5ba0e2bf25ce2043ab120c5243c694e96827faed61a1abc289b2fd5ac3faed4cac79800"/73], 0x80}}, 0x4040) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000380), 0x0, 0x60000010) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1c00db4cb1020a00"/17, 0x11}, {&(0x7f0000000440)="0c74c75350f4a590e15c61c734fe1863330f8ed12ef558d71089d52b2c7dba4e487623e74d1de3c6741cb5b6179f76512285093a6a0000000000", 0x1d}], 0x100000000000023a, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="050080000000000000006be86b8e289a3c620000", @ANYRES32=r0, @ANYRES16, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18888d83743eb584180000000800000018110000", @ANYRES16=r2, @ANYBLOB="000036bb000000000002000000850000008600000000000000", @ANYRESOCT=r4, @ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000380), r1) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) write$RDMA_USER_CM_CMD_REJECT(r8, &(0x7f00000007c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x6, "9aa3c6", "fa88b054b62404a63af96e398859be6497553e2df8b0eb694380f14001f5ec889eee576771a22a6889955c01a5628b61b1cbb3bfb190955187f15b778c35a5a08227912dbbe6e093490b3a2d8d1b5a4134c2e1e4a7c3f809a26b3e90da0ddead903b14f256299eca38b8a5f4bb79c92bf3c30227565c804b84a9391de6ad04b93f732c6518c15f05680ae2af0d82e1141f4f5064fb01c9caa8263ee7938caf869dcb316c6f04fd948675fd6da271d3c62a6d7b1c7e1ebc3845c2c2b6648bced3bad28ae64f10d31915f008d01bc7fafcfd84ae6622ee4a07ada48075de572dbb1ee429fec1f17c289daa53e140f3c94c34e53dd378df9b2ca6a19720a934130c"}}, 0x110) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001e000100fdffffff0000000002000000010000070000000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4a896}, 0x0) 1m38.397593558s ago: executing program 5 (id=5866): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x80002, 0x10c) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x0) syz_io_uring_setup(0x7b48, &(0x7f0000000000)={0x0, 0x5a4f, 0x8084, 0x0, 0x29f, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x41aa, &(0x7f0000000240)={0x0, 0xeeb2, 0x200, 0x3, 0x370, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00'}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4613f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x401, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, r0, 0x0) 1m38.355063533s ago: executing program 66 (id=5866): r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x80002, 0x10c) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x80010, r0, 0x0) syz_io_uring_setup(0x7b48, &(0x7f0000000000)={0x0, 0x5a4f, 0x8084, 0x0, 0x29f, 0x0, r0}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x41aa, &(0x7f0000000240)={0x0, 0xeeb2, 0x200, 0x3, 0x370, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00'}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4613f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x401, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, r0, 0x0) 1m35.044579168s ago: executing program 0 (id=5911): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000009a260000002100000d0c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) 1m34.231618723s ago: executing program 0 (id=5922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0xb0}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="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"], 0x1e0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000008e80)) r3 = semget$private(0x0, 0x6, 0x2000000) semtimedop(r3, &(0x7f00000003c0)=[{0x0, 0x1}, {0x4, 0x4, 0x1800}], 0x2, 0x0) semctl$GETZCNT(r3, 0x4, 0xf, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000000)={{0x1, 0x2, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 1m34.01853503s ago: executing program 0 (id=5925): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000140), &(0x7f0000000080)=@udp6}, 0x20) (fail_nth: 2) 1m34.01822241s ago: executing program 0 (id=5926): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x8015, &(0x7f0000000000)={[{@bsdgroups}, {@nolazytime}, {@noblock_validity}, {@grpjquota}, {@bsdgroups}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@nogrpid}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0xee01, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x6025, 0x4005, 0x9, 0x0, 0x1, 0x1, 0xf, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) write$P9_RWALK(r1, 0x0, 0x30) r2 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, 0x0) ptrace(0x10, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/ipc\x00') pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_none}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x16, @local, @mcast2={0xff, 0x5}, 0x10, 0x0, 0x0, 0x5}}) syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0), &(0x7f0000000100)) (async) r6 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1m33.763581563s ago: executing program 8 (id=5932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) (fail_nth: 6) 1m33.397698199s ago: executing program 8 (id=5934): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0x1627, 0x1040, 0x0, 0x1000001}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000280), 0x0) 1m33.369350633s ago: executing program 8 (id=5935): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f0000000080)={{0x2, 0x4e23, @multicast1}, {0x0, @random="9705000000e8"}, 0x48, {0x2, 0x0, @local}, 'dummy0\x00'}) r1 = socket(0x10, 0x2, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420654400000000000000000100000001000800080008c01300ff00", 0x24) 1m33.341944747s ago: executing program 0 (id=5936): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x20, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x9, 0x1, '(.%^\x00'}]}, 0x20}}, 0x24040000) preadv(r0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000440)=""/53, 0x35}, {0x0}, {0x0}], 0x4, 0x6c, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000080)="240000004e0025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{r3}], 0x1, 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008ffffffbd0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f88827007691e89914e2128e66a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9ba00015e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b9a58fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a0ea0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db249d5fe13980cc212474e01f515bf8dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23d664d86049eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98beb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e00"/798], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) 1m33.304485722s ago: executing program 8 (id=5937): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1cb142, 0x84) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) read$msr(r0, &(0x7f0000000100)=""/22, 0x16) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 1m32.853965929s ago: executing program 0 (id=5939): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) fsmount(r0, 0x1, 0x80) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.809714545s ago: executing program 67 (id=5939): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r1) fsmount(r0, 0x1, 0x80) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m32.62068731s ago: executing program 8 (id=5941): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000005840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000001, 0x0) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="9bdd1b3ed6373d4a08d45ed6b43187fe14011e9ff8d3bbeee2c486f22486c2e4e9b5e7678a49fa604e59eabc6612ca58ac2602f457691c9e65b7e0ab53f20716", 0x40}, {0x0}, {0x0}], 0x3}, 0x400040c0) 1m31.726594134s ago: executing program 8 (id=5946): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x2b, 'cpu'}, {0x2d, 'rlimit'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x0, 'memory'}]}, 0x2d) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf20c, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x805}, @exit, @ldst={0x0, 0x0, 0x0, 0x7, 0xb, 0x180, 0x10}, @ldst={0x1, 0x3, 0x1, 0x4, 0x1, 0x40, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xb3}, @ldst={0x0, 0x1, 0x3, 0x9, 0x2, 0x100, 0x8}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0500050000001a4e4fbdcd53ccd7394ac28381b2", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x40) preadv(r2, &(0x7f00000001c0), 0x0, 0x2, 0x56a) 1m31.698777758s ago: executing program 68 (id=5946): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000480)='\x00\x00\toup\x00C\xaf\x00\x00\x00\x04\x81fj:\xee\x03\xa6\xd3o\x02z\xc1\xbbI\xc2#\x19\xd8\xd6\x99\x91{\x8fI\xce\xe2-\xefv*\xd1\xf2\x0f\xa0\xa0T\xdbmpY\xe2\x83e\xff\xd2\xe2\xec+\xcc\x16\x1c`\xddv\x86_\x85\x18Fh\x83\n\xbc\xfc'}, 0x30) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpuset'}, {0x2b, 'cpu'}, {0x2d, 'rlimit'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x0, 'memory'}]}, 0x2d) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0xa, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf20c, 0x0, 0x0, 0x0, 0x80000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x805}, @exit, @ldst={0x0, 0x0, 0x0, 0x7, 0xb, 0x180, 0x10}, @ldst={0x1, 0x3, 0x1, 0x4, 0x1, 0x40, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0xb3}, @ldst={0x0, 0x1, 0x3, 0x9, 0x2, 0x100, 0x8}], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c01000013000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="0500050000001a4e4fbdcd53ccd7394ac28381b2", @ANYRES32=0x0, @ANYBLOB="140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r2, @ANYBLOB="e8001a8048000a8014000700ff02000000000000000000000000000114000700fe8000000000000000000000000000aa050008000000000014000700fe8000000000000000000000000000bb9c00028010010180bafc0000000000000400070040ff0700100002800c000180080000000000000018000a80140007000000000000000000000000000000000144000a80050008000000000014000700fc020000000000000000000000000000140007000000000000000000000000000000000100000700fe80000000000000000000000000000005000800000000000400070004000700100002800c0001"], 0x15c}}, 0x40) preadv(r2, &(0x7f00000001c0), 0x0, 0x2, 0x56a) 1m21.352734986s ago: executing program 7 (id=6058): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x0, 0x0, 0x10001, 0x41, r0, 0xffff, '\x00', r2, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0xc, 0x6, 0x0, 0x0, 0x0, {0xb, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m20.661706134s ago: executing program 7 (id=6070): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xa0a}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r5, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r5, @in6={{0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0x3ff, 0xe, 0x100, 0xa54c, 0x0, 0x1000, 0x3}, &(0x7f00000000c0)=0x9c) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0xffff, 0x9041) ioctl$LOOP_SET_CAPACITY(r6, 0x4c07) 1m19.739418273s ago: executing program 7 (id=6087): unshare(0x2a020400) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x8001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, 0x0) 1m19.712260917s ago: executing program 7 (id=6089): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, 0x0, 0x272) (fail_nth: 1) 1m19.410986975s ago: executing program 7 (id=6091): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187d000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, 0x1810, 0x55103}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 1m19.198367513s ago: executing program 7 (id=6095): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) (fail_nth: 1) 1m19.123167002s ago: executing program 69 (id=6095): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0x28) (fail_nth: 1) 3.049658778s ago: executing program 4 (id=7428): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) pivot_root(&(0x7f0000000480)='./file0/../file0\x00', &(0x7f0000000440)='./file0/../file0\x00') r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000280)="9be1b8ebdc", 0x5, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 2.973435728s ago: executing program 4 (id=7429): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.844206655s ago: executing program 4 (id=7430): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f00000001c0)}, 0x10) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0xffffffff80000001, 0x22a41) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000000c0)=""/145) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="aa", 0x1}], 0x1}, 0x0) 2.557443402s ago: executing program 2 (id=7434): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @multicast2, @initdev}, &(0x7f0000000440)=0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r0, 0x20, &(0x7f0000000700)={&(0x7f0000000580)=""/198, 0xc6, 0x0, &(0x7f0000000680)=""/102, 0x66}}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x57e00}], 0x2, 0x1200, 0x41001, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xaf, &(0x7f00000002c0)=""/175, 0x0, 0x8, '\x00', r2, @fallback=0x1e, r0, 0x8, &(0x7f0000000480)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x7}, 0x10, 0xffffffffffffffff, r0, 0x7, &(0x7f0000000780), &(0x7f00000007c0)=[{0x2, 0x4, 0xc, 0x7}, {0x2, 0x3, 0x4, 0xb}, {0x1, 0x2, 0x1, 0x1}, {0x3, 0x1, 0x10, 0x6047f294d55bc750}, {0x1, 0x3, 0x10, 0xe}, {0x0, 0x3, 0x8, 0xa}, {0x1, 0x3, 0xc, 0x5}], 0x10, 0x3}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) listxattr(0x0, 0x0, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) 1.826943125s ago: executing program 1 (id=7446): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r0, 0x0, 0x7ffff088) 1.783831481s ago: executing program 4 (id=7447): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0xffb, 0x100, 0x1, 0x10000, 0x2020009, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$HIDIOCSFLAG(r0, 0x4004480f, &(0x7f00000001c0)=0x2) r1 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'hsr0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'batadv_slave_0\x00', 0x2}, 0x18) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000580), 0x1008801, &(0x7f0000000000)=ANY=[@ANYBLOB="687567651b61647669736585501b80b85079"]) r2 = socket$unix(0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x28) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@init_itable}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x74e3}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") 1.783573731s ago: executing program 1 (id=7448): syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x20, &(0x7f00000002c0)='syz') setns(r1, 0x24020000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) syz_clone(0x50800000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.645197538s ago: executing program 1 (id=7449): r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x4, 0x0, 0x5}, 0x14) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lgetxattr(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)=""/145, 0x91) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000000010001007ee2ad2000002fe52379260f85fa2d0d1b27254a43d15b74f24742df563e77cf2ac9bfa099a0beb4131c47c17815a737c18edfbeefceb5af63df257fd5bbf9d345cb4d4129b80aa6", @ANYRES16=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000bdb2c5d5d8bd8570121f81810a24ba8a1c0a6c89ec86be81c5e2020"], 0x50) cachestat(r2, 0x0, 0x0, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) 1.614608842s ago: executing program 2 (id=7451): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="05"], 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001a0001"], 0x1c}}, 0x24000850) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x5, 0x3) pipe2$watch_queue(&(0x7f0000000640), 0x80) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.361737825s ago: executing program 4 (id=7452): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r0, &(0x7f0000000080)=[{0x1e, 0x0, 0x5, 0xfd, @tick=0x8, {0x0, 0x1}, {0xfd}, @result}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x5, 0xfc, 0xad, 0x10000}]}) r2 = socket$key(0xf, 0x3, 0x2) accept(r2, 0x0, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) rt_sigqueueinfo(r3, 0x36, &(0x7f0000000ac0)={0x1f, 0xc4, 0xff7ffffe}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0), 0x106, 0x2}}, 0x20) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0x8b25714e) r5 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) 1.289761084s ago: executing program 3 (id=7453): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x44, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0, 0x9}, {0x10}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'pimreg\x00'}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x200, 0x100) ioctl$LOOP_GET_STATUS(r5, 0x4c03, &(0x7f0000000040)) 1.289205124s ago: executing program 2 (id=7454): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x204801, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x3, &(0x7f0000000040)=0x1000000fff, 0x12) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 1.189934587s ago: executing program 3 (id=7455): r0 = syz_io_uring_setup(0x111, &(0x7f0000000100)={0x0, 0x2e1a, 0x2, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) (async) r2 = io_uring_setup(0x68f6, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x2f7}) close_range(r2, 0xffffffffffffffff, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r0, 0x7c00, 0x940a, 0x4, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f00000000c0)='./file0\x00', 0x8000, &(0x7f0000000380)=ANY=[@ANYBLOB="009e526ed666e975bf14f6514c82431bb631992969", @ANYRESOCT, @ANYRES32, @ANYRESOCT], 0x0, 0x25b, &(0x7f0000000980)="$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") (async) syz_read_part_table(0x5d1, &(0x7f0000000880)="$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") 1.159031701s ago: executing program 3 (id=7457): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0xae1}, 0x108012, 0x8, 0x800, 0x4, 0x3fe, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.069442482s ago: executing program 9 (id=7458): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}]}, &(0x7f0000000080)='GPL\x00', 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9543ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket(0x10, 0x3, 0x0) connect$netlink(r5, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x31, 0x829, 0xffffffff, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="015327bd7068dad3df2501"], 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 909.918843ms ago: executing program 9 (id=7459): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) 846.298011ms ago: executing program 9 (id=7460): syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_vs\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mount(&(0x7f0000000080)=@md0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='proc\x00', 0x20, &(0x7f00000002c0)='syz') setns(r1, 0x24020000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x50800000, 0x0, 0x0, 0x0, 0x0, 0x0) 633.173359ms ago: executing program 9 (id=7461): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2bc, &(0x7f00000000c0)="$eJzs3N9LU2Ecx/GvTuec6BZEUFB9qZu6Gbr+gBqhEA0Kc1JdBMc8q7HTJucMYxG5m+i2v0O67C6o/oC8iW66706CoBsvohOes6ObTptzv9T3C+R5dp7nw/N1TvlOOFu///ZZPuskskZJBiMqgyIV2RCJb86qBqrjoDcPS62KXB37/f38vQcPb6fS6elZ1ZnU3LWkqk5c/Pj85btLn0tj8+8nPozIWvzR+q/kj7Uza2fX/849zTnD4mihWFJDF4rFkrFgmbqYc/IJ1buWaTim5gqOadetZ63i0lJZjcLieHTJNh1HjUJZ82ZZS0Ut2WU1nhi5giYSCR2Pysk21MSezOrsrJHac9kNtbUidNxoo4u2nao0XsysdqEmAADQZ/bv//1ef+/+Pz3vjy31/5rbq/8XOXT//yXc/efyKKjUPfpP/x+INbwaaVtR6CjbThnR6u9vPfp/AAAAAAAAAAAAAAAAAAAAAACOgg3XjbmuGwvG4GukeoNH8LjXdaIzWvz5X+9RuWizmhv3IiLWm+XMcsYf/fVUVnJiiSmTEpM/3uuhyp/P3EpPT6onLp+slWp+ZTkTks3XUCosua3D4kF+wLsNzc9fODXl57U+PyzR2vOTEpPTjc9PNsyH5crlmnxCYvL1sRTFkkXv7O38qynVm3fSO/Kj3j4AAAAAAI6DhG7Z9f7dW/c2RGT3up8/wP8Hdry/HpJzzXxEJQAAAAAAODSn/CJvWJZptzAZEZFDxI/rJCR9UcaOyQ0R6YMyujWJiIh/RVuJ/9yKN5Vym9gzJCI9f1oOMOn1XyYAAAAA7bbd9B8g9O11BysCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafbzwIL9u5aChX3iNceFuv4NAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kXwAAAP//Q0EcXw==") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x141) socket$inet_sctp(0x2, 0x1, 0x84) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) 389.88743ms ago: executing program 4 (id=7462): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x801070cf, 0x0) futex(&(0x7f0000000180)=0x1, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x1, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0xd, 0x0, 0x0) 289.616223ms ago: executing program 1 (id=7463): socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0xffffffffffffffff}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000001c80)={[{@barrier_val}, {@resuid}, {@errors_remount}, {@usrjquota}]}, 0x1, 0x7b8, &(0x7f0000000980)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000002440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 269.986605ms ago: executing program 2 (id=7464): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000800)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r1, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xa6, 0x0, 0x3, 0x4, 0x0, 0xd, 0x8048, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x160d, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x2080, 0xbcbf, 0x9cb0, 0xa7f716706b4ce8c6, 0x9, 0x54b, 0xc6af, 0x0, 0xd7c, 0x0, 0x7}, 0x0, 0x1, r1, 0xa) flistxattr(r0, &(0x7f00000006c0)=""/209, 0xd1) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x15e8f65b, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8b02, 0x32, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r6, 0x12) r7 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r10 = fcntl$dupfd(r2, 0x406, r8) r11 = fcntl$getown(r8, 0x9) r12 = openat$cgroup(r9, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000640)={0x9200000, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000340), {0xb}, &(0x7f0000000380)=""/40, 0x28, &(0x7f00000003c0)=""/196, &(0x7f00000004c0)=[r6, r11, r6, r7, r6], 0x5, {r12}}, 0x58) write$tun(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="000022f0010107"], 0x140) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000005c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r13}}, 0x20) 178.140777ms ago: executing program 9 (id=7465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) (rerun: 64) r2 = syz_io_uring_complete(r1) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="0212000005020000fcffffff0000000001020900008000006bdae99676f5d98b222c1d175b1bde5f2af814867595cca148f284845d6726daecb906b52bcbe4a0671f0cfe91064a71252070eab7b079faae2437c1c6375c071120ac3c3dfb0e5500269ca1cd7c4713a0369feb90311ab8556d5bac400f5ffbe90545162b4d370163c56d991d223d5da19c52bdbff65404e119035c710bccfff638d731934ecdd791b655adfc821d0887903e07df64c986fa6fb88f4a7d0b3f81044ac984488238d0f3c48cf099ab574e73f1a68d600ab06ec38d634b447f1d4aad0dd4f056494500bab1d7792480ea186568121117e75c05a8bde6476b7304bb2b64f14f54921845a91f868fa925cf0a818b9bba4ea375d10464e94cba1fefd1cf5efc16c2e5c1cf9adb172617d21d333c27c4554adf58cd7508fe0eed1a11186e77fce9e4518b7280db2fc8acac72e4934e0ae31d2132afdb95c105813b90284c0f3bd48d2bae45cd2d03aeb092f6ad45692fc26c26909b57d12e3bf2024de3edce03c2dd8cf1081fbc181cb24fb432907ee893125e386edee1e48b5fb72dc536fd879fc356b5bff8ae29afeda341fbb0fbba2d1a133f05b1cac0479743ca5c562d8a9d0ddb7bee5282f97fea614ca3aab3c10d6d6a81f495737f3787737ade4f9af413bc0298d7364c46dbcacedb88aba3b4add5e20c7927ca485152618468c3d23edc4d9cd368d4791e555fd2b8ec465a838f331950b862e23a9d8291dc879d7ea58209a3372319c8a5f2db16e3ebd1e349eb699a79faa391f8cee02ba5e9d1bc0f71b4e912681dfe4716c490dbf06199553c3bac487a1f2964d2f5fd7f064807dd11c3ca2f12c7a3ec79362c247f63d20d3ca52f0474b47c40a394ddfed196dce0259bf849bcb86f2d4919522d46f87443998f7ed5e40da41a80428d3b6e3845a9b377b3c6577add73ead5d1dc4d3620b53818be04d9f7ba74600cf5b462a7ed38b53b701465a152983c8fabe301fc42bebcb7c631e94afec308dee54b51e9c1df0f446fcd47612e90a275e51516310c59eb67c1e3b2da93bd52a7c9c4135fdc36027aad74c3cfd5c6ca6f5ae914a7cab1a3a5d397422163c49c609f53bd370fdecb126cea447defd3d448dadf5079430c058cba11fbb17c14ea71f96091f9a5d3a034ae9b34ac7a0b1d4eca440a51e4cd265911eeba260345b28ac84c065553e9aace53f1f29aa6b80ef7c4070192e4c12cb4389c3476b1f0a69825fdf4de60e9d02266fe9f50cba35775b2103bf85b312b04f3c6bec4b67e1b642a6b9bbef45d28ea1af055bf3c6cc62cb571cfbc4229c7d5aa62a2ed3ce2f42666fa295c71f44263c703d207fb6925f303a3facbd7afa4dccb0b6c37cf8e8a3fdc8ed1cfff049b48a94e50a5631a75589317dbcfd154f16e7dddac2945baf059a2aa4b14b9ac1d411c81dc600343abf5e9c4750e190a5116bab2258d8f1d5e0d3ab740423267be7e21c2eac41ae2aefead42fd71f91c4c3694617fb7fc265a48c3b82eea6e57c90824914847f857deb94c810b34ad53a9824127c2fef4cc5d7fd23307dd90c01bc32c79c2344459a58442b59260d8e21dc41f0b54d5d5433b9fd44ba4803766cacfec5bb5fd1ca3ccbc7c11cfd7274b526b9b61a231499a83831b9be1f708cde614165ce3bd0ccd42ab401bcd35143199d43395107e240e61c3abbcbad69a53ec9205bc2946dab619214ae55dfc6aad9a72683cb84f489efd02f1d439d6abfc4a9d2588c4db6419a7dd6c2387461298941a1d8d5bf4c0e35d0294014f217985cca434d557899c3090c236efe06bc9f2c5dc46f67896d56450a0aa4b6b6247ce45c12a1f547825cbac09f13bb48200ee1f85b00a0ce88723c19449fe2bbe500861bb03dbc2ae489e9b3f5ddaea3b4459be8aebd66cdc054affa87d60e0e86bb0ce56f604f697c5be3cb868e6dad28e3366ef5b6e9a26f8e1ba44d700eda13fa3f589ae638843a8a98c157f25c5e88c3df285e1e70d32110614c51d0e0a74abc7800006cf0d1d3d66e84ec726edc5c52f26f702d182e702be580bf74670201ebeffecc62630b637320626cbac4e9e98c608252e3932da36804e3e1e3ec3bee53bcf0071088c84f2a014b0122dcd9507d6003e63e34d7b59807dd24907e17ba43b83af0b734d9861870f137464be924a415a7607d7c2936c9156f6bc604c51600c558cdf18fe73fffa575443a4174311ecab11cd96572306b00a8998c20bb3879c37c9d400b06f03fd7b54ab24cefc134176df98af05086839f83eeaa9efa3e7629bdb0bc8377020b040e86cf36ff9f2bcc788091c9285b423cc7670a8290c394db287b24533b508a7df6786d571e6be8cd989ea2d1b846a03f24fcdae10333f55461716292e0589efbf61462943b8c8544ac128c8ce01e99ae5ba81cf037e86e1f35271c405c640a8429bc189a749033b831ef71bfb05fa72d2da716f2d86046296f481e4364f7e033dcb4fed15eb0937a66b62143ad51e76242f4cf425d662eeeb179a46a059489c2bbdee163cf5ac3d0fb6441bf171a7c34bbbcf2e3a59e637d35f32301d9d4a85b2a1db1a5cb6fffa7ebec998674711fdfd49297d7ac33f5c89d0999172bc3dad8e76ac1f081e4c1bb755562ff5715361000f56fb464881dfe6abb4f039a139f8fb2e2dca14b895ad3ee1d2835e0cd47051ea34d855b7c8387ef1a85d94b851602cbdb2242a2afb59d26292be2ebbd8ca3b2866b293c1ef2048dd65addb63230643502ab8e9548dfee031ee8306344f89973dc22712ae6896ab40c61e6093c026524da15ca192b1ecd14ec10cebfea7faed1a9bae2be7edf9c53182805fa4af868751ff3758b9c4f7e877dc8e16475592c85bda5a62c1b38938ac3b7031773c06c5eb5539baeb0588e6ede91d2da317a1a823045e375bb4ac29d6dc75d228a4ade916671eccd320ee5c0298650b541d98c4d1e09ed841f1cffbf0c7551c5ae725ad0f77f612829a409becb4e60ccc3cbb80d77e8d9bac59cfcac2c8a4c857f862747473148d9089dc56ed827784a63390eeb78f791c75c4eb3a1efad0f75e062cc4948e4b1b67a373494b88ff819a695ceac580bdd7b2c63222a663432e31b8531ee74d34afa70266ffe08d6ab6439c1b442df9195bd1b729d9ebfa25f326e48f7104303120046b2f1eb45c59a415b68d9cc3f6ca68dadf64748393f4c1f4a5876173ef0c95ea73c682b05e9e05c9a8a1d65500106a980f0a0effa10b93a03715f40f851d122a15fd4b60740a711b1121c146bb59b740ccf8db57b2eee36e4c5a3c6aadaca73b9637cb21f1d87acd9b76885b8694a5d036b6e3dde6ceb589575b6414bef68ae179973b5e04012a3ad10c55f9049ccd757185583633543f556967796eeebb8348e969860fdeb9166f1a431d44a2ae6e73c75d3b891ea014ce2be631c9d1eb301c7043aa03b66218095c0375ed12090e5bc32c44e3ddfbbcbe48f8d396e489db24cd7d8779d659b48193b96374e2937d3087e911b4d1c70cef3b984a72f80ed2f17ef50aab6f5931c897367aa6dd86e8e93de921c611f112f676e34b4ee720f46434b2c70742c1af99bee1b0c72683cd840bbba4e75e3a0128d0ebf1010dea64f896ef3cfd82a73fe329ce53b63697cb7bc0c03e127fd59d3241646f62a25ceb692d9e469c649dec8b693975d718d89394345b684ea2507d295422c88892de4e69c71e2dbf6bfd160a1c20b63e6e21b73d6bb14377ce3578664196f7ab33be87d3fe5772415361f857f6128b7ecd261638f4133f6384b1e2ba1c045985636e818e622460d4ef2af43267efb71168a92d22ec6b337158d3bcff2f0913ece4258ba89b5e19f8cae9c7f87ac8d051247f3635f398404f1d9fb1ace4082dd6897024070dddd7942b566d3f7f2a4fd9ec148397ddb814057c66b738f45ccb08f2f9ed8c5c8735a9c6938b7c5260a8cb0cbfd2bb9656592b4a70f368ecdcc8fdfcd52ad0ea0b9c3152147e9e441519eb1a69bc1b216fda362376ce23729bd384e8579c37aadf759b6c23ea54bfde28652d0b37cbcea221da9125919212cbad64e4aec3075bb70cc7eca71a25cb2a77c898fd775d74d61dcfcbff9d4d20102f3b5c804ccc3bb711b88140508a8802dcb205ebff54cbd9af252f36cf44b2337c382a7562ad6fc035313bff7f7d30a45fe01a083fb744460147a3a4b34b8dcc047607f38ba6b927c93872830e8d0c84031889b29afc2ef3944c4c0a3f3060f337bf0da8c7209e79a81f09330ecbf0024dcf85f7e4ec644867f5343f259825b1f421c51d30f3da87bbcb67946f133c6a4add120054b1b8a16a12a58352d37425f68d55e8e3a0391ed03085fef286214f51ab917906b2b9fcbf6ef85e04ba368f8811f9ec5a3a112c1b498f553e6659ed41b10ad141d921cca6878c7e1960380a2d0f86226f6b7e95a9639b41be4f73c392d3e7b133cfc2009f6a02edcfeb11bd2c84b3fcf50d4cb0d49f770ae2c71c73c766d327fb0c8d79c9908e1f7292eff8657f0ff0542df3127613c31cc2387d270b9510bd0a9709d80ed781b828d3a0f92df1be687206d572066d44b9afcf6b440b7298bf30f657fd9f986debea4f23032f37d711859854a134e7ad44613643eb7104e624e0bc34dddc2dd0ecee2bd04a87b03e06864710c51d561f28718c88ddc35dcbf23f1c5f0ef8149e24949e1d50572f039da9ef0fd29934fc6c7bcc9c44771b0d8c1dd739796eedd036abd78f4f26da1bb680138f9191eac4669d84e4866974257d8438f3253198b0478d33c325f633aaf85d9e6056766d1a17fa6cc1e1d639cf59dd06c1d8c1f4d48ea9ab2c3cc08fa812821eda5f32f17e808c14002aa846ee6f18177d27e6f715462e5562f0f7afbe6f5fa6ec031536b478733270175d928a46bc23cf14ed073854afd5032a8bef43d4c5664e159ffa7e9cdef4fe17c2c5ef36c6e6ddf342d16ce207cfe09b8067f2e48c6bae69b620d8be76725200b63522d766517203c6641e7d891469bf239c7a48d14f7c690e182c4f6a1fd02f2aa1b97dbecb8e120cc0fbd374ff598c53cb505698f94429466b97acb1a0232169e0e19e9ad7e3a41ee63e3b9ddcc0d40385c3d5acbb51e1987821de029bd9dc1fabd200a2e55bf786c52ae9ffc335d8a82e9156705ebfaff0992c1f5bca9d0d020834fea9163fcb691bf06deb6f92b76e2c21b3fa1625910846f3c715cbfb7de75209aec43c1a9acd2b4f833ac3a3883ba23349aa2a439871764c54ac8842a4a10280ff498072928aa1b4ced9ab3d9d27e4b5fab13bb979788848f7a4239896fe73a176a38766ed7fa1e84e88efb12a9c75c2e4431396b192b9dc4fa92343a702538feef01ae577fa443f4b50666bb87fc62577045963e8168981e1b6063b7454345a84dfdb278a4090d155220a18fd21e90a2c84943d947f5079aaa3e04364ffeb8a804df0f6e3c1b45782fcd5a4535940f26636ee79188ccb2ba071e0c832d9e9a9a391e0992e0f6965100ad2e6608d5db25847b2aa794ea6ee9b7687a1f9357320d073d06db8c38fbdc1be781bf53d05a5deeeb9e8d8ff66876b3a88b309d27bb83f8b3390947fd97c9f9ea41b215803088ac254cdab849291ed081e4a0cfd611fb7819d50753121bdda8770ad38d84bfadd9da9d7e9ffa5b9af3b9b8c13d7f73d920173137a6d4d17f2a2d0605926a68623947ee798dffe22746288195a718ae5dbfcc03b7da8a8ff0aa40c133b56c0c3ee95dd1dfaadafbdb37dc17ec84b0a0ce29ad46d50ef4fde31b6ba31c76498091fea2ef0c785be2daf492121dbc2101fd102000a"], 0x1028}}, 0x20000050) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (rerun: 64) setresuid(r5, r5, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000280)=@allocspi={0x2c4, 0x16, 0x400, 0x70bd27, 0x25dfdbfc, {{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0x4e20, 0x5, 0x4e23, 0xffff, 0xa, 0x20, 0x20, 0x2f, r4, r5}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d6, 0x32}, @in6=@mcast2, {0x5dd0, 0xf, 0x0, 0x5, 0x4, 0xfffffffffffffff0, 0x4, 0x7}, {0x8, 0x4, 0x5, 0x3}, {0x4, 0x0, 0x9}, 0x70bd2c, 0x3505, 0xa, 0x3, 0x9, 0x1}, 0x8, 0x8}, [@sec_ctx={0x46, 0x8, {0x42, 0x8, 0x0, 0x6, 0x3a, "965b9621e5ad6aac5c5f73f4ed38d3802f889a24d1d3871b97843867a82a692aff73550fc882fd6b3ad07ae8df1e9f70e364d8f8b6ed033b6628"}}, @tmpl={0x184, 0x5, [{{@in=@local, 0x4d3, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x3506, 0x1, 0x1, 0xf9, 0x80000000, 0x101}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x2b}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x5, 0x0, 0x2, 0xd, 0x5, 0x8001, 0xd16}, {{@in=@loopback, 0x4d3, 0x101}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x3507, 0x2, 0x3, 0x9, 0x40, 0x2, 0x495d3fc3}, {{@in6=@local, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3501, 0x3, 0x1, 0x1, 0xfffffffd, 0x3ff, 0xe}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x32}, 0x0, @in=@multicast1, 0x0, 0x3, 0x1, 0x32, 0x4, 0x10000, 0x6488}, {{@in=@dev={0xac, 0x14, 0x14, 0xf7}, 0x4d3, 0x32}, 0xa, @in6=@local, 0x3504, 0x3, 0x1, 0x1, 0x401, 0x1}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x48000}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x70}, 0x1, 0x0, 0x0, 0x400c084}, 0x4000020) 177.555557ms ago: executing program 1 (id=7466): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 174.392507ms ago: executing program 3 (id=7467): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001a1401000000000000000000080003000000000008"], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000240)=0x8, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x2c}}, 0x20000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001080)={'syzkaller0\x00', 0x4000}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691073000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r6], 0x38}}, 0x0) 82.853789ms ago: executing program 9 (id=7468): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0xfd, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x20) prlimit64(0x0, 0x2, 0x0, 0x0) brk(0x5d555ede6000) (fail_nth: 8) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000"], 0x48) 82.340139ms ago: executing program 1 (id=7469): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file1\x00', 0x2000494, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d649ba4afab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3"], 0x1, 0x2bc, &(0x7f00000000c0)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40041, 0x141) socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x1494) 72.183061ms ago: executing program 2 (id=7470): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000440)=@ethtool_ringparam={0xe, 0x0, 0x200, 0x0, 0x0, 0x1002, 0x80000000}}) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000140)="e600deff010000e7efffdd6ab53e2a6b020000004218dca0b784b91135c59b4c710e289a231401efd386821acfd2f961e07f60b040729e021af7757612abd99a0bf41b84562e0dd7218f704ffaac98054189f336a526e4ae5e16358410960998fe516104c63c64fcddfcffc1edbb96ccb90696fd568a1c07348e5179d5b60af4107912f89623cee0cc704b9dcaa4ffea922b8727a6eacdcfb5dc9a728ff78f73798296a616bfb168422667f3b8488a1d2deff2b0beb9f6f10228609eb9630331a97b0c577542f43be0d7e84a324b74add54b2a56207a0269dbcb5d06edf844a5fd0ef15f37a1326375c8381159cc1acbc7c7f5674eaafdcfbe9ebc32339b4094dedb46b034ef2434240c14064e1a9602a81b0f45eb374c734fa5cc7b23f53c51", 0x120, 0xffffffffffffffff) r1 = timerfd_create(0x9, 0x80000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) timerfd_settime(r1, 0x1, &(0x7f0000000040)={{r2, r3+60000000}}, &(0x7f00000000c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000024c0)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x94) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x5) 52.808453ms ago: executing program 3 (id=7471): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x800002, 0x800) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) 4.171359ms ago: executing program 2 (id=7472): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x30000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setns(0xffffffffffffffff, 0x66020000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000000514010029bd7000fbdbdf250800010001000091050003"], 0x20}, 0x1, 0x0, 0x0, 0x2004c000}, 0x2000c016) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000004000000660000000000000018000000000000000000000000000400950000000080000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00'}, 0x94) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}], 0x1, 0x4, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') stat(&(0x7f00000034c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 3 (id=7473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000040000a60000000060a0b0400000000000000000200fffe2c00048028000180090001006c61737400000000180002800c00024000000000000000020800014000000fff0900010073797a300000000018000200737990320000000006000740e3c3000014000000000000000000000500000a0000000000"], 0x88}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYRES32=r0], 0x1c}}, 0x0) unshare(0x6a040000) unshare(0x68040200) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000001c0)={'filter\x00', 0x0, [0x47f, 0x7, 0x20000002, 0x1, 0x10005]}, &(0x7f0000000000)=0x54) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0x5}, {0x0, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xb, [0x5, 0x4, 0x3, 0x8, 0xd, 0x0, 0xc, 0x0, 0x0, 0x10, 0xf, 0x3, 0x0, 0x8, 0xb, 0xb], 0x0, [0xe8, 0x2, 0x7, 0x0, 0x8b, 0x20f6, 0x7, 0xff, 0x7fff, 0x2, 0x4, 0x7, 0x1, 0x7, 0x4, 0x80], [0x800, 0x4, 0xc8, 0x8, 0xfff9, 0xfff9, 0x7, 0xc6, 0x69ea, 0x6, 0x2, 0x5, 0x6, 0x0, 0x803, 0x46d2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40002}, 0x2000400c) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x10, 