last executing test programs: 2m21.025096471s ago: executing program 32 (id=21): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x2508, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000001c0)=@caif=@dgm={0x25, 0x1, 0x8}, 0x80, 0x0}, 0x4008050) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000001a40)='./file2\x00', 0x14045, &(0x7f0000001b80)={[{@dioread_lock}, {@errors_remount}, {@data_journal}, {@noload}, {@grpjquota}]}, 0x1, 0x453, &(0x7f0000000640)="$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") 2m0.651771166s ago: executing program 0 (id=311): ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000000)={@desc={0x1, 0x0, @desc2}}) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x497, 0x40) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/147) r1 = dup(r0) r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x2087, 0x703, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xe, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x2e, {0x9, 0x21, 0x7, 0x6, 0x1, {0x22, 0x923}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xb, 0xda, 0xae}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x8, 0x5}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x2, 0x9, 0x9, 0x8, 0x5}, 0x4b, &(0x7f00000001c0)={0x5, 0xf, 0x4b, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x6, 0x6, 0x101, 0x880f, 0xb124, [0xc0c0, 0xffff30, 0xff3fc0, 0x3f00, 0x0, 0xc03f]}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x2, 0x34}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x9, 0xe, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "38c070acb7951295edcd49190e69d1dd"}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x4403}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x409}}, {0x7, &(0x7f00000002c0)=@string={0x7, 0x3, "0dcbb4293c"}}, {0xf, &(0x7f0000000300)=@string={0xf, 0x3, "eab1ed7dacd63baf267c6b5957"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x445}}]}) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x0, 0x2, 0x12, {0x12, 0xe, "4792566fedb26e7102c839e934c2e3ff"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x814}}, &(0x7f0000000480)={0x0, 0xf, 0x2e, {0x5, 0xf, 0x2e, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa5, 0x6, 0x3, 0x3, 0x6f}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "37893d4dff1b341602a07827362c3b75"}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x10, 0x80, 0x5, 0x6, "d2721a78", 'q\"gc'}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0xa1, 0x73, 0x0, 0x402, 0x4}}}, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x20, 0x11, 0x24, "b77ec73ef5e7b7e011c5613d333894165237ebfaa9386805103abdc7dd3e35295d3ee9c7"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000680)={0x20, 0x0, 0x8, {0x1e0, 0x8, [0x761f]}}, &(0x7f00000006c0)={0x40, 0x7, 0x2, 0x35}, &(0x7f0000000700)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0xb, 0x2, "2a9a"}, &(0x7f0000000780)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000007c0)={0x40, 0x13, 0x6}, &(0x7f0000000800)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000840)={0x40, 0x19, 0x2, "3604"}, &(0x7f0000000880)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000008c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000900)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x7}}) write$P9_RVERSION(r1, &(0x7f0000000a40)={0x15, 0x65, 0xffff, 0x2, 0x8, '9P2000.L'}, 0x15) fcntl$setsig(r1, 0xa, 0x12) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r1}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x27}, @L2TP_ATTR_COOKIE={0xc}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8850}, 0xc004) process_vm_readv(0x0, &(0x7f0000000d40)=[{&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000c40)=""/34, 0x22}, {&(0x7f0000000c80)=""/181, 0xb5}], 0x3, &(0x7f0000001340)=[{&(0x7f0000000d80)=""/208, 0xd0}, {&(0x7f0000000e80)=""/67, 0x43}, {&(0x7f0000000f00)=""/99, 0x63}, {&(0x7f0000000f80)=""/138, 0x8a}, {&(0x7f0000001040)=""/89, 0x59}, {&(0x7f00000010c0)=""/75, 0x4b}, {&(0x7f0000001140)=""/148, 0x94}, {&(0x7f0000001200)=""/228, 0xe4}, {&(0x7f0000001300)=""/40, 0x28}], 0x9, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000001400)={0x6, {0x0, 0x1, 0x4, 0x7f, 0x4b7e}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001440)={0x0, 0x8, 0xc7d}, 