0xa96c) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0xfffffff6) kernel console output (not intermixed with test programs): 32546][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.437826][T28137] loop4: detected capacity change from 0 to 8192 [ 432.540222][T28150] loop4: detected capacity change from 0 to 512 [ 432.627558][T28151] syzkaller0: entered promiscuous mode [ 432.633167][T28151] syzkaller0: entered allmulticast mode [ 432.647804][T28158] 8021q: VLANs not supported on caif0 [ 432.684986][T28162] loop9: detected capacity change from 0 to 4096 [ 432.705926][T28162] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.825911][T28175] loop2: detected capacity change from 0 to 1024 [ 432.840141][T28175] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.848186][T28175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.857347][T28175] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 432.872858][T28175] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.6858: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 432.895697][T28175] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.6858: couldn't read orphan inode 11 (err -117) [ 432.936206][T28178] loop4: detected capacity change from 0 to 8192 [ 432.945480][T28175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.962607][T28175] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6858: Invalid block bitmap block 0 in block_group 0 [ 432.963093][T27750] tipc: Node number set to 10463914 [ 432.981626][T28175] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6858: Failed to acquire dquot type 0 [ 432.994510][T28175] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz.2.6858: Invalid inode table block 8589934593 in block_group 0 [ 433.029672][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 433.120854][ T31] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm kworker/u8:1: Invalid inode table block 8589934593 in block_group 0 [ 433.142768][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.173260][T28190] loop3: detected capacity change from 0 to 512 [ 433.204579][T28192] loop2: detected capacity change from 0 to 1024 [ 433.219710][T28192] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.245370][T28196] FAULT_INJECTION: forcing a failure. [ 433.245370][T28196] name failslab, interval 1, probability 0, space 0, times 0 [ 433.258215][T28196] CPU: 1 UID: 0 PID: 28196 Comm: syz.3.6866 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 433.258253][T28196] Tainted: [W]=WARN [ 433.258295][T28196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.258454][T28196] Call Trace: [ 433.258464][T28196] [ 433.258475][T28196] __dump_stack+0x1d/0x30 [ 433.258506][T28196] dump_stack_lvl+0x95/0xd0 [ 433.258534][T28196] dump_stack+0x15/0x1b [ 433.258555][T28196] should_fail_ex+0x263/0x280 [ 433.258609][T28196] should_failslab+0x8c/0xb0 [ 433.258706][T28196] kmem_cache_alloc_noprof+0x68/0x490 [ 433.258729][T28196] ? getname_flags+0x7f/0x3b0 [ 433.258755][T28196] getname_flags+0x7f/0x3b0 [ 433.258779][T28196] path_setxattrat+0x223/0x310 [ 433.258891][T28196] __x64_sys_lsetxattr+0x71/0x90 [ 433.258975][T28196] x64_sys_call+0x2ef0/0x3000 [ 433.259001][T28196] do_syscall_64+0xc0/0x2a0 [ 433.259032][T28196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.259058][T28196] RIP: 0033:0x7f141401acb9 [ 433.259075][T28196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.259094][T28196] RSP: 002b:00007f1412a77028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 433.259131][T28196] RAX: ffffffffffffffda RBX: 00007f1414295fa0 RCX: 00007f141401acb9 [ 433.259208][T28196] RDX: 0000200000000280 RSI: 0000200000000000 RDI: 0000200000000400 [ 433.259222][T28196] RBP: 00007f1412a77090 R08: 0000000000000000 R09: 0000000000000000 [ 433.259235][T28196] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 433.259292][T28196] R13: 00007f1414296038 R14: 00007f1414295fa0 R15: 00007ffc4a592268 [ 433.259312][T28196] [ 433.259886][T28192] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 433.452336][T28192] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 433.482717][T28192] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6863: bad orphan inode 11 [ 433.507091][T28192] ext4_test_bit(bit=10, block=4) = 1 [ 433.512575][T28192] is_bad_inode(inode)=0 [ 433.516867][T28192] NEXT_ORPHAN(inode)=3254779904 [ 433.521758][T28192] max_ino=32 [ 433.525106][T28192] i_nlink=0 [ 433.528878][T28192] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.6863: lblock 2 mapped to illegal pblock 2 (length 1) [ 433.543175][T28192] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.6863: lblock 0 mapped to illegal pblock 48 (length 1) [ 433.558374][T28192] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.6863: Failed to acquire dquot type 0 [ 433.570338][T28208] __nla_validate_parse: 9 callbacks suppressed [ 433.570358][T28208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 433.570346][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.576633][T28208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6870'. [ 433.603429][T28208] netlink: 'syz.1.6870': attribute type 19 has an invalid length. [ 433.611430][T28208] netlink: 'syz.1.6870': attribute type 20 has an invalid length. [ 433.624623][T28192] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 433.659800][T28192] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.6863: mark_inode_dirty error [ 433.680402][T28192] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 433.704087][T28192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.717357][T28192] FAULT_INJECTION: forcing a failure. [ 433.717357][T28192] name failslab, interval 1, probability 0, space 0, times 0 [ 433.730196][T28192] CPU: 0 UID: 0 PID: 28192 Comm: syz.2.6863 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 433.730301][T28192] Tainted: [W]=WARN [ 433.730311][T28192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.730328][T28192] Call Trace: [ 433.730337][T28192] [ 433.730347][T28192] __dump_stack+0x1d/0x30 [ 433.730372][T28192] dump_stack_lvl+0x95/0xd0 [ 433.730394][T28192] dump_stack+0x15/0x1b [ 433.730500][T28192] should_fail_ex+0x263/0x280 [ 433.730532][T28192] should_failslab+0x8c/0xb0 [ 433.730618][T28192] __kmalloc_noprof+0xb8/0x580 [ 433.730692][T28192] ? ext4_find_extent+0x16b/0x7a0 [ 433.730726][T28192] ext4_find_extent+0x16b/0x7a0 [ 433.730783][T28192] ext4_ext_map_blocks+0x128/0x38a0 [ 433.730816][T28192] ? obj_cgroup_charge_account+0x122/0x1a0 [ 433.730858][T28192] ? avc_has_perm_noaudit+0xab/0x130 [ 433.730887][T28192] ? avc_has_perm+0x101/0x190 [ 433.730983][T28192] ext4_map_query_blocks+0xae/0x550 [ 433.731016][T28192] ? ext4_es_lookup_extent+0x3ac/0x540 [ 433.731096][T28192] ext4_map_blocks+0x398/0xd70 [ 433.731141][T28192] ? _parse_integer+0x27/0x40 [ 433.731168][T28192] ext4_readdir+0x602/0x1f40 [ 433.731193][T28192] ? kstrtouint+0x76/0xc0 [ 433.731224][T28192] ? proc_fail_nth_write+0x13b/0x160 [ 433.731328][T28192] iterate_dir+0x114/0x330 [ 433.731370][T28192] __se_sys_getdents64+0xd2/0x230 [ 433.731412][T28192] ? __pfx_filldir64+0x10/0x10 [ 433.731546][T28192] __x64_sys_getdents64+0x43/0x50 [ 433.731648][T28192] x64_sys_call+0x2f27/0x3000 [ 433.731706][T28192] do_syscall_64+0xc0/0x2a0 [ 433.731730][T28192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.731813][T28192] RIP: 0033:0x7f535680acb9 [ 433.731835][T28192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.731860][T28192] RSP: 002b:00007f5355267028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 433.731885][T28192] RAX: ffffffffffffffda RBX: 00007f5356a85fa0 RCX: 00007f535680acb9 [ 433.731983][T28192] RDX: 000000000000004f RSI: 0000000000000000 RDI: 0000000000000004 [ 433.732035][T28192] RBP: 00007f5355267090 R08: 0000000000000000 R09: 0000000000000000 [ 433.732048][T28192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.732061][T28192] R13: 00007f5356a86038 R14: 00007f5356a85fa0 R15: 00007ffc0af4ffd8 [ 433.732094][T28192] [ 433.773441][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.910536][T28218] loop9: detected capacity change from 0 to 2048 [ 433.961631][T25580] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 434.002675][T25580] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 434.013531][T25580] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 434.026533][T28218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.050180][T28218] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6877'. [ 434.097844][T28218] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6877'. [ 434.165252][T28233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.220825][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.296179][T28242] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.6883'. [ 434.381490][T28251] FAT-fs (loop4): bogus number of directory entries (390) [ 434.388884][T28251] FAT-fs (loop4): Can't find a valid FAT filesystem [ 434.390212][T28249] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 434.442842][T28251] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 434.466758][T28249] EXT4-fs (loop9): orphan cleanup on readonly fs [ 434.474267][T28251] SELinux: failed to load policy [ 434.519492][T28249] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.6886: bg 0: block 104: invalid block bitmap [ 434.561942][T28249] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 434.586459][T28249] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6886: invalid indirect mapped block 1 (level 1) [ 434.599976][T28255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.618674][T28249] EXT4-fs (loop9): 1 truncate cleaned up [ 434.631624][T28249] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 434.735497][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.884909][T28272] syzkaller1: entered promiscuous mode [ 434.890497][T28272] syzkaller1: entered allmulticast mode [ 434.944005][T28274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.969180][T19422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.992464][T28274] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 435.033932][T28274] System zones: 1-2, 4-12, 8-8 [ 435.039399][T28274] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.6896: iget: bad i_size value: 38620345925642 [ 435.085542][T28274] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.6896: couldn't read orphan inode 15 (err -117) [ 435.098366][T28274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.125586][T28281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6897'. [ 435.134531][T28281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6897'. [ 435.143514][T28281] netlink: 'syz.3.6897': attribute type 19 has an invalid length. [ 435.151477][T28281] netlink: 'syz.3.6897': attribute type 20 has an invalid length. [ 435.173937][T28271] process '/newroot/193/file0' started with executable stack [ 435.179272][T28283] FAT-fs (loop2): bogus number of directory entries (390) [ 435.188784][T28283] FAT-fs (loop2): Can't find a valid FAT filesystem [ 435.197720][T28283] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 435.208270][T28283] SELinux: failed to load policy [ 435.271147][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.288448][T28285] syzkaller0: entered promiscuous mode [ 435.294039][T28285] syzkaller0: entered allmulticast mode [ 435.302833][T28287] 8021q: VLANs not supported on caif0 [ 435.395794][T28289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.437504][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.450784][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6902'. [ 435.501964][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6902'. [ 435.547842][T28300] netlink: 'syz.1.6906': attribute type 3 has an invalid length. [ 435.624087][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.697200][T28306] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.847658][T28316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.888332][T28316] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 435.904626][T28321] batman_adv: batadv0: Interface deactivated: dummy0 [ 435.911441][T28321] batman_adv: batadv0: Removing interface: dummy0 [ 435.932326][T28322] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.945942][T28321] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 435.965079][T28316] System zones: 1-2, 4-12, 8-8 [ 435.970490][T28316] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6912: iget: bad i_size value: 38620345925642 [ 435.983714][T28316] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6912: couldn't read orphan inode 15 (err -117) [ 435.997029][T28322] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.997231][T28316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.023716][T28322] 9p: Bad value for 'rfdno' [ 436.034694][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 436.034710][ T29] audit: type=1326 audit(1768823030.219:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.073051][ T29] audit: type=1326 audit(1768823030.219:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.088245][T28321] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6913'. [ 436.096766][ T29] audit: type=1326 audit(1768823030.219:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.129387][ T29] audit: type=1326 audit(1768823030.219:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.152930][ T29] audit: type=1326 audit(1768823030.219:6297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.176721][ T29] audit: type=1326 audit(1768823030.219:6298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.200288][ T29] audit: type=1326 audit(1768823030.219:6299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.224171][ T29] audit: type=1326 audit(1768823030.219:6300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.247847][ T29] audit: type=1326 audit(1768823030.219:6301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.271526][ T29] audit: type=1326 audit(1768823030.219:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28315 comm="syz.4.6912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5359daacb9 code=0x7ffc0000 [ 436.369531][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.500164][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.511191][T28336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.661725][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.783577][T28343] set_capacity_and_notify: 11 callbacks suppressed [ 436.783638][T28343] loop4: detected capacity change from 0 to 1024 [ 436.814242][T28343] EXT4-fs: Ignoring removed orlov option [ 436.820009][T28343] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.826545][T28343] EXT4-fs: inline encryption not supported [ 436.832808][T28343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 436.865602][T28343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.894934][T28361] loop3: detected capacity change from 0 to 512 [ 436.908731][T28362] netlink: 'syz.2.6923': attribute type 19 has an invalid length. [ 436.916751][T28362] netlink: 'syz.2.6923': attribute type 20 has an invalid length. [ 436.940892][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.064004][T28367] 8021q: VLANs not supported on caif0 [ 437.158838][T28370] loop4: detected capacity change from 0 to 8192 [ 437.241218][T28378] nr0: tun_chr_ioctl cmd 1074812118 [ 437.308957][T28386] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 437.319685][T28390] loop4: detected capacity change from 0 to 512 [ 437.392818][T28399] netlink: 'syz.1.6942': attribute type 9 has an invalid length. [ 437.473966][T28413] loop4: detected capacity change from 0 to 512 [ 437.487253][T28413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 437.508447][T28413] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 437.518380][T28412] loop9: detected capacity change from 0 to 256 [ 437.522283][T28413] System zones: 1-2, 4-12, 8-8 [ 437.530589][T28413] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.6947: iget: bad i_size value: 38620345925642 [ 437.557779][T28413] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.6947: couldn't read orphan inode 15 (err -117) [ 437.570832][T28413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.637223][T28425] bridge_slave_0: left allmulticast mode [ 437.643092][T28425] bridge_slave_0: left promiscuous mode [ 437.648932][T28425] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.657574][T28425] bridge_slave_1: left allmulticast mode [ 437.663382][T28425] bridge_slave_1: left promiscuous mode [ 437.669246][T28425] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.688944][T28427] loop2: detected capacity change from 0 to 512 [ 437.697542][T28425] bond0: (slave bond_slave_0): Releasing backup interface [ 437.709053][T28425] bond0: (slave bond_slave_1): Releasing backup interface [ 437.723446][T28425] team0: Port device team_slave_0 removed [ 437.737928][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.748705][T28425] team0: Port device team_slave_1 removed [ 437.766700][T28425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.786942][T28425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.794612][T28425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 437.965855][T28455] loop9: detected capacity change from 0 to 512 [ 437.984474][T28455] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 438.000105][T28455] EXT4-fs (loop9): mount failed [ 438.016522][T28459] netlink: 'syz.2.6965': attribute type 19 has an invalid length. [ 438.024439][T28459] netlink: 'syz.2.6965': attribute type 20 has an invalid length. [ 438.044134][T28461] netlink: 'syz.4.6967': attribute type 3 has an invalid length. [ 438.143879][T28470] loop9: detected capacity change from 0 to 512 [ 438.168149][T28470] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.196347][T28470] ext4 filesystem being mounted at /218/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 438.243923][T28470] EXT4-fs error (device loop9): ext4_lookup:1785: inode #12: comm syz.9.6971: iget: bad i_size value: 2533274857506816 [ 438.300934][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.343898][T28489] __nla_validate_parse: 14 callbacks suppressed [ 438.343917][T28489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6979'. [ 438.413298][T28493] loop3: detected capacity