0x8) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000014c0), r1) sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x108, r4, 0x12, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x94000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd55}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008000}, 0x846) ioctl$RFKILL_IOC_MAX_SIZE(r1, 0x2, &(0x7f00000016c0)=0x5) getrusage(0xffffffffffffffff, &(0x7f0000001700)) r5 = accept$unix(r1, &(0x7f00000017c0)=@abs, &(0x7f0000001840)=0x6e) bind$unix(r5, &(0x7f0000001880)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001900)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xb309, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0xc, 0x2, 0x3, 0x1, 0x1, 0x10, {0x9, 0x21, 0x8000, 0x18, 0x1, {0x22, 0xb97}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0xff, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x53, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x110, 0x9, 0xfd, 0x58, 0x20, 0x9}, 0x19, &(0x7f0000001980)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "68913cfe23459819b2c294757d02f293"}]}, 0x4, [{0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x34, &(0x7f0000001a00)=@string={0x34, 0x3, "03523d106cde88086c5f41be1c8bee36e23bd4c6235c7151d2f810db78f2c5c2aee8924d4985c00f16d41de65e53477bcd44"}}, {0xac, &(0x7f0000001a40)=@string={0xac, 0x3, "0a8c22b6f74f2e762904ddb7e77bf5ea7fb49ce3fde6163a40527e5ed937a98a5acf503bfdaab7a0c12b91cf5f5d4d45d0b1ee9b0c6f4082816287afa4abcb62340fd529af91c08a28083f58f682d23befd5174bc46b274d4452d3ad5c79062da5c6446742acd699630ff1c1a6deeb0aee216b2eb9f51f22916774b20a8e056201b8782d577128f14687b50bd7160e6b4f9d04caaec9d33bbac48cf7deaa6f144948e190c64ee36f87cf"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x807}}]}) syz_usb_control_io$hid(r6, &(0x7f0000001d00)={0x24, &(0x7f0000001bc0)={0x0, 0x22, 0x45, {0x45, 0x31, "47c6ecbdb0c0e9defd728601194dbebca82f81099e35c0a2bb336632ddc86806233c67fcc41372eaa8e8f449904214748556089d1f8ec3a6c96a1384192d68c03b129e"}}, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000001c80)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x8}]}}, &(0x7f0000001cc0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x32, 0x6b, 0x1, {0x22, 0xe52}}}}, &(0x7f0000001f80)={0x2c, &(0x7f0000001d40)={0x20, 0xc, 0xf0, "d7e24638e29bb71cb113e6afabcc5c615168fe315ce252db3db15753704e1e28a724e42a5bf011f4fa4a7a81ef8a060e9af612d46e639cbe10ead0cbeec5f7c346e19d2a42d67cb600920d6f8fb37016372d8e7f6c1dc546f5dbbbc484f488ee4819d4eee1d5de63b1c511280350f2ca67158db4c014ec7c66c1fe9a304df9106006c582a0500c1a1f11763acd31366f6aef17e62e025872a3294d0ba80b28e4a562230acd6530ae293a85f370006da10fa97e1a9b0e1c177ab10f09a4713f610d7e47c6a287c1041585a90df13c46aaf7ddd3223410331dc7ef95fafd3936e3c4da824a6fd0744acadea5f2036eb7a4"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0xf4}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001ec0)={0x20, 0x1, 0x6a, "e30c61cc81f3e07f2e0200ff8b00f95824c9a809e6ca2e056637d4f6c57fe943c0a5b079ffa1b68050dbbce47626466e561d4de90812d78ce9e5c92e1dd287ec25d4366453cc3cd4679b44a01c29c3a17be7a3c9bc1235da034562be5e2ac0e056b9aef0061cc1711157"}, &(0x7f0000001f40)={0x20, 0x3, 0x1, 0x3}}) read$msr(r1, &(0x7f0000001fc0)=""/79, 0x4f) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002080), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x54, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x8c}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x100}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x80}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x6}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x554059aa}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008010}, 0x44004) syz_open_dev$loop(&(0x7f00000021c0), 0x1, 0x80800) r9 = add_key$keyring(&(0x7f00000022c0), &(0x7f0000002300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r10 = request_key(&(0x7f0000002200)='pkcs7_test\x00', &(0x7f0000002240)={'syz', 0x2}, &(0x7f0000002280)='/dev/input/event#\x00', r9) add_key$keyring(&(0x7f0000002340), &(0x7f0000002380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000023c0)='ceph\x00', &(0x7f0000002400)={'syz', 0x1}, &(0x7f0000002440)='/dev/loop#\x00', r10) 2m0.07334208s ago: executing program 0 (id=329): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d90455a018000000000109022400010000000009040100010300000009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) set_mempolicy(0x4, &(0x7f0000000040)=0xc03, 0x4000000000d) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x3, 0x7ad, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0xffa8) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x6) mknod$loop(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xc000, 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, 0x0, 0x5a) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000140)=0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={r5, 0x100, 0xd}, &(0x7f0000000340)=0x8) 1m58.978450774s ago: executing program 0 (id=338): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000d00)='./file2\x00', 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="0d772162455e1a51d624f8d8357f21d78bfc90e3ed32a9a245806694af127d9747d414832bcbcca884d56cec6795324de91fc9e4e245db8d4e973d02ae985de9b61807605921ac2d3eca09881179e0b64872106eae24d99523b3d05b69a59c323d692953953d57c5"], 0x1, 0x318, &(0x7f0000000780)="$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") socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r1, 0x0, 0xee01) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r4, 0x7}, 0x80, 0x0}}], 0x1, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x23c, 0xf8d, 0x85e4, 0x4c01, r1, 0x1, '\x00', r4, r0, 0x0, 0x1, 0x4}, 0x50) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=@newtfilter={0x4f8, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4cc, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x464, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x1, 0x5, 0x92, 0x240, {0x7, 0x2, 0x1, 0x80, 0x6572, 0x6}, {0x2, 0x1, 0x402, 0x8, 0x8}, 0x3, 0x4, 0x7fffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffc65, 0x5e, 0xfffffff7, 0x1, 0x1, 0xffff, 0x0, 0x975f, 0x9, 0x6, 0x6, 0x9, 0x2, 0x12687042, 0xfffffffb, 0x2, 0x7, 0x101, 0x7, 0xfffffffc, 0x7fff, 0x7, 0x4b0a, 0x9, 0x6, 0x80000000, 0x9, 0x2, 0x7, 0x7, 0xabc00, 0x2, 0x9, 0x80000001, 0x5a77, 0x40, 0xa, 0xfff, 0x576, 0x1, 0x9, 0x3, 0x6, 0xffff, 0x4, 0x6, 0x7, 0x3ff, 0x0, 0x7, 0x4, 0x1ff, 0x4, 0x9, 0xfffffff6, 0xf, 0x1, 0x81, 0x3, 0x6e, 0x0, 0x231, 0x4, 0x7, 0x1, 0x6, 0x1, 0x3, 0x101, 0x845, 0x2, 0x9, 0x5, 0x77c, 0x4d89d25d, 0x2, 0x200, 0xfffffffb, 0xfcd, 0x9b10, 0x9, 0x7fff, 0x6, 0x3, 0x8, 0x0, 0x3, 0xf, 0x156, 0x5, 0x86, 0x6, 0x75, 0xfffffff9, 0x10000, 0x1, 0x7, 0x487, 0x28, 0x0, 0x6, 0x32c, 0x3b0d, 0x9ea, 0x10000, 0x0, 0xfffffffa, 0x1, 0xe0000000, 0x1000, 0xf73, 0x5, 0x6, 0x2c6, 0x2c9, 0x6, 0x8, 0xffffff47, 0x4, 0x2, 0x3, 0x4, 0xbfe7, 0xe, 0x0, 0x1000, 0x80000001, 0x3, 0x82, 0x2, 0xffffffae, 0x2, 0x1, 0x0, 0xffff0001, 0x70, 0x1, 0x100, 0x7fffffff, 0xf, 0x1, 0x5, 0x47fbf2e3, 0x5, 0x4, 0x1b4, 0xa, 0x1ea8, 0x407, 0x7, 0x9, 0x3, 0xfbb, 0x6, 0x3, 0x5, 0xfffffff9, 0x7, 0x8, 0x10, 0x0, 0x0, 0x4, 0x0, 0x7, 0xfffff683, 0x79, 0x4ebc, 0x8, 0x8, 0x3, 0x8, 0xa5, 0x1, 0xfb, 0xfffffff7, 0x0, 0x9, 0xf, 0x4, 0x7, 0xfff, 0x3, 0x3a159d90, 0x3641, 0x4b6b, 0x3, 0x1ff, 0x7, 0x703, 0x9b, 0xfffeffff, 0x4, 0x3, 0x9, 0x6, 0x3, 0x3, 0x10001, 0x6, 0x0, 0x4, 0x5, 0x10000, 0x7, 0xfcd, 0x40, 0x1, 0x685, 0x1, 0x7, 0x7ff, 0x100, 0x2, 0x2, 0x7ff, 0x70000, 0x8000, 0xfff, 0x37, 0x5, 0x9, 0x3000000, 0x200, 0xd, 0x2, 0x4, 0x0, 0x8, 0xe, 0x1000, 0x10001, 0xa, 0xff, 0x40, 0xe, 0x10, 0x6, 0x3ff, 0x3, 0x6, 0x81, 0x5, 0x9, 0x4, 0x8, 0x4, 0x9, 0x1, 0x200, 0x3, 0x9, 0x9, 0x2468000, 0x3ff, 0x1000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8c1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0xe, 0x3, 0x8, {0x5, 0x2, 0x5, 0xa, 0x3, 0x8e}, {0x81, 0x2, 0x3, 0xd, 0x4, 0x1}, 0x9, 0x3, 0xfc8}}]}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m58.619633515s ago: executing program 0 (id=342): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) syz_usb_connect(0x5, 0x8f, &(0x7f0000000300)=ANY=[@ANYBLOB="120110015a292e08100c0000a7950102030109027d0002a20000000904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x70bd29, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060040}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f"], 0xfe33) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000003c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfcbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x4) 1m57.941673045s ago: executing program 