change from 0 to 2048 [ 438.460660][T28493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.474398][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 438.491264][T28493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 438.528093][T19422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.578492][T28508] netlink: 'syz.9.6984': attribute type 3 has an invalid length. [ 438.686467][T28513] SELinux: failed to load policy [ 438.776352][T28521] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 438.803033][T28521] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 438.834939][T28521] 9p: Bad value for 'rfdno' [ 439.029416][T28534] syz.3.6993 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 439.040567][T28534] CPU: 0 UID: 0 PID: 28534 Comm: syz.3.6993 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 439.040600][T28534] Tainted: [W]=WARN [ 439.040608][T28534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.040638][T28534] Call Trace: [ 439.040645][T28534] [ 439.040654][T28534] __dump_stack+0x1d/0x30 [ 439.040679][T28534] dump_stack_lvl+0x95/0xd0 [ 439.040703][T28534] dump_stack+0x15/0x1b [ 439.040729][T28534] dump_header+0x80/0x240 [ 439.040833][T28534] oom_kill_process+0x295/0x350 [ 439.040864][T28534] out_of_memory+0x97d/0xb80 [ 439.040895][T28534] try_charge_memcg+0x62e/0xa10 [ 439.040940][T28534] charge_memcg+0x51/0xc0 [ 439.041016][T28534] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 439.041060][T28534] __read_swap_cache_async+0x17b/0x2d0 [ 439.041093][T28534] swap_cluster_readahead+0x362/0x3c0 [ 439.041165][T28534] swapin_readahead+0xde/0x840 [ 439.041203][T28534] ? __rcu_read_unlock+0x33/0x70 [ 439.041228][T28534] ? __rcu_read_unlock+0x4e/0x70 [ 439.041247][T28534] ? swap_cache_get_folio+0x26f/0x280 [ 439.041345][T28534] do_swap_page+0x2f4/0x2140 [ 439.041380][T28534] ? css_rstat_updated+0xbb/0x280 [ 439.041439][T28534] ? __pfx_default_wake_function+0x10/0x10 [ 439.041524][T28534] handle_mm_fault+0xb40/0x3030 [ 439.041572][T28534] ? vma_start_read+0x1c7/0x2c0 [ 439.041606][T28534] do_user_addr_fault+0x62f/0x1050 [ 439.041661][T28534] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 439.041684][T28534] ? irqentry_exit+0x3c/0x510 [ 439.041716][T28534] exc_page_fault+0x62/0xa0 [ 439.041805][T28534] asm_exc_page_fault+0x26/0x30 [ 439.041828][T28534] RIP: 0033:0x7f1413ee0f1f [ 439.041848][T28534] Code: 8d 04 c0 48 c1 e0 04 48 83 7c 02 28 00 74 0f 48 8b 44 24 08 c7 80 90 00 00 00 16 00 00 00 48 8b 44 24 08 80 3d c6 47 ee 00 00 80 e8 00 00 00 00 0f 85 24 02 00 00 48 8b 44 24 08 8b 50 78 c6 [ 439.041871][T28534] RSP: 002b:00007f1412a35050 EFLAGS: 00010202 [ 439.041890][T28534] RAX: 00007f1414296180 RBX: 00007f1414296180 RCX: 00007f1414296180 [ 439.041906][T28534] RDX: 00007f1414136920 RSI: 00002000000009c0 RDI: 0000000000000000 [ 439.041919][T28534] RBP: 00007f1414088bf7 R08: 0000000000000000 R09: 0000000000000000 [ 439.042004][T28534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.042020][T28534] R13: 00007f1414296218 R14: 00007f1414296180 R15: 00007ffc4a592268 [ 439.042044][T28534] [ 439.042062][T28534] memory: usage 297320kB, limit 307200kB, failcnt 1549 [ 439.280274][T28534] memory+swap: usage 138268kB, limit 9007199254740988kB, failcnt 0 [ 439.288256][T28534] kmem: usage 131968kB, limit 9007199254740988kB, failcnt 0 [ 439.295624][T28534] Memory cgroup stats for /syz3: [ 439.298957][T28534] cache 0 [ 439.306957][T28534] rss 4096 [ 439.310067][T28534] shmem 0 [ 439.313122][T28534] mapped_file 208896 [ 439.317307][T28534] dirty 0 [ 439.320360][T28534] writeback 0 [ 439.323662][T28534] workingset_refault_anon 272 [ 439.328459][T28534] workingset_refault_file 8 [ 439.332981][T28534] swap 868352 [ 439.336399][T28534] swapcached 8192 [ 439.340088][T28534] pgpgin 240163 [ 439.343594][T28534] pgpgout 240157 [ 439.347231][T28534] pgfault 290702 [ 439.350797][T28534] pgmajfault 68 [ 439.354272][T28534] inactive_anon 0 [ 439.357983][T28534] active_anon 4096 [ 439.361725][T28534] inactive_file 0 [ 439.365405][T28534] active_file 16384 [ 439.369324][T28534] unevictable 0 [ 439.372837][T28534] hierarchical_memory_limit 314572800 [ 439.378285][T28534] hierarchical_memsw_limit 9223372036854771712 [ 439.384509][T28534] total_cache 0 [ 439.387989][T28534] total_rss 4096 [ 439.391552][T28534] total_shmem 0 [ 439.395079][T28534] total_mapped_file 208896 [ 439.399536][T28534] total_dirty 0 [ 439.403066][T28534] total_writeback 0 [ 439.406960][T28534] total_workingset_refault_anon 272 [ 439.412743][T28534] total_workingset_refault_file 8 [ 439.417874][T28534] total_swap 868352 [ 439.421766][T28534] total_swapcached 8192 [ 439.425941][T28534] total_pgpgin 240163 [ 439.429943][T28534] total_pgpgout 240157 [ 439.434084][T28534] total_pgfault 290702 [ 439.438175][T28534] total_pgmajfault 68 [ 439.442257][T28534] total_inactive_anon 0 [ 439.446434][T28534] total_active_anon 4096 [ 439.450769][T28534] total_inactive_file 0 [ 439.454970][T28534] total_active_file 16384 [ 439.459363][T28534] total_unevictable 0 [ 439.463489][T28534] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6993,pid=28528,uid=0 [ 439.478421][T28534] Memory cgroup out of memory: Killed process 28528 (syz.3.6993) total-vm:94264kB, anon-rss:1204kB, file-rss:22156kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 439.531405][T28544] netlink: 'syz.9.6999': attribute type 3 has an invalid length. [ 439.621707][T28549] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6996'. [ 439.635405][T28551] FAULT_INJECTION: forcing a failure. [ 439.635405][T28551] name failslab, interval 1, probability 0, space 0, times 0 [ 439.648173][T28551] CPU: 0 UID: 0 PID: 28551 Comm: syz.2.7003 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 439.648258][T28551] Tainted: [W]=WARN [ 439.648267][T28551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 439.648364][T28551] Call Trace: [ 439.648373][T28551] [ 439.648436][T28551] __dump_stack+0x1d/0x30 [ 439.648525][T28551] dump_stack_lvl+0x95/0xd0 [ 439.648554][T28551] dump_stack+0x15/0x1b [ 439.648629][T28551] should_fail_ex+0x263/0x280 [ 439.648660][T28551] should_failslab+0x8c/0xb0 [ 439.648761][T28551] __kvmalloc_node_noprof+0x148/0x680 [ 439.648801][T28551] ? do_getxattr+0xa2/0x2b0 [ 439.648831][T28551] do_getxattr+0xa2/0x2b0 [ 439.648861][T28551] path_getxattrat+0x22b/0x2a0 [ 439.648944][T28551] __x64_sys_fgetxattr+0x59/0x70 [ 439.648974][T28551] x64_sys_call+0x1592/0x3000 [ 439.649003][T28551] do_syscall_64+0xc0/0x2a0 [ 439.649084][T28551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.649111][T28551] RIP: 0033:0x7f535680acb9 [ 439.649132][T28551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.649156][T28551] RSP: 002b:00007f5355267028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 439.649181][T28551] RAX: ffffffffffffffda RBX: 00007f5356a85fa0 RCX: 00007f535680acb9 [ 439.649213][T28551] RDX: 0000200000000340 RSI: 00002000000000c0 RDI: 0000000000000004 [ 439.649227][T28551] RBP: 00007f5355267090 R08: 0000000000000000 R09: 0000000000000000 [ 439.649239][T28551] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 439.649255][T28551] R13: 00007f5356a86038 R14: 00007f5356a85fa0 R15: 00007ffc0af4ffd8 [ 439.649281][T28551] [ 439.919511][T28561] sctp: [Deprecated]: syz.3.7005 (pid 28561) Use of int in maxseg socket option. [ 439.919511][T28561] Use struct sctp_assoc_value instead [ 440.070627][T28557] tipc: Resetting bearer [ 440.220382][ T2951] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.229593][ T2951] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.271828][ T2951] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.280938][ T2951] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.333277][ T2951] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.342641][ T2951] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.352143][ T2951] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.361133][ T2951] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.446558][T28578] macsec1: entered promiscuous mode [ 440.458132][T28578] dummy0: entered promiscuous mode [ 440.463709][T28578] macsec1: entered allmulticast mode [ 440.497996][T28578] dummy0: entered allmulticast mode [ 440.592779][T28588] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 440.605787][T28588] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 440.646428][T28590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 440.662774][T28590] EXT4-fs (loop4): 1 truncate cleaned up [ 440.675134][T28588] 9p: Bad value for 'rfdno' [ 440.679676][T28590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.724738][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.851057][T28602] FAULT_INJECTION: forcing a failure. [ 440.851057][T28602] name failslab, interval 1, probability 0, space 0, times 0 [ 440.863893][T28602] CPU: 1 UID: 0 PID: 28602 Comm: syz.4.7021 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 440.863930][T28602] Tainted: [W]=WARN [ 440.863940][T28602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.863953][T28602] Call Trace: [ 440.863960][T28602] [ 440.863968][T28602] __dump_stack+0x1d/0x30 [ 440.863997][T28602] dump_stack_lvl+0x95/0xd0 [ 440.864020][T28602] dump_stack+0x15/0x1b [ 440.864039][T28602] should_fail_ex+0x263/0x280 [ 440.864064][T28602] should_failslab+0x8c/0xb0 [ 440.864090][T28602] kmem_cache_alloc_noprof+0x68/0x490 [ 440.864117][T28602] ? vm_area_dup+0x33/0x2c0 [ 440.864146][T28602] vm_area_dup+0x33/0x2c0 [ 440.864175][T28602] __split_vma+0xe9/0x660 [ 440.864202][T28602] ? mas_find+0x5d5/0x700 [ 440.864224][T28602] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 440.864260][T28602] mmap_region+0x722/0x1a00 [ 440.864338][T28602] do_mmap+0x9b2/0xbd0 [ 440.864375][T28602] vm_mmap_pgoff+0x183/0x2d0 [ 440.864405][T28602] ksys_mmap_pgoff+0x267/0x310 [ 440.864433][T28602] x64_sys_call+0x16bb/0x3000 [ 440.864466][T28602] do_syscall_64+0xc0/0x2a0 [ 440.864494][T28602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.864521][T28602] RIP: 0033:0x7f5359daacb9 [ 440.864539][T28602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.864562][T28602] RSP: 002b:00007f5358807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 440.864583][T28602] RAX: ffffffffffffffda RBX: 00007f535a025fa0 RCX: 00007f5359daacb9 [ 440.864597][T28602] RDX: 0000000000000004 RSI: 0000000000002000 RDI: 00002000003f0000 [ 440.864609][T28602] RBP: 00007f5358807090 R08: 0000000000000004 R09: 0000000000308000 [ 440.864622][T28602] R10: 0000000000011012 R11: 0000000000000246 R12: 0000000000000001 [ 440.864634][T28602] R13: 00007f535a026038 R14: 00007f535a025fa0 R15: 00007ffec32cb508 [ 440.864659][T28602] [ 441.102465][T28606] 8021q: VLANs not supported on nlmon0 [ 441.142259][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 441.142301][ T29] audit: type=1326 audit(1768823035.584:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.172120][ T29] audit: type=1326 audit(1768823035.584:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.195915][ T29] audit: type=1326 audit(1768823035.584:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.220088][ T29] audit: type=1326 audit(1768823035.584:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.244109][ T29] audit: type=1326 audit(1768823035.584:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.267925][ T29] audit: type=1326 audit(1768823035.584:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.291677][ T29] audit: type=1326 audit(1768823035.584:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.315353][ T29] audit: type=1326 audit(1768823035.584:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.338993][ T29] audit: type=1326 audit(1768823035.584:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.362734][ T29] audit: type=1326 audit(1768823035.584:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28611 comm="syz.2.7026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 441.484588][T28630] FAULT_INJECTION: forcing a failure. [ 441.484588][T28630] name failslab, interval 1, probability 0, space 0, times 0 [ 441.497356][T28630] CPU: 1 UID: 0 PID: 28630 Comm: syz.4.7034 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 441.497425][T28630] Tainted: [W]=WARN [ 441.497432][T28630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.497445][T28630] Call Trace: [ 441.497453][T28630] [ 441.497463][T28630] __dump_stack+0x1d/0x30 [ 441.497530][T28630] dump_stack_lvl+0x95/0xd0 [ 441.497584][T28630] dump_stack+0x15/0x1b [ 441.497603][T28630] should_fail_ex+0x263/0x280 [ 441.497632][T28630] ? __pfx_sock_alloc_inode+0x10/0x10 [ 441.497661][T28630] should_failslab+0x8c/0xb0 [ 441.497727][T28630] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 441.497754][T28630] ? sock_alloc_inode+0x34/0xa0 [ 441.497784][T28630] ? __pfx_sock_alloc_inode+0x10/0x10 [ 441.497819][T28630] sock_alloc_inode+0x34/0xa0 [ 441.497880][T28630] alloc_inode+0x40/0x170 [ 441.497900][T28630] __sock_create+0x120/0x580 [ 441.497921][T28630] ? mutex_lock+0x57/0x90 [ 441.497954][T28630] ? mutex_unlock+0x4e/0x90 [ 441.498044][T28630] ? fput+0x8f/0xc0 [ 441.498076][T28630] __sys_socket+0xaf/0x180 [ 441.498183][T28630] __x64_sys_socket+0x3f/0x50 [ 441.498249][T28630] x64_sys_call+0x127b/0x3000 [ 441.498281][T28630] do_syscall_64+0xc0/0x2a0 [ 441.498328][T28630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.498355][T28630] RIP: 0033:0x7f5359daacb9 [ 441.498376][T28630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.498400][T28630] RSP: 002b:00007f5358807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 441.498463][T28630] RAX: ffffffffffffffda RBX: 00007f535a025fa0 RCX: 00007f5359daacb9 [ 441.498479][T28630] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 441.498492][T28630] RBP: 00007f5358807090 R08: 0000000000000000 R09: 0000000000000000 [ 441.498517][T28630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.498529][T28630] R13: 00007f535a026038 R14: 00007f535a025fa0 R15: 00007ffec32cb508 [ 441.498557][T28630] [ 441.700928][T28630] socket: no more sockets [ 441.770527][T28640] set_capacity_and_notify: 5 callbacks suppressed [ 441.770567][T28640] loop3: detected capacity change from 0 to 512 [ 441.781822][T28632] 8021q: VLANs not supported on nlmon0 [ 441.879211][T28649] loop3: detected capacity change from 0 to 128 [ 441.886027][T28649] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 441.909640][T28649] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 441.922492][T28652] loop4: detected capacity change from 0 to 512 [ 441.926205][T28655] netlink: 'syz.1.7045': attribute type 5 has an invalid length. [ 441.934114][T28652] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 441.950041][T28649] 9p: Bad value for 'rfdno' [ 441.962864][T28652] EXT4-fs (loop4): 1 truncate cleaned up [ 441.973929][T28652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.999059][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.037393][T28662] loop4: detected capacity change from 0 to 512 [ 442.047300][T28662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.059128][T28662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 442.067340][T28662] System zones: 1-2, 4-12, 8-8 [ 442.073147][T28662] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.7047: iget: bad i_size value: 38620345925642 [ 442.086274][T28662] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.7047: couldn't read orphan inode 15 (err -117) [ 442.099662][T28662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.205039][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.236242][T28666] loop4: detected capacity change from 0 to 512 [ 442.253037][T28666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.315258][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.388612][T28672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7050'. [ 442.402380][T28673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7049'. [ 442.411456][T28673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7049'. [ 442.420437][T28673] netlink: 'syz.4.7049': attribute type 19 has an invalid length. [ 442.428340][T28673] netlink: 'syz.4.7049': attribute type 20 has an invalid length. [ 442.655111][T28693] loop9: detected capacity change from 0 to 512 [ 442.664801][T28693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.679943][T28695] SELinux: ebitmap: empty map [ 442.688245][T28695] SELinux: failed to load policy [ 442.702027][T28693] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 442.730951][T28693] System zones: 1-2, 4-12, 8-8 [ 442.736542][T28693] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.7058: iget: bad i_size value: 38620345925642 [ 442.752789][T28693] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.7058: couldn't read orphan inode 15 (err -117) [ 442.775144][T28693] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.794524][T28697] loop2: detected capacity change from 0 to 8192 [ 442.853445][T28702] SELinux: ebitmap: empty map [ 442.858589][T28702] SELinux: failed to load policy [ 442.875915][T28706] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7060'. [ 442.890499][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.910748][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7065'. [ 443.037744][T28720] loop9: detected capacity change from 0 to 128 [ 443.055452][T28720] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 443.068400][T28720] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.212109][T24256] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 443.212724][T28734] netlink: 'syz.2.7070': attribute type 6 has an invalid length. [ 443.244281][T28725] 9pnet_fd: Insufficient options for proto=fd [ 443.277268][T28738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7076'. [ 443.288723][T28736] loop3: detected capacity change from 0 to 512 [ 443.303085][T28736] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.320588][T28744] FAULT_INJECTION: forcing a failure. [ 443.320588][T28744] name failslab, interval 1, probability 0, space 0, times 0 [ 443.333339][T28744] CPU: 0 UID: 0 PID: 28744 Comm: syz.9.7074 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 443.333383][T28744] Tainted: [W]=WARN [ 443.333393][T28744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.333429][T28744] Call Trace: [ 443.333438][T28744] [ 