0 (id=349): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x970, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x924, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}, {0x7e4, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x7d0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x130, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x39, 0x1, "ef674d9ec1a8f1c4001793cf79b9e9c2f2aaf70e53edbfbbb762ba25b0273e112df1f07183cff34a43a15b4ad2478966ee67ba5a76"}, @NFTA_DATA_VALUE={0xa, 0x1, "6d03e41a8b0e"}, @NFTA_DATA_VALUE={0x61, 0x1, "4e8a2edce73ccd5d9d8ed73b71a8eeb61be5111baf1f76483eecbaa16bf7fb86a7d16ad8f9b6fe58357be7ac857c3512daf452e70941da7fc8ac6091a14c4e3b42e5e96d43f0c78079e81e49a3dc8e378c8b48c4fa4ad12bb963524dec"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_IMMEDIATE_DATA={0x244, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "7586ce84019f5ab748702d9b26d19d01a21f7831ed3d29456355836c1022a4de2fda5786b946ae2b418b9b584004e861cdf6915e7e754c5ce04919085f76320864f16f24b7e9033d8d17a8187cb1424ce291901be59baf54eb3f90dacfac87ace7451cc497ff7ebf7f594f889d5779a1f0e818a98ef106ba5654d87249f3fe0b00109f2c707dc81386f15e26770d58e9fb32c874b66fd028652a72d5ff"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x40, 0x1, "1a3a963b26d5362abc0342992c5a4765c188e7d5ac2e22d18cec401aca81274a5a1d4eccd4a7715ce666dca576e324fd7531103937ada8934049abf1"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xea, 0x1, "75aaa6f46340d386c8ed285ada64932312796225d6b931284705a4836995510f5f61e77baca8254e505e1a1a5ed604b60ff861ec647498032670006c603ff23d0d483d62d061cab279ad17e53e63e7ca7b0fe4a741522918921f9f8cf85d103c32158a442b0c2ec1c0302ad5bb0fa190ae016c96deb99e18b1e34123b939b37cb253332655c4ebda1b5315aaecd6da17fedf7a29a503fdd120c980c5ac2aefbd739df297d23cc9d1cf3959d14a00ae61604c9dcccbfbd46e1ab5986724fce1865d92f67b60352e392a18c8c4eca5e3646fe2775f6f88c7370be6a926d8f2447137c7ee3eadba"}, @NFTA_DATA_VALUE={0xf, 0x1, "a41aab8a7220758f0633e5"}]}, @NFTA_IMMEDIATE_DATA={0x1e8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "98e55c9a2ec69ea56884143268321762e8cf39c69557f2d910cd380a3eebaacbc010511845cd8188098ce4368ce26eddd633d78cf23f56b0d44c"}, @NFTA_DATA_VALUE={0xca, 0x1, "e1652af18b401ba32243b842d08258f3e3ecb7bba05a8c49599f9125a8038e120e6267c1ab78a13077182de94628e5c10791ff81610634092428e0bc2040bd1f7e35a965abfd3f28f19a0cb56c7cf169c3034fbaef5eaf1ba80a4ec5896982bd0283afe106e5e4217819db9e8bd88e5476b1d9c4a414c1429dbc176b1375e1b4ec189c0cb22a774c1939485046258c48e9ec23bb574f900bfc094125906bc1818f88b3564cab952ee08e9511b8ee2590805c0457a401e5d7ab9c317a50d64776620ebc75da1d"}, @NFTA_DATA_VALUE={0x72, 0x1, "afe5aca87bb2afdec17920bcf43558bba4c4187e3f8d451dea93cc24ea4a05e6b3d22bf377b1b68cadbe28957f702f6ab4abb1de893c6fa5f00b4da852ecda75fa016d666c3322c3f50ad802b6b38b7229462dfee7472c8a416948b5a334032549ba7df038e51c98eaf37d45b3e0"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x823317449e2b8aa3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_IMMEDIATE_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x13, 0x1, "9573a3a5b5e8df1b3d8f4b3cab348b"}, @NFTA_DATA_VALUE={0xf8, 0x1, "8cb984cf2c8c18275398cd29743b3fa9f69ce0dbb122e5422e0990e4f4d231757c551ff50d78a223dce7dd17ec91e881e0da3b2013a790deaf160d55f579754ac23d4957ea991a32246b7b574bd289a1248adaf526cb266ea4cf277d747bd0399279ee95b63b054bc9cd508994b04186cae5f3a441a915cd210dc2e134435982dc3f4210f3863d0189fe61656b7b87d297173a616783600013402b6426623a9b4745c85a4ef61a8436d53582837591834d94aa814a6da91c834f0574f9b26566910c16391e1787c9cc0581519bc97c9cdc59bd15c07ef5a999241f0fbb6e6815f715ecf9b9e0f582f4307d39658cfe527b88df78"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "3f2da7f78ef1c2066ba7e2953618920562b8ea245a04dfd3f5387d7b1a76377c107d3d237e26d39fdbb13c9c2d352a19a9441682d329770129d3425eb7b8faa78fc9a950a576de8689b8bdc0e9a3133ff855ae582da387c2f2153ce7fdefb716ab1f8d01fbf70102cce513460c9d70b93137b1ceb42675bc3fc9c7b4624ea6f9ca405a852b440fc0bdf1af4955f0490e906fbdae569a6a"}, @NFTA_DATA_VALUE={0x53, 0x1, "6de564ef75cfe17c5d4a5b52629f8dbba9e3bff3d1740a93eb14dd881b32d9ecd92c369950a7a5214f2c7a7a593dee2ed028d86609790d8e331e3a3e6dfe25b19195340f2c9b903d5da6bc05024a76"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x20, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xc8}]}}}, {0x4c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x5}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x4}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, @NFT_MSG_NEWTABLE={0x170, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x92, 0x6, "721752c38da60b4c54c6abc6662c46be3258f6fb058499dfc372411dfeb1253864024640dd9b8037d9395e1930e81202c000a3c85fa4854ce68f3a91798cd6730a37f3e21ebf97fb7458df03b4b41c1adb798cad73c92adf056773e983958cbcc189329666309d1cda7f11282882c3d7099758c8cd519f6ab0aa1a703d75bf5d8d3490de6fdeca16dc4d2887ac7f"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x19, 0x6, "b5f5609e1ddfbab8f5ccc2033156e3c7ef1767585b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x56, 0x6, "d61c9771a6ff8c749b041b79a212a2f17d3930a2c7ac0e1bd653bfb09d0a0d1279ded796062a6cd3f3d4e2868c558b7275777409c671533ce90373bd788d64a47a00a2d0d0a4f03f9cb9dca49dfb6ccc1692"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xb44}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000040601010000000000f3ffff03000003000000f4c9e0b6a68b876bce6a49ece9109c6a5029b0514ecd7bbcdae13f07"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'wg1\x00', &(0x7f0000000a80)=@ethtool_rxfh_indir={0x39}}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "00b29a6521f61502c2d96aaa8cc1f418b7072740c050cbe4", "83de9b8580423a6eab8c63a5eb4f09a3f1816e9b2e745e62994bcf5e1ceb70b3"}}}}}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x40}, 0x0, &(0x7f0000000100)={0xb}, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6c000200) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x3, 0x1, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0xdbfa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xe, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0) truncate(0x0, 0x8fff5) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000fdff2dbd70f9ffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0008000023020000280012800b0001006272696467650000180002800600090000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@acquire={0x128, 0x17, 0x1, 0x3, 0x0, {{@in=@multicast2, 0x0, 0x32}, @in=@multicast2, {@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x0, 0x40}, {{@in=@multicast2, @in=@private=0xa010100, 0x0, 0x0, 0x201, 0x3, 0x2, 0x0, 0x20}, {0x8, 0x0, 0x0, 0x0, 0x0, 0xfb1}, {0x1}, 0x4, 0x6e6bb8}, 0xfffffffe}}, 0x128}}, 0x4000) 1m57.676372081s ago: executing program 0 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@canfd={0xd, {{0x2, 0x1}, 0xf, 0x1, 0x0, 0x0, "754b0ee484e0efe8fd8867b542c113831de97b1f39a7d804d4e06cf14e88154a3c89953730cf0516e521085ec4b4fb5794dd09dc488c1023f3fc0f695b237964"}}}}, 0x0) 1m57.662355351s ago: executing program 33 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x5a, &(0x7f0000000580)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@canfd={0xd, {{0x2, 0x1}, 0xf, 0x1, 0x0, 0x0, "754b0ee484e0efe8fd8867b542c113831de97b1f39a7d804d4e06cf14e88154a3c89953730cf0516e521085ec4b4fb5794dd09dc488c1023f3fc0f695b237964"}}}}, 0x0) 1m37.386405442s ago: executing program 4 (id=774): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={r2, 0x6, "6dfbb3d2a02c"}, &(0x7f00000000c0)=0xe) 1m36.459027036s ago: executing program 4 (id=785): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, r0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280), 0x83, 0x4a7, &(0x7f0000001900)="$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") rename(&(0x7f0000000080)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fadvise64(r1, 0x100000006, 0x5, 0x2) 1m36.38063816s ago: executing program 4 (id=786): r0 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x3, 0x4080, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_pgetevents(r1, 0x9, 0x5, &(0x7f0000000700)=[{}, {}, {}, {}, {}], &(0x7f0000000640)={0x77359400}, &(0x7f00000007c0)={&(0x7f0000000680)={[0x8]}, 0x8}) io_submit(r1, 0x2, &(0x7f00000006c0)=[0x0, 0x0]) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x30) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)={0x114, r6, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xcb, 