443.333447][T28744] __dump_stack+0x1d/0x30 [ 443.333480][T28744] dump_stack_lvl+0x95/0xd0 [ 443.333511][T28744] dump_stack+0x15/0x1b [ 443.333596][T28744] should_fail_ex+0x263/0x280 [ 443.333624][T28744] should_failslab+0x8c/0xb0 [ 443.333655][T28744] __kmalloc_cache_noprof+0x64/0x4a0 [ 443.333705][T28744] ? audit_log_d_path+0x8d/0x150 [ 443.333735][T28744] audit_log_d_path+0x8d/0x150 [ 443.333788][T28744] audit_log_d_path_exe+0x42/0x70 [ 443.333810][T28744] audit_log_task+0x1e8/0x250 [ 443.333886][T28744] audit_seccomp+0x60/0x100 [ 443.333927][T28744] ? __seccomp_filter+0x8db/0x1350 [ 443.333965][T28744] __seccomp_filter+0x8ec/0x1350 [ 443.334056][T28744] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 443.334096][T28744] ? __se_sys_flock+0x270/0x400 [ 443.334135][T28744] __secure_computing+0x81/0x150 [ 443.334196][T28744] syscall_trace_enter+0xce/0x1e0 [ 443.334220][T28744] do_syscall_64+0x9a/0x2a0 [ 443.334248][T28744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.334280][T28744] RIP: 0033:0x7f3fab79b58e [ 443.334302][T28744] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.334328][T28744] RSP: 002b:00007f3faa236fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.334352][T28744] RAX: ffffffffffffffda RBX: 00007f3faa2376c0 RCX: 00007f3fab79b58e [ 443.334379][T28744] RDX: 000000000000000f RSI: 00007f3faa2370a0 RDI: 0000000000000004 [ 443.334395][T28744] RBP: 00007f3faa237090 R08: 0000000000000000 R09: 0000000000000000 [ 443.334441][T28744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.334453][T28744] R13: 00007f3faba56038 R14: 00007f3faba55fa0 R15: 00007ffc5fa16b48 [ 443.334473][T28744] [ 443.552808][T28736] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 443.561256][T28736] System zones: 1-2, 4-12, 8-8 [ 443.574758][T28736] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.7075: iget: bad i_size value: 38620345925642 [ 443.592095][T28736] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7075: couldn't read orphan inode 15 (err -117) [ 443.614323][T28748] FAULT_INJECTION: forcing a failure. [ 443.614323][T28748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.627588][T28748] CPU: 0 UID: 0 PID: 28748 Comm: syz.2.7078 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 443.627744][T28748] Tainted: [W]=WARN [ 443.627792][T28748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 443.627808][T28748] Call Trace: [ 443.627818][T28748] [ 443.627828][T28748] __dump_stack+0x1d/0x30 [ 443.627927][T28748] dump_stack_lvl+0x95/0xd0 [ 443.627955][T28748] dump_stack+0x15/0x1b [ 443.627981][T28748] should_fail_ex+0x263/0x280 [ 443.628011][T28748] should_fail+0xb/0x20 [ 443.628053][T28748] should_fail_usercopy+0x1a/0x20 [ 443.628078][T28748] _copy_from_iter+0xcf/0xea0 [ 443.628109][T28748] ? __alloc_skb+0x397/0x4b0 [ 443.628151][T28748] ? __alloc_skb+0x219/0x4b0 [ 443.628237][T28748] netlink_sendmsg+0x4ae/0x6f0 [ 443.628260][T28748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.628302][T28748] __sock_sendmsg+0x145/0x170 [ 443.628330][T28748] ____sys_sendmsg+0x31e/0x4a0 [ 443.628365][T28748] ___sys_sendmsg+0x195/0x1e0 [ 443.628464][T28748] __x64_sys_sendmsg+0xd4/0x160 [ 443.628499][T28748] x64_sys_call+0x17ba/0x3000 [ 443.628603][T28748] do_syscall_64+0xc0/0x2a0 [ 443.628632][T28748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.628660][T28748] RIP: 0033:0x7f535680acb9 [ 443.628681][T28748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.628706][T28748] RSP: 002b:00007f5355267028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.628731][T28748] RAX: ffffffffffffffda RBX: 00007f5356a85fa0 RCX: 00007f535680acb9 [ 443.628791][T28748] RDX: 0000000000004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 443.628808][T28748] RBP: 00007f5355267090 R08: 0000000000000000 R09: 0000000000000000 [ 443.628824][T28748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.628839][T28748] R13: 00007f5356a86038 R14: 00007f5356a85fa0 R15: 00007ffc0af4ffd8 [ 443.628904][T28748] [ 443.828794][T28736] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.952483][T28762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7079'. [ 443.968637][T19422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.149418][T28779] SELinux: ebitmap: map size 2147483648 does not match my size 64 (high bit was 6) [ 444.163354][T28779] SELinux: failed to load policy [ 444.447219][T28798] netlink: 'syz.9.7095': attribute type 10 has an invalid length. [ 444.472853][T28800] loop4: detected capacity change from 0 to 128 [ 444.481152][T28800] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.518934][T28803] tmpfs: Bad value for 'mpol' [ 444.527450][T28800] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.558245][T28800] 9p: Bad value for 'rfdno' [ 444.627767][T28810] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7098'. [ 444.841495][T28819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.018231][T28824] 8021q: VLANs not supported on caif0 [ 445.489961][T28846] netlink: 204 bytes leftover after parsing attributes in process `syz.3.7112'. [ 445.680177][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.763267][T28862] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 445.769923][T28862] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 445.777503][T28862] vhci_hcd vhci_hcd.0: Device attached [ 445.889533][T28875] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7124'. [ 445.923594][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 445.923614][ T29] audit: type=1326 audit(1768823040.602:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.1.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ef15acb9 code=0x7ffc0000 [ 445.953550][ T29] audit: type=1326 audit(1768823040.612:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.1.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ef15acb9 code=0x7ffc0000 [ 445.977457][ T29] audit: type=1326 audit(1768823040.612:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.1.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f63ef15acb9 code=0x7ffc0000 [ 446.001177][ T29] audit: type=1326 audit(1768823040.644:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.1.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ef15acb9 code=0x7ffc0000 [ 446.024809][ T29] audit: type=1326 audit(1768823040.644:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.1.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ef15acb9 code=0x7ffc0000 [ 446.032344][T17280] usb 5-2: new low-speed USB device number 2 using vhci_hcd [ 446.048407][ T29] audit: type=1326 audit(1768823040.644:6548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28877 comm="syz.1.7125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f63ef15acb9 code=0x7ffc0000 [ 446.086769][T28880] rdma_rxe: rxe_newlink: failed to add lo [ 446.461892][ T29] audit: type=1326 audit(1768823041.169:6549): auid=0 uid=0 gid=0 ses=9 subj=root:sysadm_r:sysadm_t pid=28881 comm="syz.9.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 446.484547][ T29] audit: type=1326 audit(1768823041.169:6550): auid=0 uid=0 gid=0 ses=9 subj=root:sysadm_r:sysadm_t pid=28881 comm="syz.9.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 446.506765][ T29] audit: type=1326 audit(1768823041.169:6551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28881 comm="syz.9.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 446.530394][ T29] audit: type=1326 audit(1768823041.169:6552): auid=0 uid=0 gid=0 ses=9 subj=root:sysadm_r:sysadm_t pid=28881 comm="syz.9.7126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 446.541488][T28863] vhci_hcd: connection reset by peer [ 446.558384][ T8537] vhci_hcd vhci_hcd.2: stop threads [ 446.563649][ T8537] vhci_hcd vhci_hcd.2: release socket [ 446.569100][ T8537] vhci_hcd vhci_hcd.2: disconnect device [ 446.601562][T28884] set_capacity_and_notify: 2 callbacks suppressed [ 446.601580][T28884] loop9: detected capacity change from 0 to 4096 [ 446.665120][T28887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7128'. [ 446.674209][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7128'. [ 446.683187][T28887] netlink: 'syz.3.7128': attribute type 19 has an invalid length. [ 446.691203][T28887] netlink: 'syz.3.7128': attribute type 20 has an invalid length. [ 446.724230][T28890] FAULT_INJECTION: forcing a failure. [ 446.724230][T28890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.737656][T28890] CPU: 1 UID: 0 PID: 28890 Comm: syz.3.7129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 446.737696][T28890] Tainted: [W]=WARN [ 446.737705][T28890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 446.737721][T28890] Call Trace: [ 446.737728][T28890] [ 446.737736][T28890] __dump_stack+0x1d/0x30 [ 446.737806][T28890] dump_stack_lvl+0x95/0xd0 [ 446.737834][T28890] dump_stack+0x15/0x1b [ 446.737901][T28890] should_fail_ex+0x263/0x280 [ 446.737945][T28890] should_fail+0xb/0x20 [ 446.737972][T28890] should_fail_usercopy+0x1a/0x20 [ 446.738037][T28890] _copy_to_user+0x20/0xa0 [ 446.738075][T28890] simple_read_from_buffer+0xb5/0x130 [ 446.738160][T28890] proc_fail_nth_read+0x10e/0x150 [ 446.738226][T28890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.738306][T28890] vfs_read+0x1ab/0x7f0 [ 446.738343][T28890] ? __sys_bpf+0x58f/0x7b0 [ 446.738373][T28890] ksys_read+0xdc/0x1a0 [ 446.738422][T28890] __x64_sys_read+0x40/0x50 [ 446.738447][T28890] x64_sys_call+0x2889/0x3000 [ 446.738491][T28890] do_syscall_64+0xc0/0x2a0 [ 446.738514][T28890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.738536][T28890] RIP: 0033:0x7f1413fdb58e [ 446.738554][T28890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 446.738596][T28890] RSP: 002b:00007f1412a76fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.738621][T28890] RAX: ffffffffffffffda RBX: 00007f1412a776c0 RCX: 00007f1413fdb58e [ 446.738638][T28890] RDX: 000000000000000f RSI: 00007f1412a770a0 RDI: 0000000000000004 [ 446.738654][T28890] RBP: 00007f1412a77090 R08: 0000000000000000 R09: 0000000000000000 [ 446.738745][T28890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.738759][T28890] R13: 00007f1414296038 R14: 00007f1414295fa0 R15: 00007ffc4a592268 [ 446.738780][T28890] [ 446.781587][T28893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7130'. [ 446.859139][T28894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7130'. [ 446.968092][T28896] loop3: detected capacity change from 0 to 512 [ 447.224879][T28913] loop2: detected capacity change from 0 to 128 [ 447.241815][T28913] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 447.271675][T28913] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 447.286665][T28917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7139'. [ 447.295655][T28917] netlink: 'syz.3.7139': attribute type 19 has an invalid length. [ 447.303566][T28917] netlink: 'syz.3.7139': attribute type 20 has an invalid length. [ 447.329247][T28913] 9p: Bad value for 'rfdno' [ 447.339377][T28919] netlink: 'syz.3.7140': attribute type 83 has an invalid length. [ 447.467831][T28927] loop3: detected capacity change from 0 to 512 [ 447.495598][T28929] loop9: detected capacity change from 0 to 2048 [ 447.659663][T28936] loop9: detected capacity change from 0 to 512 [ 447.673124][T28936] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.687068][T28936] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 447.701988][T28936] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 4 with error 28 [ 447.714252][T28936] EXT4-fs (loop9): This should not happen!! Data will be lost [ 447.714252][T28936] [ 447.723977][T28936] EXT4-fs (loop9): Total free blocks count 0 [ 447.730202][T28936] EXT4-fs (loop9): Free/Dirty block details [ 447.736145][T28936] EXT4-fs (loop9): free_blocks=65280 [ 447.741534][T28936] EXT4-fs (loop9): dirty_blocks=31 [ 447.746675][T28936] EXT4-fs (loop9): Block reservation details [ 447.752720][T28936] EXT4-fs (loop9): i_reserved_data_blocks=31 [ 447.782170][T17605] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 28 [ 447.794454][T17605] EXT4-fs (loop9): This should not happen!! Data will be lost [ 447.794454][T17605] [ 447.911254][T28944] SELinux: failed to load policy [ 448.038792][T28955] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 448.096699][T28959] FAULT_INJECTION: forcing a failure. [ 448.096699][T28959] name failslab, interval 1, probability 0, space 0, times 0 [ 448.109434][T28959] CPU: 0 UID: 0 PID: 28959 Comm: syz.9.7153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 448.109474][T28959] Tainted: [W]=WARN [ 448.109483][T28959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 448.109541][T28959] Call Trace: [ 448.109550][T28959] [ 448.109561][T28959] __dump_stack+0x1d/0x30 [ 448.109593][T28959] dump_stack_lvl+0x95/0xd0 [ 448.109631][T28959] dump_stack+0x15/0x1b [ 448.109651][T28959] should_fail_ex+0x263/0x280 [ 448.109678][T28959] should_failslab+0x8c/0xb0 [ 448.109737][T28959] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 448.109766][T28959] ? __alloc_skb+0x2f0/0x4b0 [ 448.109801][T28959] __alloc_skb+0x2f0/0x4b0 [ 448.109832][T28959] ? __alloc_skb+0x219/0x4b0 [ 448.109876][T28959] netlink_alloc_large_skb+0xbf/0xf0 [ 448.109908][T28959] netlink_sendmsg+0x40c/0x6f0 [ 448.109930][T28959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.109955][T28959] __sock_sendmsg+0x145/0x170 [ 448.110001][T28959] ____sys_sendmsg+0x31e/0x4a0 [ 448.110130][T28959] ___sys_sendmsg+0x195/0x1e0 [ 448.110188][T28959] __x64_sys_sendmsg+0xd4/0x160 [ 448.110234][T28959] x64_sys_call+0x17ba/0x3000 [ 448.110270][T28959] do_syscall_64+0xc0/0x2a0 [ 448.110293][T28959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.110315][T28959] RIP: 0033:0x7f3fab7dacb9 [ 448.110373][T28959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.110395][T28959] RSP: 002b:00007f3faa237028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.110418][T28959] RAX: ffffffffffffffda RBX: 00007f3faba55fa0 RCX: 00007f3fab7dacb9 [ 448.110481][T28959] RDX: 0000000000000000 RSI: 000020000000bf00 RDI: 0000000000000003 [ 448.110493][T28959] RBP: 00007f3faa237090 R08: 0000000000000000 R09: 0000000000000000 [ 448.110506][T28959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.110520][T28959] R13: 00007f3faba56038 R14: 00007f3faba55fa0 R15: 00007ffc5fa16b48 [ 448.110584][T28959] [ 448.357646][T28962] netlink: 'syz.1.7150': attribute type 3 has an invalid length. [ 448.421104][T28964] loop9: detected capacity change from 0 to 4096 [ 448.517828][T28967] __nla_validate_parse: 4 callbacks suppressed [ 448.517928][T28967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7155'. [ 448.980499][T28980] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 448.999235][T28980] SELinux: failed to load policy [ 449.047792][T28991] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7163'. [ 449.084997][T28991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7163'. [ 449.103696][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7164'. [ 449.112674][T28994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7164'. [ 449.121610][T28994] netlink: 'syz.4.7164': attribute type 19 has an invalid length. [ 449.129484][T28994] netlink: 'syz.4.7164': attribute type 20 has an invalid length. [ 449.186577][T28999] FAULT_INJECTION: forcing a failure. [ 449.186577][T28999] name failslab, interval 1, probability 0, space 0, times 0 [ 449.199296][T28999] CPU: 1 UID: 0 PID: 28999 Comm: syz.1.7166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 449.199333][T28999] Tainted: [W]=WARN [ 449.199386][T28999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.199402][T28999] Call Trace: [ 449.199431][T28999] [ 449.199442][T28999] __dump_stack+0x1d/0x30 [ 449.199473][T28999] dump_stack_lvl+0x95/0xd0 [ 449.199498][T28999] dump_stack+0x15/0x1b [ 449.199518][T28999] should_fail_ex+0x263/0x280 [ 449.199546][T28999] should_failslab+0x8c/0xb0 [ 449.199647][T28999] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 449.199676][T28999] ? __alloc_skb+0x2f0/0x4b0 [ 449.199753][T28999] __alloc_skb+0x2f0/0x4b0 [ 449.199840][T28999] ? __alloc_skb+0x219/0x4b0 [ 449.199873][T28999] netlink_alloc_large_skb+0xbf/0xf0 [ 449.199911][T28999] netlink_sendmsg+0x40c/0x6f0 [ 449.199938][T28999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.199961][T28999] __sock_sendmsg+0x145/0x170 [ 449.199985][T28999] ____sys_sendmsg+0x31e/0x4a0 [ 449.200095][T28999] ___sys_sendmsg+0x195/0x1e0 [ 449.200139][T28999] __x64_sys_sendmsg+0xd4/0x160 [ 449.200173][T28999] x64_sys_call+0x17ba/0x3000 [ 449.200231][T28999] do_syscall_64+0xc0/0x2a0 [ 449.200257][T28999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.200323][T28999] RIP: 0033:0x7f63ef15acb9 [ 449.200342][T28999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.200365][T28999] RSP: 002b:00007f63edbb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.200388][T28999] RAX: ffffffffffffffda RBX: 00007f63ef3d5fa0 RCX: 00007f63ef15acb9 [ 449.200402][T28999] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 449.200418][T28999] RBP: 00007f63edbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.200434][T28999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.200457][T28999] R13: 00007f63ef3d6038 R14: 00007f63ef3d5fa0 R15: 00007ffcfcc73288 [ 449.200483][T28999] [ 449.203549][T28996] loop3: detected capacity change from 0 to 512 [ 449.457677][T29006] FAULT_INJECTION: forcing a failure. [ 449.457677][T29006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.462685][T29007] netlink: 380 bytes leftover after parsing attributes in process `syz.9.7169'. [ 449.470920][T29006] CPU: 1 UID: 0 PID: 29006 Comm: syz.1.7170 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 449.471046][T29006] Tainted: [W]=WARN [ 449.471076][T29006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.471141][T29006] Call Trace: [ 449.471171][T29006] [ 449.471195][T29006] __dump_stack+0x1d/0x30 [ 449.471285][T29006] dump_stack_lvl+0x95/0xd0 [ 449.471366][T29006] dump_stack+0x15/0x1b [ 449.471429][T29006] should_fail_ex+0x263/0x280 [ 449.471512][T29006] should_fail+0xb/0x20 [ 449.471642][T29006] should_fail_usercopy+0x1a/0x20 [ 449.471790][T29006] _copy_from_user+0x1c/0xb0 [ 449.471879][T29006] ___sys_sendmsg+0xc1/0x1e0 [ 449.472084][T29006] __x64_sys_sendmsg+0xd4/0x160 [ 449.472260][T29006] x64_sys_call+0x17ba/0x3000 [ 