0xa8, @random="dece413a337f66433d45c9ba569b4cc36a76dac6f1f2ca2bebaea9651f2795ce4ba8968abeb355b64edd0620ecb61972130ecbf37bbde7f12966f404f81ededb4a0c9d472d1a8b4a5f8fdf88bf3cb4e97e8e944d7504dac456a3abe7bb813c20dcb5e4aec26ba73a9455ea8107d2c982115087d8e1363affe7c7a9ec567e249d730d04e0821fb8f40ac83d62c1ef95e4e9fc16e380bc75e391a0c0eda4eb23f05a64edebcd512580498a9328554b732dcb9b6b95a1b463f0065326d5b34d1bdccbc3ffc7b833e1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4041) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x1235, &(0x7f0000000fc0)={@remote, @random, @val={@val={0x88a8, 0x3, 0x1, 0xffd}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "a66fce", 0x11f7, 0x11, 0x0, @local, @mcast1, {[@hopopts={0x88, 0x227, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0x3ff, [0x7fffffff]}}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x55}, @generic={0x8, 0x9c, "901604fb7c88d8a8d5852ec341bc94f9520903afd99156c74753bcf3ab2b617cd70cab111c0e8d5a7acfa8186ca8a1f88eb5713e088b3d80c3c8f13a637e148408a44368d5a0f60d4c2ee4306bf190d111260ce868602ae4d6f125abdfb26cda429f21b38546af43d9ffb428b98e39c884c982f9d1ceaa67f06030d300a65ba0c8bf3ee52c79e1cf56b67637418f24ea30e2a2c80df5f3c34f656bd8"}, @pad1, @generic={0x2, 0x79, "eb7b68262cb67dfa5a390d7d3b35be3500b662f4cffdd97b8b15b1385403ed6105eb5222e5cff239afe7a90cadfc081c8297190931be568071ca16f3b54a9d36984cae964195b0090e29c57b7c8caa7c122b9acb5b59d6f3fea99f59dd7589a416f7c46b9a7ccbb838512ee954c3f814a515784aeee51e41a6"}, @generic={0x3, 0x1000, "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"}]}, @fragment={0x5e, 0x0, 0xf6, 0x0, 0x0, 0x1a, 0x68}, @dstopts={0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1]}], {0x4e21, 0x4e21, 0x97, 0x0, @opaque="60edf4dfef5970375284cee1fb7462d0a966b135a64b289cc0d91898c3974015e9077bfcb5905f8fb48f5d3487c80d80c883e2be1f600a2da62bd2f7083d48e1da41f8428f94ff5835803b2a723aa3c0847af5ebc6f6843b39713c360e4353ecae82f8cd59e356dd286d508d9d7bb5d173ea70d56ff8426c01868579aa735dd5b21d6332b6832366dbbb4ef52f23dd"}}}}}}, 0x0) rseq(0xfffffffffffffffd, 0xfffffffffffffe8f, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='!pu&\t\t') setreuid(0xee01, 0x0) 1m36.294255545s ago: executing program 4 (id=790): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80368, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007c5e0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x5}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000040000000000000000000000850000000800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r5 = openat(r4, &(0x7f0000000080)='./bus\x00', 0x1c5840, 0xde) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000000200)='\x00\v', 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) 1m36.160782994s ago: executing program 4 (id=793): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x5, 0x690bb, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x600000000, 0x56c324de}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}}, 0x10) (fail_nth: 9) 1m36.008280782s ago: executing program 4 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xc, 0x2}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m36.008211492s ago: executing program 34 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x72}, 0x2c) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xc, 0x2}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 56.532250501s ago: executing program 2 (id=1501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4623, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000cc0)={0x138, 0x1, 0x1, 0x301, 0x0, 0x0, {0x4494a12cbb0f8a23, 0x0, 0x6}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x7}]}}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x4}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x3, 0x3, 0x3f]}, @CTA_TUPLE_REPLY={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x4, 0x0}}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2d}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}]}, 0x138}}, 0x880) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[], 0x0) unshare(0x2c020400) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r5, 0xc0404806, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4f22, @loopback}}) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}}) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="0e00000001"], 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x294, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29e42639}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_USERDATA={0xef, 