449.472417][T29006] do_syscall_64+0xc0/0x2a0 [ 449.472505][T29006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.472577][T29006] RIP: 0033:0x7f63ef15acb9 [ 449.472641][T29006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.472697][T29006] RSP: 002b:00007f63edbb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.472761][T29006] RAX: ffffffffffffffda RBX: 00007f63ef3d5fa0 RCX: 00007f63ef15acb9 [ 449.472805][T29006] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 449.472848][T29006] RBP: 00007f63edbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 449.472901][T29006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.472943][T29006] R13: 00007f63ef3d6038 R14: 00007f63ef3d5fa0 R15: 00007ffcfcc73288 [ 449.473038][T29006] [ 449.652320][T29007] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7169'. [ 449.790212][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7177'. [ 449.799199][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7177'. [ 449.808237][T29027] netlink: 'syz.3.7177': attribute type 19 has an invalid length. [ 449.816237][T29027] netlink: 'syz.3.7177': attribute type 20 has an invalid length. [ 449.907781][T29025] loop9: detected capacity change from 0 to 1024 [ 450.098849][T29038] 8021q: VLANs not supported on caif0 [ 450.187481][T29025] 9p: Bad value for 'rfdno' [ 450.266071][T29046] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.332006][T29046] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.368126][T29046] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.441630][T29046] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.453598][T29062] SELinux: failed to load policy [ 450.476504][T27749] IPVS: starting estimator thread 0... [ 450.534564][T17610] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.562144][T29071] loop3: detected capacity change from 0 to 128 [ 450.568637][T29067] IPVS: using max 1584 ests per chain, 79200 per kthread [ 450.577883][T17610] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.622327][T17610] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.639777][T29071] FAT-fs (loop3): bogus number of directory entries (390) [ 450.647200][T29071] FAT-fs (loop3): Can't find a valid FAT filesystem [ 450.659390][T17610] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.688521][T29071] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 450.736251][T29071] SELinux: failed to load policy [ 450.752092][T29091] FAULT_INJECTION: forcing a failure. [ 450.752092][T29091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.766839][T29091] CPU: 1 UID: 0 PID: 29091 Comm: syz.4.7195 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 450.766879][T29091] Tainted: [W]=WARN [ 450.766917][T29091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.766933][T29091] Call Trace: [ 450.766941][T29091] [ 450.766949][T29091] __dump_stack+0x1d/0x30 [ 450.767031][T29091] dump_stack_lvl+0x95/0xd0 [ 450.767057][T29091] dump_stack+0x15/0x1b [ 450.767092][T29091] should_fail_ex+0x263/0x280 [ 450.767177][T29091] should_fail_alloc_page+0xf2/0x100 [ 450.767262][T29091] __alloc_frozen_pages_noprof+0x108/0x350 [ 450.767301][T29091] alloc_pages_mpol+0xb3/0x260 [ 450.767337][T29091] ? avc_has_perm+0x101/0x190 [ 450.767357][T29091] alloc_pages_noprof+0x8f/0x130 [ 450.767403][T29091] __pud_alloc+0x47/0x4a0 [ 450.767510][T29091] handle_mm_fault+0x1d62/0x3030 [ 450.767576][T29091] ? mt_find+0x291/0x3b0 [ 450.767613][T29091] do_user_addr_fault+0x3fd/0x1050 [ 450.767648][T29091] ? avc_has_perm_noaudit+0xab/0x130 [ 450.767669][T29091] exc_page_fault+0x62/0xa0 [ 450.767760][T29091] asm_exc_page_fault+0x26/0x30 [ 450.767781][T29091] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 450.767809][T29091] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 450.767828][T29091] RSP: 0018:ffffc9000263bdb8 EFLAGS: 00050216 [ 450.767850][T29091] RAX: ffff888109f7cc90 RBX: 0000000000000020 RCX: 0000000000000020 [ 450.767908][T29091] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffc9000263bdf8 [ 450.767922][T29091] RBP: 0000000000004b72 R08: 00000000000000d7 R09: 0000000000000000 [ 450.767939][T29091] R10: 0001c9000263bdf8 R11: 0001c9000263be17 R12: 0000000000004b72 [ 450.767957][T29091] R13: ffff88813df26000 R14: ffffc9000263bdf8 R15: 0000200000000080 [ 450.768021][T29091] _copy_from_user+0x6f/0xb0 [ 450.768052][T29091] vt_ioctl+0x98e/0x18d0 [ 450.768080][T29091] tty_ioctl+0x7d7/0xb80 [ 450.768128][T29091] ? __pfx_tty_ioctl+0x10/0x10 [ 450.768154][T29091] __se_sys_ioctl+0xce/0x140 [ 450.768191][T29091] __x64_sys_ioctl+0x43/0x50 [ 450.768339][T29091] x64_sys_call+0x14b0/0x3000 [ 450.768407][T29091] do_syscall_64+0xc0/0x2a0 [ 450.768435][T29091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.768470][T29091] RIP: 0033:0x7f5359daacb9 [ 450.768490][T29091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.768559][T29091] RSP: 002b:00007f5358807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.768584][T29091] RAX: ffffffffffffffda RBX: 00007f535a025fa0 RCX: 00007f5359daacb9 [ 450.768602][T29091] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 450.768619][T29091] RBP: 00007f5358807090 R08: 0000000000000000 R09: 0000000000000000 [ 450.768634][T29091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.768650][T29091] R13: 00007f535a026038 R14: 00007f535a025fa0 R15: 00007ffec32cb508 [ 450.768735][T29091] [ 451.094966][T17280] usb 5-2: enqueue for inactive port 1 [ 451.109733][T17280] usb 5-2: enqueue for inactive port 1 [ 451.180621][T29100] netlink: 'syz.4.7199': attribute type 3 has an invalid length. [ 451.191599][T17280] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 451.270353][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 451.270372][ T29] audit: type=1326 audit(1768823046.208:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29099 comm="syz.4.7199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5359daacb9 code=0x0 [ 451.279995][T29111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7203'. [ 451.428256][T29119] loop3: detected capacity change from 0 to 512 [ 451.623466][T29129] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 451.643814][T29129] SELinux: failed to load policy [ 451.695982][ T29] audit: type=1326 audit(1768823046.649:6593): auid=0 uid=0 gid=0 ses=11 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.718279][ T29] audit: type=1326 audit(1768823046.649:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.741983][ T29] audit: type=1326 audit(1768823046.649:6595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.765587][ T29] audit: type=1326 audit(1768823046.649:6596): auid=0 uid=0 gid=0 ses=11 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.788378][ T29] audit: type=1326 audit(1768823046.649:6597): auid=0 uid=0 gid=0 ses=11 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.810656][ T29] audit: type=1326 audit(1768823046.649:6598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.834227][T29136] pim6reg9: entered allmulticast mode [ 451.834407][ T29] audit: type=1326 audit(1768823046.649:6599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.863372][ T29] audit: type=1326 audit(1768823046.649:6600): auid=0 uid=0 gid=0 ses=11 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.885376][ T29] audit: type=1326 audit(1768823046.649:6601): auid=0 uid=0 gid=0 ses=11 subj=root:sysadm_r:sysadm_t pid=29132 comm="syz.2.7210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f535680acb9 code=0x7ffc0000 [ 451.954891][T29144] loop2: detected capacity change from 0 to 512 [ 452.070312][T29146] loop4: detected capacity change from 0 to 2048 [ 452.236550][T29172] loop9: detected capacity change from 0 to 128 [ 452.248509][T29172] FAT-fs (loop9): bogus number of directory entries (390) [ 452.255883][T29172] FAT-fs (loop9): Can't find a valid FAT filesystem [ 452.265701][T29166] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 452.282825][T17280] IPVS: starting estimator thread 0... [ 452.296362][T29166] SELinux: failed to load policy [ 452.376872][T29179] netlink: 'syz.2.7226': attribute type 3 has an invalid length. [ 452.386951][T29174] IPVS: using max 2112 ests per chain, 105600 per kthread [ 452.489919][T29180] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 452.507775][T29189] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 452.516354][T29180] SELinux: failed to load policy [ 452.591152][T29203] loop9: detected capacity change from 0 to 2048 [ 452.702253][T29212] SELinux: failed to load policy [ 452.727061][T29214] FAULT_INJECTION: forcing a failure. [ 452.727061][T29214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.740225][T29214] CPU: 1 UID: 0 PID: 29214 Comm: syz.3.7241 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 452.740280][T29214] Tainted: [W]=WARN [ 452.740288][T29214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.740304][T29214] Call Trace: [ 452.740314][T29214] [ 452.740402][T29214] __dump_stack+0x1d/0x30 [ 452.740430][T29214] dump_stack_lvl+0x95/0xd0 [ 452.740452][T29214] dump_stack+0x15/0x1b [ 452.740472][T29214] should_fail_ex+0x263/0x280 [ 452.740547][T29214] should_fail+0xb/0x20 [ 452.740569][T29214] should_fail_usercopy+0x1a/0x20 [ 452.740621][T29214] copy_folio_from_iter_atomic+0x269/0x1170 [ 452.740658][T29214] ? shmem_write_begin+0xfc/0x1f0 [ 452.740742][T29214] ? shmem_write_begin+0x135/0x1f0 [ 452.740791][T29214] generic_perform_write+0x2c1/0x490 [ 452.740825][T29214] shmem_file_write_iter+0xc5/0xf0 [ 452.740857][T29214] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 452.740931][T29214] vfs_write+0x5a6/0x9f0 [ 452.740959][T29214] ksys_write+0xdc/0x1a0 [ 452.740984][T29214] __x64_sys_write+0x40/0x50 [ 452.741006][T29214] x64_sys_call+0x2847/0x3000 [ 452.741064][T29214] do_syscall_64+0xc0/0x2a0 [ 452.741096][T29214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.741125][T29214] RIP: 0033:0x7f141401acb9 [ 452.741145][T29214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.741170][T29214] RSP: 002b:00007f1412a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.741261][T29214] RAX: ffffffffffffffda RBX: 00007f1414295fa0 RCX: 00007f141401acb9 [ 452.741280][T29214] RDX: 000000000000ff2e RSI: 00002000000001c0 RDI: 0000000000000003 [ 452.741296][T29214] RBP: 00007f1412a77090 R08: 0000000000000000 R09: 0000000000000000 [ 452.741359][T29214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.741399][T29214] R13: 00007f1414296038 R14: 00007f1414295fa0 R15: 00007ffc4a592268 [ 452.741529][T29214] [ 453.008689][T29221] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 453.087766][T29228] loop4: detected capacity change from 0 to 512 [ 453.242650][T29239] pim6reg9: entered allmulticast mode [ 453.319567][T29244] loop3: detected capacity change from 0 to 512 [ 453.344166][T29244] EXT4-fs: Ignoring removed i_version option [ 453.362351][T29244] ext4: Bad value for 'data' [ 453.464513][T29244] loop3: detected capacity change from 0 to 512 [ 453.485849][T29244] EXT4-fs: Ignoring removed i_version option [ 453.504935][T29244] ext4: Bad value for 'data' [ 453.556473][T29244] loop3: detected capacity change from 0 to 512 [ 453.569204][T29244] EXT4-fs: Ignoring removed i_version option [ 453.575590][T29244] ext4: Bad value for 'data' [ 453.596627][T29244] loop3: detected capacity change from 0 to 512 [ 453.608893][T29244] EXT4-fs: Ignoring removed i_version option [ 453.631747][T29244] ext4: Bad value for 'data' [ 453.809137][T29244] EXT4-fs: Ignoring removed i_version option [ 453.831225][T29244] ext4: Bad value for 'data' [ 454.039478][T29272] vfat: Unknown parameter 'nonumtail.nfs' [ 454.126309][T29279] __nla_validate_parse: 5 callbacks suppressed [ 454.126330][T29279] netlink: 88 bytes leftover after parsing attributes in process `syz.4.7257'. [ 454.144782][T29279] tipc: Enabling of bearer rejected, failed to enable media [ 454.182542][T29285] FAT-fs (loop2): bogus number of directory entries (390) [ 454.189797][T29285] FAT-fs (loop2): Can't find a valid FAT filesystem [ 454.225945][T29285] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 454.279105][T29285] SELinux: failed to load policy [ 454.354879][T29304] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 454.410864][T29308] FAULT_INJECTION: forcing a failure. [ 454.410864][T29308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.424017][T29308] CPU: 1 UID: 0 PID: 29308 Comm: syz.4.7268 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 454.424111][T29308] Tainted: [W]=WARN [ 454.424173][T29308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.424189][T29308] Call Trace: [ 454.424196][T29308] [ 454.424204][T29308] __dump_stack+0x1d/0x30 [ 454.424234][T29308] dump_stack_lvl+0x95/0xd0 [ 454.424261][T29308] dump_stack+0x15/0x1b [ 454.424286][T29308] should_fail_ex+0x263/0x280 [ 454.424347][T29308] should_fail+0xb/0x20 [ 454.424366][T29308] should_fail_usercopy+0x1a/0x20 [ 454.424394][T29308] _copy_from_iter+0xcf/0xea0 [ 454.424455][T29308] ? __alloc_skb+0x397/0x4b0 [ 454.424510][T29308] ? __alloc_skb+0x219/0x4b0 [ 454.424556][T29308] netlink_sendmsg+0x4ae/0x6f0 [ 454.424581][T29308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.424684][T29308] __sock_sendmsg+0x145/0x170 [ 454.424712][T29308] ____sys_sendmsg+0x345/0x4a0 [ 454.424752][T29308] ___sys_sendmsg+0x195/0x1e0 [ 454.424877][T29308] __sys_sendmmsg+0x185/0x320 [ 454.424978][T29308] __x64_sys_sendmmsg+0x57/0x70 [ 454.425017][T29308] x64_sys_call+0x1e28/0x3000 [ 454.425053][T29308] do_syscall_64+0xc0/0x2a0 [ 454.425148][T29308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.425179][T29308] RIP: 0033:0x7f5359daacb9 [ 454.425199][T29308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.425222][T29308] RSP: 002b:00007f5358807028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 454.425324][T29308] RAX: ffffffffffffffda RBX: 00007f535a025fa0 RCX: 00007f5359daacb9 [ 454.425343][T29308] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 454.425405][T29308] RBP: 00007f5358807090 R08: 0000000000000000 R09: 0000000000000000 [ 454.425419][T29308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.425436][T29308] R13: 00007f535a026038 R14: 00007f535a025fa0 R15: 00007ffec32cb508 [ 454.425456][T29308] [ 454.710553][T29317] EXT4-fs: Ignoring removed bh option [ 454.727898][T29320] FAULT_INJECTION: forcing a failure. [ 454.727898][T29320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.741255][T29320] CPU: 1 UID: 0 PID: 29320 Comm: syz.1.7272 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 454.741289][T29320] Tainted: [W]=WARN [ 454.741314][T29320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 454.741379][T29320] Call Trace: [ 454.741386][T29320] [ 454.741395][T29320] __dump_stack+0x1d/0x30 [ 454.741425][T29320] dump_stack_lvl+0x95/0xd0 [ 454.741465][T29320] dump_stack+0x15/0x1b [ 454.741489][T29320] should_fail_ex+0x263/0x280 [ 454.741542][T29320] should_fail+0xb/0x20 [ 454.741616][T29320] should_fail_usercopy+0x1a/0x20 [ 454.741647][T29320] _copy_from_iter+0x21c/0xea0 [ 454.741676][T29320] ? __ptrace_may_access+0x2bc/0x340 [ 454.741714][T29320] copy_page_from_iter+0x178/0x2a0 [ 454.741782][T29320] process_vm_rw+0x594/0x9c0 [ 454.741824][T29320] __x64_sys_process_vm_writev+0x78/0x90 [ 454.741918][T29320] x64_sys_call+0x27ef/0x3000 [ 454.741950][T29320] do_syscall_64+0xc0/0x2a0 [ 454.742042][T29320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.742070][T29320] RIP: 0033:0x7f63ef15acb9 [ 454.742155][T29320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.742175][T29320] RSP: 002b:00007f63edb96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 454.742195][T29320] RAX: ffffffffffffffda RBX: 00007f63ef3d6090 RCX: 00007f63ef15acb9 [ 454.742209][T29320] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 00000000000002ba [ 454.742225][T29320] RBP: 00007f63edb96090 R08: 0000000000000002 R09: 0000000000000000 [ 454.742240][T29320] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 454.742335][T29320] R13: 00007f63ef3d6128 R14: 00007f63ef3d6090 R15: 00007ffcfcc73288 [ 454.742355][T29320] [ 454.933175][T29319] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 454.942753][T29317] EXT4-fs (loop2): 1 truncate cleaned up [ 454.949912][T29319] SELinux: failed to load policy [ 455.037262][T29299] EXT4-fs mount: 16 callbacks suppressed [ 455.037353][T29299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.061152][T29328] netlink: 'syz.1.7276': attribute type 1 has an invalid length. [ 455.071691][T29325] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 455.216483][T29336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7279'. [ 455.225513][T29336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7279'. [ 455.234592][T29336] netlink: 'syz.4.7279': attribute type 19 has an invalid length. [ 455.242547][T29336] netlink: 'syz.4.7279': attribute type 20 has an invalid length. [ 455.333013][T29328] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 455.349095][T29328] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 455.392713][T29332] bond1: (slave bridge3): Enslaving as an active interface with a down link [ 455.424924][T29345] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7281'. [ 455.467713][T29342] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 455.519012][T29342] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 455.529238][T29299] 9p: Bad value for 'rfdno' [ 455.783006][T29342] 9p: Bad value for 'rfdno' [ 455.791410][T29351] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.804704][T19422] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.819579][T29351] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7284'. [ 455.998394][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.019904][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7290'. [ 456.028995][T29368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7290'. [ 456.038000][T29368] netlink: 'syz.4.7290': attribute type 19 has an invalid length. [ 456.046050][T29368] netlink: 'syz.4.7290': attribute type 20 has an invalid length. [ 456.066140][T29370] netlink: 'syz.3.7289': attribute type 32 has an invalid length. [ 456.074164][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7289'. [ 456.129335][T29370] bond3: option coupled_control: invalid value (24) [ 456.146531][T29370] bond3 (unregistering): Released all slaves [ 