0xc, "76cc02e911ed070badefb723e78065e0e679bbba78e23551e00ec30621ab5de9561bbf0e6da29b0251240e0223ffc5ca60f886fa05a67df1613003e70218d46ead5af5c8ee15db14828935a61c911c81d44c76d367943184c00dec01022a790bd210416cc4d7a978df8ea189a431ef5405171632097af6d44d10e82a064ad093cca43b8932e76521d310d0ebcaedf45aca64bf3b11403e060ddf33cb46c068049cdaecfadf0db198bc6712ae704d1826381620c5108e0b7c88564719a7ad10876abac62724fbebe7779935ea1e853deda2df4550dd9f128469acb4aa46639b8ec720b5eae096bd730809d9"}, @NFTA_CHAIN_USERDATA={0xfa, 0xc, "d0bb88473ec053436aeb5dd51a00ab8594b07a7f5d0c0783073ded7b96e1435f4b523b782995baddce69d46a26e0c4ee2267436513aad060f770733c1a3b58bfb59c8a558dc6335d98339a0096d619852912c94049f83c7e2ecf60497a709c4debf324097e696bfe9afec14a91eef4ac83efaaff7c5488dce18ed0cb62915ed2d5bfaae6a58eef4233887db10018c25e82686e8365359d88dd47aae7eeab0f9934a7b797795be566aa6480f31577a79be117e557eaf474cf5a332662f3ba00634ce284d6b79530a665d150e976ebeb875938558a400077e934a4b5473f1ba5ab2e4a45e48c1b7a1ca26a946272ce083b853cbf6898a0"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0x71, 0xd, 0x1, 0x0, "46524b300673ba209253624ce9df5c976d8361560dc268e54536234c4da597accd983feacd8777348481de4e2cc150c3f0cff779783793b0e26586f77b6380ed2437794190b30706b8e2e7c13544d3f03d9f36fde02c142b592221827f262a7768b066fbd2e0515c634ce20339"}]}, @NFT_MSG_DELCHAIN={0x144, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf2, 0xc, "a16fdf607f559b05056123bd93acfce51a0dc7f69c74e9c31e6e48ac16dcab0260d15d5e9f6dc6ca42d011ba2d4e9624d12f09023f3e7c0302b963b24b5e8d1160143bee86db0cbfe0356131aa06602c4b086c5788bc3d32c876967dfe6ea57f65ae762ddb5242d4556354af9c08da113c11c48f0f3e855f4313879df943982f6e6cbb58b2ea883b0c7a6f2cf15a32b9c83d80d227cdfe77b2d43ff52046d291f9e169afe8345ecc82821f808bfa803d5d1938ea2ba686b4c08b7fc1b6f8e7f34d50e3cc95632c73b9e7f4c0eec00f89c01fd53dcc26165088f1717509c1cf09278cf5eca507ef658a17aa61e58b"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x250, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xae, 0x6, "6a57c054b90cd54f5b32d1e344f5d63afcef93a78ec077b5c16654b755e29dc841246d8f9e3524e391a0104f3774c9d42bcf7946d28f1f3a08f7f347ea16aa7fbeeaed687a0e5262ec0d09b599649399b1deff33deef07052c73da9b8451d588a575e531d8190fa39ca9e8178f1759dd6fdc32a32ba0ef81da43ac42d80c3ecd607becd5d05f9d942c55a614fccb2d9120efd8b24167563a1c0298f53cfff319fd42dff99985cfb16ae7"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xea, 0x6, "a5a8ec05d49ea524d456c483475c8c72cb13f5434736f77446e860957532f11578fd560ab08010a1ed82fe2cc51b2eb3706c0a1b979f01a7dea48d6f69cc896b5a19382057c88a5a9f82289fb0936d9215343fdd6338942f0a97b6f32b95d30a97784760f55630208dbdd30de7b36d72896abf8da6c350a6317352b7fa2e16dfc3acc71ba06cdf308398db456df0d41f79b18101e69623c3cfe31d570bc5f5702c59576dbcd49413bd16cc1a69ee9de89b12943cd2be1042a6047ff7b4553bda95dfe95db40293733a121bb5829164e27410717dc711ef3dfd2c657e31a7a3c584bb432a6dbf"}, @NFTA_TABLE_USERDATA={0x64, 0x6, "e67b55cefca9bb6cfc05000acd4aa3a555d7d4f70e227a0e54f6e32e6a6229e88d44817dbda26c1fa3af2db03eec0b9060a4b4de309bda32e95fb8a513810098f12950d1b6d6ad645e3c13faee5c8497ed0246346d82f9c356c2ded9c94982f7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x198, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x8ad923f9b89a1aed}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x41}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0xca, 0xc, "5edfd455d6b79492c9601dd789a7f6bd7e83fe193fdd0c499bab1e912ba73394a24fcfb568f3ae5bfc8218c04086e8d4f7be6eb799ec2ca358e94d705a3d3aaee205c15ab93d3283fdfde4fdb20aa640f2f45c454f747863388f9212005e241a0a07c6cb943b5711b9519a3dd76adc5e4bb5ad7604fd4d1e87a3990b7e4ee97b3cf1506dac589d25f3b2091c28383792daaa3f7ff8f3b819e38fa7b70335b8775f84c2a270a58b023012899726dce924b953ecd7ccefa64ff9836ca293ae971fceca7bfc6b57"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x900}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r7) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000400)={0x30, r8, 0x1, 0x70b92c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xcc}, 0x1, 0x0, 0x0, 0x2404d849}, 0x0) 55.595969007s ago: executing program 2 (id=1514): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffa}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018"], 0xb4}}, 0x40) 55.54402803s ago: executing program 2 (id=1515): io_uring_setup(0x30dc, &(0x7f0000000000)={0x0, 0x55d0, 0x800, 