456.175350][T29382] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 456.210706][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 456.210721][ T29] audit: type=1326 audit(1768823051.404:6621): auid=0 uid=0 gid=0 ses=13 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.240559][ T29] audit: type=1326 audit(1768823051.436:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.264220][ T29] audit: type=1326 audit(1768823051.436:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.287911][ T29] audit: type=1326 audit(1768823051.436:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.311482][ T29] audit: type=1326 audit(1768823051.436:6625): auid=0 uid=0 gid=0 ses=13 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.333509][ T29] audit: type=1326 audit(1768823051.436:6626): auid=0 uid=0 gid=0 ses=13 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.355737][ T29] audit: type=1326 audit(1768823051.436:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.379581][ T29] audit: type=1326 audit(1768823051.436:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.403171][ T29] audit: type=1326 audit(1768823051.436:6629): auid=0 uid=0 gid=0 ses=13 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.425213][ T29] audit: type=1326 audit(1768823051.436:6630): auid=0 uid=0 gid=0 ses=13 subj=root:sysadm_r:sysadm_t pid=29384 comm="syz.9.7295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 456.511720][T29393] set_capacity_and_notify: 8 callbacks suppressed [ 456.511739][T29393] loop4: detected capacity change from 0 to 128 [ 456.559152][T29398] netlink: 'syz.2.7297': attribute type 3 has an invalid length. [ 456.568504][T29393] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 456.583683][T29393] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 456.635566][T29393] 9p: Bad value for 'rfdno' [ 456.713326][T29408] 8021q: VLANs not supported on caif0 [ 456.768677][T29414] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.7306' sets config #-1 [ 456.792406][T29414] xt_TPROXY: Can be used only with -p tcp or -p udp [ 456.821365][T29401] loop9: detected capacity change from 0 to 1024 [ 456.860679][T29401] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.950182][T29428] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7311'. [ 456.959286][T29428] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7311'. [ 457.014650][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.025919][T29431] 9pnet_fd: Insufficient options for proto=fd [ 457.212550][T29448] loop9: detected capacity change from 0 to 2048 [ 457.227396][T29448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.309561][T29458] loop4: detected capacity change from 0 to 1024 [ 457.355186][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.426102][T29458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.486263][T29458] xt_TCPMSS: Only works on TCP SYN packets [ 457.529803][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.864164][T29500] 8021q: VLANs not supported on caif0 [ 457.881287][T29501] loop3: detected capacity change from 0 to 2048 [ 457.934959][T29504] loop9: detected capacity change from 0 to 764 [ 457.945217][T29501] Alternate GPT is invalid, using primary GPT. [ 457.951740][T29501] loop3: p2 p3 p7 [ 457.959729][T29504] rock: directory entry would overflow storage [ 457.965936][T29504] rock: sig=0x5245, size=8, remaining=5 [ 458.019285][ T3008] Alternate GPT is invalid, using primary GPT. [ 458.025817][ T3008] loop3: p2 p3 p7 [ 458.039761][T29504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 458.096020][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 458.114367][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 458.175153][T20114] udevd[20114]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 458.176935][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 458.264380][T29520] loop9: detected capacity change from 0 to 128 [ 458.313581][T29520] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 458.349128][T29520] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 458.440294][T29520] 9p: Bad value for 'rfdno' [ 458.727190][T29558] loop2: detected capacity change from 0 to 256 [ 458.864379][T29572] loop9: detected capacity change from 0 to 1024 [ 458.871595][T29572] EXT4-fs: Ignoring removed nobh option [ 458.877301][T29572] EXT4-fs: Ignoring removed bh option [ 458.979563][T29572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.047363][T29536] chnl_net:caif_netlink_parms(): no params data found [ 459.096259][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.297957][T29601] FAULT_INJECTION: forcing a failure. [ 459.297957][T29601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.311220][T29601] CPU: 1 UID: 0 PID: 29601 Comm: syz.1.7363 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.311265][T29601] Tainted: [W]=WARN [ 459.311274][T29601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.311288][T29601] Call Trace: [ 459.311298][T29601] [ 459.311312][T29601] __dump_stack+0x1d/0x30 [ 459.311344][T29601] dump_stack_lvl+0x95/0xd0 [ 459.311374][T29601] dump_stack+0x15/0x1b [ 459.311400][T29601] should_fail_ex+0x263/0x280 [ 459.311429][T29601] should_fail+0xb/0x20 [ 459.311482][T29601] should_fail_usercopy+0x1a/0x20 [ 459.311515][T29601] _copy_to_user+0x20/0xa0 [ 459.311553][T29601] simple_read_from_buffer+0xb5/0x130 [ 459.311617][T29601] proc_fail_nth_read+0x10e/0x150 [ 459.311652][T29601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 459.311815][T29601] vfs_read+0x1ab/0x7f0 [ 459.311930][T29601] ? __rcu_read_unlock+0x4e/0x70 [ 459.311957][T29601] ? __fget_files+0x184/0x1c0 [ 459.312040][T29601] ? mutex_lock+0x57/0x90 [ 459.312077][T29601] ksys_read+0xdc/0x1a0 [ 459.312146][T29601] __x64_sys_read+0x40/0x50 [ 459.312170][T29601] x64_sys_call+0x2889/0x3000 [ 459.312202][T29601] do_syscall_64+0xc0/0x2a0 [ 459.312230][T29601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.312294][T29601] RIP: 0033:0x7f63ef11b58e [ 459.312312][T29601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.312346][T29601] RSP: 002b:00007f63edb95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 459.312371][T29601] RAX: ffffffffffffffda RBX: 00007f63edb966c0 RCX: 00007f63ef11b58e [ 459.312390][T29601] RDX: 000000000000000f RSI: 00007f63edb960a0 RDI: 0000000000000006 [ 459.312422][T29601] RBP: 00007f63edb96090 R08: 0000000000000000 R09: 0000000000000000 [ 459.312436][T29601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.312451][T29601] R13: 00007f63ef3d6128 R14: 00007f63ef3d6090 R15: 00007ffcfcc73288 [ 459.312473][T29601] [ 459.622410][ T2486] bond0 (unregistering): Released all slaves [ 459.631851][ T2486] bond1 (unregistering): Released all slaves [ 459.648232][ T2486] bond2 (unregistering): Released all slaves [ 459.677455][T29589] __nla_validate_parse: 7 callbacks suppressed [ 459.677472][T29589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7365'. [ 459.715358][T29608] FAULT_INJECTION: forcing a failure. [ 459.715358][T29608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.728595][T29608] CPU: 1 UID: 0 PID: 29608 Comm: syz.1.7367 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 459.728710][T29608] Tainted: [W]=WARN [ 459.728718][T29608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 459.728730][T29608] Call Trace: [ 459.728737][T29608] [ 459.728745][T29608] __dump_stack+0x1d/0x30 [ 459.728852][T29608] dump_stack_lvl+0x95/0xd0 [ 459.728949][T29608] dump_stack+0x15/0x1b [ 459.728975][T29608] should_fail_ex+0x263/0x280 [ 459.729005][T29608] should_fail+0xb/0x20 [ 459.729031][T29608] should_fail_usercopy+0x1a/0x20 [ 459.729083][T29608] _copy_to_user+0x20/0xa0 [ 459.729116][T29608] map_lookup_and_delete_elem+0x65d/0x700 [ 459.729151][T29608] __sys_bpf+0x58f/0x7b0 [ 459.729184][T29608] __x64_sys_bpf+0x41/0x50 [ 459.729219][T29608] x64_sys_call+0x28e1/0x3000 [ 459.729244][T29608] do_syscall_64+0xc0/0x2a0 [ 459.729338][T29608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.729359][T29608] RIP: 0033:0x7f63ef15acb9 [ 459.729376][T29608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.729399][T29608] RSP: 002b:00007f63edbb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 459.729437][T29608] RAX: ffffffffffffffda RBX: 00007f63ef3d5fa0 RCX: 00007f63ef15acb9 [ 459.729451][T29608] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000015 [ 459.729535][T29608] RBP: 00007f63edbb7090 R08: 0000000000000000 R09: 0000000000000000 [ 459.729551][T29608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.729567][T29608] R13: 00007f63ef3d6038 R14: 00007f63ef3d5fa0 R15: 00007ffcfcc73288 [ 459.729591][T29608] [ 459.943150][T29610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7368'. [ 459.952140][T29610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7368'. [ 459.961067][T29610] netlink: 'syz.2.7368': attribute type 19 has an invalid length. [ 459.968956][T29610] netlink: 'syz.2.7368': attribute type 20 has an invalid length. [ 459.986114][ T2486] tipc: Disabling bearer [ 459.992030][ T2486] tipc: Disabling bearer [ 460.004156][ T2486] tipc: Left network mode [ 460.009527][ T2486] IPVS: stopping master sync thread 27981 ... [ 460.074928][ T2486] hsr_slave_0: left promiscuous mode [ 460.102432][ T2486] hsr_slave_1: left promiscuous mode [ 460.141734][T29620] 9pnet_fd: Insufficient options for proto=fd [ 460.252140][T29638] loop9: detected capacity change from 0 to 2048 [ 460.270377][T29622] 8021q: VLANs not supported on caif0 [ 460.328997][T29536] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.336271][T29536] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.345768][T29638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.355829][T29536] bridge_slave_0: entered allmulticast mode [ 460.364902][T29536] bridge_slave_0: entered promiscuous mode [ 460.372137][T29536] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.378899][T29642] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 460.379395][T29536] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.396292][T29536] bridge_slave_1: entered allmulticast mode [ 460.402901][T29536] bridge_slave_1: entered promiscuous mode [ 460.403255][T29638] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7372'. [ 460.429075][T29536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.441144][T29536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.451128][T29638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7372'. [ 460.470670][T29536] team0: Port device team_slave_0 added [ 460.502643][T29536] team0: Port device team_slave_1 added [ 460.525229][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.540157][T29666] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 460.546828][T29666] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 460.554359][T29666] vhci_hcd vhci_hcd.0: Device attached [ 460.562160][T29536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.569243][T29536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.587094][T29672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7379'. [ 460.595425][T29536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.604339][T29672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7379'. [ 460.623922][T29672] netlink: 'syz.4.7379': attribute type 19 has an invalid length. [ 460.632000][T29672] netlink: 'syz.4.7379': attribute type 20 has an invalid length. [ 460.641000][T29667] vhci_hcd: connection closed [ 460.641113][T17610] vhci_hcd vhci_hcd.1: stop threads [ 460.646056][T29536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.651372][T17610] vhci_hcd vhci_hcd.1: release socket [ 460.658159][T29536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.663631][T17610] vhci_hcd vhci_hcd.1: disconnect device [ 460.690809][T29536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.714985][T29675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7375'. [ 460.724238][T29675] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7375'. [ 460.789072][ T2486] IPVS: stop unused estimator thread 0... [ 460.813933][T29536] hsr_slave_0: entered promiscuous mode [ 460.822794][T29536] hsr_slave_1: entered promiscuous mode [ 460.828917][T29536] debugfs: 'hsr0' already exists in 'hsr' [ 460.834720][T29536] Cannot create hsr debugfs directory [ 460.867992][T29682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.064545][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.132811][T29709] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 461.158851][T29709] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 461.186074][T29536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 461.195654][T29536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.208697][T29536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.234469][T29536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.349627][T29536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.364449][T29732] 8021q: VLANs not supported on caif0 [ 461.379645][T29536] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.400135][T17606] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.407273][T17606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.448011][T29536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 461.458519][T29536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 461.470880][T29739] set_capacity_and_notify: 2 callbacks suppressed [ 461.470895][T29739] loop2: detected capacity change from 0 to 512 [ 461.491963][T17606] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.499158][T17606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.511002][T29739] EXT4-fs: Ignoring removed mblk_io_submit option [ 461.568419][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7389'. [ 461.577380][T29747] netlink: 'syz.9.7389': attribute type 19 has an invalid length. [ 461.585780][T29747] netlink: 'syz.9.7389': attribute type 20 has an invalid length. [ 461.592015][T29739] EXT4-fs (loop2): inodes count not valid: 15 vs 32 [ 461.705431][T29536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.757371][T29757] bond3: option downdelay: invalid value (18446744073709551615) [ 461.765245][T29757] bond3: option downdelay: allowed values 0 - 2147483647 [ 461.795269][T29757] bond3 (unregistering): Released all slaves [ 461.810720][T29773] loop9: detected capacity change from 0 to 764 [ 461.821079][T29773] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 461.832020][T29773] Symlink component flag not implemented [ 461.838039][T29773] Symlink component flag not implemented (7) [ 461.918622][T29536] veth0_vlan: entered promiscuous mode [ 461.958683][T29536] veth1_vlan: entered promiscuous mode [ 461.973294][T29784] netlink: 'syz.9.7394': attribute type 6 has an invalid length. [ 461.993665][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 461.993682][ T29] audit: type=1400 audit(1768823057.472:6767): avc: denied { write } for pid=29766 comm="syz.1.7392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 462.035477][T29791] netlink: 'syz.2.7395': attribute type 29 has an invalid length. [ 462.047749][T29536] veth0_macvtap: entered promiscuous mode [ 462.076775][T29536] veth1_macvtap: entered promiscuous mode [ 462.097445][ T29] audit: type=1326 audit(1768823057.535:6768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29766 comm="syz.1.7392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63ef15acb9 code=0x0 [ 462.125888][T29536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.153769][T29536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.184240][T29800] 8021q: VLANs not supported on caif0 [ 462.194571][T17604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.220337][T17604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.239297][T29784] loop9: detected capacity change from 0 to 8192 [ 462.254177][T17604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.282290][T17604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.283596][ T6092] loop9: p1 p2[DM] p4 [ 462.306334][T29812] FAULT_INJECTION: forcing a failure. [ 462.306334][T29812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 462.316141][ T6092] loop9: p1 size 196608 extends beyond EOD, truncated [ 462.319764][T29812] CPU: 0 UID: 0 PID: 29812 Comm: syz.3.7348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 462.320015][T29812] Tainted: [W]=WARN [ 462.320041][T29812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.320083][T29812] Call Trace: [ 462.320105][T29812] [ 462.320135][T29812] __dump_stack+0x1d/0x30 [ 462.320217][T29812] dump_stack_lvl+0x95/0xd0 [ 462.320361][T29812] dump_stack+0x15/0x1b [ 462.320425][T29812] should_fail_ex+0x263/0x280 [ 462.320510][T29812] should_fail_alloc_page+0xf2/0x100 [ 462.320586][T29812] __alloc_frozen_pages_noprof+0x108/0x350 [ 462.320691][T29812] alloc_pages_mpol+0xb3/0x260 [ 462.320798][T29812] alloc_pages_noprof+0x8f/0x130 [ 462.320885][T29812] __pud_alloc+0x47/0x4a0 [ 462.320988][T29812] handle_mm_fault+0x1d62/0x3030 [ 462.321083][T29812] ? mt_find+0x291/0x3b0 [ 462.321202][T29812] do_user_addr_fault+0x3fd/0x1050 [ 462.321318][T29812] exc_page_fault+0x62/0xa0 [ 462.321473][T29812] asm_exc_page_fault+0x26/0x30 [ 462.321546][T29812] RIP: 0010:__get_user_4+0x14/0x20 [ 462.321632][T29812] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 462.321694][T29812] RSP: 0018:ffffc90001ea7e48 EFLAGS: 00050287 [ 462.321742][T29812] RAX: 0000200000000000 RBX: ffffc90001ea7f58 RCX: 0000000000000000 [ 462.321785][T29812] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffffc90001ea7e88 [ 462.321836][T29812] RBP: ffffc90001ea7ed0 R08: ffff88810190cc90 R09: 0000000000000000 [ 462.321891][T29812] R10: ffffc90001ea7e70 R11: 0001c90001ea7e70 R12: ffff88810190c200 [ 462.321934][T29812] R13: 0000000000000000 R14: 0000000000000000 R15: 0000200000000000 [ 462.321997][T29812] __se_sys_capget+0x7f/0x440 [ 462.322192][T29812] __x64_sys_capget+0x31/0x40 [ 462.322283][T29812] x64_sys_call+0x28aa/0x3000 [ 462.322371][T29812] do_syscall_64+0xc0/0x2a0 [ 462.322454][T29812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.322547][T29812] RIP: 0033:0x7f277ac0acb9 [ 462.322613][T29812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.322676][T29812] RSP: 002b:00007f2779667028 EFLAGS: 00000246 ORIG_RAX: 000000000000007d [ 462.322738][T29812] RAX: ffffffffffffffda RBX: 00007f277ae85fa0 RCX: 00007f277ac0acb9 [ 462.322854][T29812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 462.322895][T29812] RBP: 00007f2779667090 R08: 0000000000000000 R09: 0000000000000000 [ 462.322936][T29812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.322977][T29812] R13: 00007f277ae86038 R14: 00007f277ae85fa0 R15: 00007ffc593a7418 [ 462.323033][T29812] [ 462.382291][T29808] loop2: detected capacity change from 0 to 2048 [ 462.390141][ T6092] loop9: p2 start 4292936063 is beyond EOD, truncated [ 462.611977][ T6092] loop9: p4 size 50331648 extends beyond EOD, truncated [ 462.621705][T29808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.637078][T29818] IPv6: addrconf: prefix option has invalid lifetime [ 462.646783][T29784] loop9: p1 p2[DM] p4 [ 462.651009][T29784] loop9: p1 size 196608 extends beyond EOD, truncated [ 462.669188][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.680294][T29818] loop3: detected capacity change from 0 to 512 [ 462.690005][T29784] loop9: p2 start 4292936063 is beyond EOD, truncated [ 462.696994][T29784] loop9: p4 size 50331648 extends beyond EOD, truncated [ 462.706464][T29823] FAULT_INJECTION: forcing a failure. [ 462.706464][T29823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.719796][T29823] CPU: 1 UID: 0 PID: 29823 Comm: syz.4.7406 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 462.719895][T29823] Tainted: [W]=WARN [ 462.719959][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.719975][T29823] Call Trace: [ 462.719983][T29823] [ 462.719993][T29823] __dump_stack+0x1d/0x30 [ 462.720091][T29823] dump_stack_lvl+0x95/0xd0 [ 462.720120][T29823] dump_stack+0x15/0x1b [ 462.720146][T29823] should_fail_ex+0x263/0x280 [ 462.720176][T29823] should_fail+0xb/0x20 [ 462.720286][T29823] should_fail_usercopy+0x1a/0x20 [ 462.720319][T29823] _copy_from_user+0x1c/0xb0 [ 462.720357][T29823] ___sys_sendmsg+0xc1/0x1e0 [ 462.720493][T29823] __x64_sys_sendmsg+0xd4/0x160 [ 462.720577][T29823] x64_sys_call+0x17ba/0x3000 [ 462.720611][T29823] do_syscall_64+0xc0/0x2a0 [ 462.720640][T29823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.720679][T29823] RIP: 0033:0x7f5359daacb9 [ 462.720700][T29823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.720795][T29823] RSP: 002b:00007f5358807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.720820][T29823] RAX: ffffffffffffffda RBX: 00007f535a025fa0 RCX: 00007f5359daacb9 [ 462.720839][T29823] RDX: 000000000400c010 RSI: 0000200000003780 RDI: 0000000000000003 [ 462.720926][T29823] RBP: 00007f5358807090 R08: 0000000000000000 R09: 0000000000000000 [ 462.720943][T29823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.720960][T29823] R13: 00007f535a026038 R14: 00007f535a025fa0 R15: 00007ffec32cb508 [ 462.720984][T29823] [ 462.738861][T29818] EXT4-fs (loop3): 1 orphan inode deleted [ 462.899343][T29818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.981771][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 462.992647][T29831] loop4: detected capacity change from 0 to 512 [ 462.993765][ T6092] udevd[6092]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 463.012947][T29536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.024091][T29835] SELinux: policydb version 505497363 does not match my version range 15-35 [ 463.041396][T29831] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7408: bg 0: block 248: padding at end of block bitmap is not set [ 463.053059][T29835] SELinux: failed to load policy [ 463.080154][T29824] xt_connbytes: Forcing CT accounting to be enabled [ 463.089657][T29824] Cannot find set identified by id 0 to match [ 463.115061][ T6092] udevd[6092]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 463.136232][T29831] Quota error (device loop4): write_blk: dquota write failed [ 463.142656][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 463.143927][T29831] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 463.164188][T29831] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.7408: Failed to acquire dquot type 1 [ 463.177447][T29831] EXT4-fs (loop4): 1 truncate cleaned up [ 463.185085][T29831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.201146][T29839] loop2: detected capacity change from 0 to 512 [ 463.209490][T29833] 8021q: VLANs not supported on caif0 [ 463.236939][T29831] ext4 filesystem being mounted at /302/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.248265][T29839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.275202][T29839] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 463.285018][T29848] netlink: 'syz.3.7410': attribute type 3 has an invalid length. [ 463.330268][T29831] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.342760][ T29] audit: type=1326 audit(1768823058.889:6769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29845 comm="syz.3.7410" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f277ac0acb9 code=0x0 [ 463.401309][T29829] loop2: detected capacity change from 0 to 512 [ 463.413885][T29829] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.460637][T29829] EXT4-fs (loop2): 1 truncate cleaned up [ 463.466548][T29856] loop4: detected capacity change from 0 to 512 [ 463.479337][T29829] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.536827][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.638921][T29869] loop2: detected capacity change from 0 to 512 [ 463.646113][T29869] EXT4-fs: dax option not supported [ 463.716278][T29874] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 463.782694][T27753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=27753 comm=kworker/0:20 [ 463.796086][T29874] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 463.831296][T29886] FAULT_INJECTION: forcing a failure. [ 463.831296][T29886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.844442][T29886] CPU: 1 UID: 0 PID: 29886 Comm: syz.2.7423 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 463.844563][T29886] Tainted: [W]=WARN [ 463.844572][T29886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.844588][T29886] Call Trace: [ 463.844598][T29886] [ 463.844609][T29886] __dump_stack+0x1d/0x30 [ 463.844643][T29886] dump_stack_lvl+0x95/0xd0 [ 463.844673][T29886] dump_stack+0x15/0x1b [ 463.844699][T29886] should_fail_ex+0x263/0x280 [ 463.844733][T29886] should_fail+0xb/0x20 [ 463.844760][T29886] should_fail_usercopy+0x1a/0x20 [ 463.844802][T29886] _copy_from_iter+0xcf/0xea0 [ 463.844838][T29886] ? __alloc_skb+0x397/0x4b0 [ 463.844876][T29886] ? __alloc_skb+0x219/0x4b0 [ 463.844909][T29886] netlink_sendmsg+0x4ae/0x6f0 [ 463.845017][T29886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.845045][T29886] __sock_sendmsg+0x145/0x170 [ 463.845113][T29886] ____sys_sendmsg+0x31e/0x4a0 [ 463.845153][T29886] ___sys_sendmsg+0x195/0x1e0 [ 463.845222][T29886] __x64_sys_sendmsg+0xd4/0x160 [ 463.845332][T29886] x64_sys_call+0x17ba/0x3000 [ 463.845360][T29886] do_syscall_64+0xc0/0x2a0 [ 463.845390][T29886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.845420][T29886] RIP: 0033:0x7f535680acb9 [ 463.845442][T29886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.845540][T29886] RSP: 002b:00007f5355246028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.845568][T29886] RAX: ffffffffffffffda RBX: 00007f5356a86090 RCX: 00007f535680acb9 [ 463.845587][T29886] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 463.845605][T29886] RBP: 00007f5355246090 R08: 0000000000000000 R09: 0000000000000000 [ 463.845622][T29886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.845639][T29886] R13: 00007f5356a86128 R14: 00007f5356a86090 R15: 00007ffc0af4ffd8 [ 463.845666][T29886] [ 464.224656][T29896] EXT4-fs: dax option not supported [ 464.266796][T29897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.357677][T24725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.452633][ T29] audit: type=1400 audit(1768823060.055:6770): avc: denied { read } for pid=29891 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 464.611058][T29912] __nla_validate_parse: 15 callbacks suppressed [ 464.611075][T29912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7433'. [ 464.635667][T29910] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 464.730647][T29917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.781806][T29919] netlink: 'syz.3.7436': attribute type 3 has an invalid length. [ 464.830647][ T29] audit: type=1326 audit(1768823060.453:6771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29918 comm="syz.3.7436" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f277ac0acb9 code=0x0 [ 464.897094][T29927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7438'. [ 464.906221][T29927] netlink: 192 bytes leftover after parsing attributes in process `syz.1.7438'. [ 465.020937][T29938] SELinux: ebitmap: empty map [ 465.025966][T29938] SELinux: failed to load policy [ 465.077161][T29942] FAULT_INJECTION: forcing a failure. [ 465.077161][T29942] name failslab, interval 1, probability 0, space 0, times 0 [ 465.089909][T29942] CPU: 0 UID: 0 PID: 29942 Comm: syz.1.7443 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.089945][T29942] Tainted: [W]=WARN [ 465.089954][T29942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.089969][T29942] Call Trace: [ 465.089978][T29942] [ 465.089989][T29942] __dump_stack+0x1d/0x30 [ 465.090020][T29942] dump_stack_lvl+0x95/0xd0 [ 465.090048][T29942] dump_stack+0x15/0x1b [ 465.090073][T29942] should_fail_ex+0x263/0x280 [ 465.090098][T29942] should_failslab+0x8c/0xb0 [ 465.090119][T29942] kmem_cache_alloc_noprof+0x68/0x490 [ 465.090145][T29942] ? vm_area_alloc+0x2c/0xb0 [ 465.090182][T29942] vm_area_alloc+0x2c/0xb0 [ 465.090209][T29942] mmap_region+0xf51/0x1a00 [ 465.090281][T29942] do_mmap+0x9b2/0xbd0 [ 465.090318][T29942] vm_mmap_pgoff+0x183/0x2d0 [ 465.090348][T29942] ksys_mmap_pgoff+0xc1/0x310 [ 465.090376][T29942] ? __x64_sys_mmap+0x49/0x70 [ 465.090408][T29942] x64_sys_call+0x16bb/0x3000 [ 465.090439][T29942] do_syscall_64+0xc0/0x2a0 [ 465.090466][T29942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.090487][T29942] RIP: 0033:0x7f63ef15aa22 [ 465.090504][T29942] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 465.090523][T29942] RSP: 002b:00007f63edbb6df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 465.090547][T29942] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f63ef15aa22 [ 465.090565][T29942] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 465.090581][T29942] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 465.090596][T29942] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 465.090608][T29942] R13: 00007f63edbb6ee0 R14: 00007f63edbb6ea0 R15: 00002000000000c0 [ 465.090632][T29942] [ 465.298348][T29944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7444'. [ 465.356546][T29946] 8021q: VLANs not supported on caif0 [ 465.436290][T29951] IPVS: stopping master sync thread 26598 ... [ 465.452575][T29951] tmpfs: Unknown parameter 'hugeadvise…P€¸Py' [ 465.468360][T29951] EXT4-fs: inline encryption not supported [ 465.488737][T29951] EXT4-fs: Invalid want_extra_isize 29923 [ 465.508299][T29940] SELinux: policydb version 505497363 does not match my version range 15-35 [ 465.534006][T29940] SELinux: failed to load policy [ 465.575441][T29953] xt_connbytes: Forcing CT accounting to be enabled [ 465.583986][T25580] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.598505][T29959] FAULT_INJECTION: forcing a failure. [ 465.598505][T29959] name failslab, interval 1, probability 0, space 0, times 0 [ 465.611281][T29959] CPU: 0 UID: 0 PID: 29959 Comm: syz.3.7450 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.611323][T29959] Tainted: [W]=WARN [ 465.611332][T29959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.611348][T29959] Call Trace: [ 465.611356][T29959] [ 465.611367][T29959] __dump_stack+0x1d/0x30 [ 465.611444][T29959] dump_stack_lvl+0x95/0xd0 [ 465.611470][T29959] dump_stack+0x15/0x1b [ 465.611538][T29959] should_fail_ex+0x263/0x280 [ 465.611568][T29959] should_failslab+0x8c/0xb0 [ 465.611675][T29959] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 465.611705][T29959] ? __alloc_skb+0x2f0/0x4b0 [ 465.611741][T29959] __alloc_skb+0x2f0/0x4b0 [ 465.611765][T29959] ? __alloc_skb+0x219/0x4b0 [ 465.611801][T29959] netlink_ack+0xfd/0x500 [ 465.611992][T29959] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 465.612031][T29959] netlink_rcv_skb+0x192/0x220 [ 465.612072][T29959] ? __pfx_genl_rcv_msg+0x10/0x10 [ 465.612125][T29959] genl_rcv+0x28/0x40 [ 465.612160][T29959] netlink_unicast+0x5c0/0x690 [ 465.612220][T29959] netlink_sendmsg+0x5c8/0x6f0 [ 465.612249][T29959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.612275][T29959] __sock_sendmsg+0x145/0x170 [ 465.612304][T29959] ____sys_sendmsg+0x31e/0x4a0 [ 465.612372][T29959] ___sys_sendmsg+0x195/0x1e0 [ 465.612430][T29959] __x64_sys_sendmsg+0xd4/0x160 [ 465.612475][T29959] x64_sys_call+0x17ba/0x3000 [ 465.612512][T29959] do_syscall_64+0xc0/0x2a0 [ 465.612540][T29959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.612569][T29959] RIP: 0033:0x7f277ac0acb9 [ 465.612590][T29959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.612691][T29959] RSP: 002b:00007f2779667028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.612739][T29959] RAX: ffffffffffffffda RBX: 00007f277ae85fa0 RCX: 00007f277ac0acb9 [ 465.612757][T29959] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 465.612850][T29959] RBP: 00007f2779667090 R08: 0000000000000000 R09: 0000000000000000 [ 465.612866][T29959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.612881][T29959] R13: 00007f277ae86038 R14: 00007f277ae85fa0 R15: 00007ffc593a7418 [ 465.612906][T29959] [ 465.839576][T29953] Cannot find set identified by id 0 to match [ 465.918887][T29967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7453'. [ 465.943953][ T29] audit: type=1400 audit(1768823061.608:6772): avc: denied { accept } for pid=29960 comm="syz.4.7452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 466.608598][T29992] set_capacity_and_notify: 5 callbacks suppressed [ 466.608625][T29992] loop9: detected capacity change from 0 to 128 [ 466.670241][T29992] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 466.760218][T29992] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 466.939398][T29997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7463'. [ 466.949309][T29997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7463'. [ 467.048957][T30008] 8021q: VLANs not supported on caif0 [ 467.078527][T30010] netlink: 'syz.3.7467': attribute type 29 has an invalid length. [ 467.110590][T30015] loop9: detected capacity change from 0 to 1024 [ 467.165453][T30015] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 467.185634][T30015] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.213603][T30029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7473'. [ 467.231857][ T6092] ================================================================== [ 467.240350][ T6092] BUG: KCSAN: data-race in fill_mg_cmtime / simple_unlink [ 467.247514][ T6092] [ 467.249863][ T6092] write to 0xffff8881039c3dfc of 4 bytes by task 3312 on cpu 0: [ 467.257523][ T6092] simple_unlink+0x54/0x80 [ 467.261993][ T6092] shmem_unlink+0x12d/0x140 [ 467.266548][ T6092] shmem_rename2+0x18e/0x310 [ 467.271243][ T6092] vfs_rename+0x97f/0xad0 [ 467.275618][ T6092] do_renameat2+0x39a/0x850 [ 467.280146][ T6092] __x64_sys_rename+0x58/0x70 [ 467.284844][ T6092] x64_sys_call+0x24e/0x3000 [ 467.289466][ T6092] do_syscall_64+0xc0/0x2a0 [ 467.294038][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.300136][ T6092] [ 467.302496][ T6092] read to 0xffff8881039c3dfc of 4 bytes by task 6092 on cpu 1: [ 467.310064][ T6092] fill_mg_cmtime+0x5b/0x260 [ 467.314684][ T6092] generic_fillattr+0x24a/0x340 [ 467.319561][ T6092] shmem_getattr+0x181/0x200 [ 467.324215][ T6092] vfs_getattr_nosec+0x146/0x1e0 [ 467.329209][ T6092] vfs_statx+0x113/0x3b0 [ 467.333476][ T6092] vfs_fstatat+0x115/0x170 [ 467.337914][ T6092] __se_sys_newfstatat+0x55/0x3e0 [ 467.342961][ T6092] __x64_sys_newfstatat+0x55/0x70 [ 467.348017][ T6092] x64_sys_call+0x111f/0x3000 [ 467.352718][ T6092] do_syscall_64+0xc0/0x2a0 [ 467.357260][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.363177][ T6092] [ 467.365513][ T6092] value changed: 0x3a909197 -> 0x3a93c05c [ 467.371253][ T6092] [ 467.373680][ T6092] Reported by Kernel Concurrency Sanitizer on: [ 467.379846][ T6092] CPU: 1 UID: 0 PID: 6092 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 467.390716][ T6092] Tainted: [W]=WARN [ 467.394548][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.404620][ T6092] ================================================================== [ 467.417659][ T29] audit: type=1326 audit(1768823063.162:6773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.441433][ T29] audit: type=1326 audit(1768823063.162:6774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.467140][T30015] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7468: bg 0: block 112: padding at end of block bitmap is not set [ 467.472516][T30030] netlink: 'syz.2.7472': attribute type 3 has an invalid length. [ 467.481791][ T29] audit: type=1326 audit(1768823063.225:6775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.481832][ T29] audit: type=1326 audit(1768823063.225:6776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.536706][ T29] audit: type=1326 audit(1768823063.225:6777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.560353][ T29] audit: type=1326 audit(1768823063.225:6778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.584051][ T29] audit: type=1326 audit(1768823063.225:6779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.607529][ T29] audit: type=1326 audit(1768823063.225:6780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.631075][ T29] audit: type=1326 audit(1768823063.225:6781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30014 comm="syz.9.7468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f3fab7dacb9 code=0x7ffc0000 [ 467.654625][ T29] audit: type=1326 audit(1768823063.319:6782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30027 comm="syz.2.7472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f535680acb9 code=0x0 [ 467.785620][T24256] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000.