0x0, 0x1d}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x20000101}], 0x1000000000000044, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r6, 0xda90) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket(0x1d, 0x2, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) unshare(0x8040480) socket$caif_seqpacket(0x25, 0x5, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x8, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x20000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), r2) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000880)={&(0x7f0000000680), 0xc, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="18810000", @ANYRES16=r10, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet(r7, &(0x7f0000000640)={&(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)="5367a0cbec50cd8139d5a58f56047e05fe2ab1d843ca80a3813583b6abf715b92a0694e48b410a22ab8241b67c14f7180e8e617a12f91b124a5fa073f2e71685f9b821312734fe74707fb04b7d73d1a14889e3be1bc6bdbc8a425d1dfcd1a8fac89466ab8a9156f1712152b97014af046149f23452a758822e9813a746fdb8a9d9d92d17473c17a36a4d0435a17eb3bdd9dfb7e7a63a2e2e4ced8c81110ecac65d521f9bb73a153635607d99be79", 0xae}, {&(0x7f00000004c0)="e29f5c874971bca55908c9496c79849c54a32b0452a4764edbc09e77865c08f945081bd9bd5e5284ac3d3e555a23aa729add32359eb19f5c0f54c47e0f29140701b781e0a4d7af30cf59fe4248625f694a1126a751c485d3b8d56c3e2a38f526e60380adceba520b566935fb3480a902c494b25a7f986dccfb8b3549484e38bfed977b2a547c4bb411fa6abb598c9beee3a56a04cffe52", 0x97}, {&(0x7f00000002c0)="15acc5c6f05882d4c65611c5c73b97696aa8eb8a2f127e4cd6f3c27739ef0c5bf58f93146dc197c57001deb65078c9b955aaac149d0970652159c5c4ac2a9395a3db13915c42ccfeded91a7ef10272e75dd88a1069f701055e7636440bd882bb228dd4a14ae8550a184dfbe07c1cc4657c1d1dccdaf723ce850368", 0x7b}, {&(0x7f0000000580)="362552f1ecc277713fd18d741d0ba80bbc9d302a407be9f72abfb905cd0f39dbed9d6929077e3c0555d7784261ab3e7a1bae4420f71a1b7814da6b6cf675b9bd5b49ffb35e211d6b6c61", 0x4a}], 0x4, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x30}, 0x41004) write$tun(r4, &(0x7f00000003c0)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x4, 0xe00, 0xfb84, 0x7}, @ipv6=@generic={0x8, 0x6, "9756ec", 0x0, 0x3b, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}}}, 0x36) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_emit_ethernet(0x27, &(0x7f0000000180)={@link_local, @broadcast, @void, {@generic={0x0, "5be23c9b0f2b0c8ddabf9ff05c780af1630dd9b4eb16d1e10d"}}}, &(0x7f00000001c0)={0x0, 0x2, [0x7db, 0x53, 0x1c0, 0x57d]}) 54.595637195s ago: executing program 2 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x11) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ftruncate(r6, 0x7fff) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x3bb5]}, 0x8) fchdir(r4) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00440000000c0a03000000000000000000070000000900020073797a31070000000900010073801400008008000340000000020800028004000280140000001000010000000000000000000084000a00"/216], 0xd8}}, 0x0) 54.103137194s ago: executing program 2 (id=1536): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffa}, 0x28) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c00038018"], 0xb4}}, 0x40) 53.760366264s ago: executing program 2 (id=1540): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') socket(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}}, 0x802) wait4(r0, 0x0, 0x2, 0x0) 53.751616254s ago: executing program 35 (id=1540): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141002, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') socket(0x11, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x28}}, 0x802) wait4(r0, 0x0, 0x2, 0x0) 36.838651388s ago: executing program 8 (id=1822): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@broadcast, 0x0, 0x4, 0x4e20, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 36.701193256s ago: executing program 8 (id=1825): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010804) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 36.616392181s ago: executing program 8 (id=1826): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000020000000000000000000822"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010800000000000000", @ANYRES32=0x0, @ANYBLOB="804009000000000000002b10000001004bd435503f9d2264cf75324aee2d3cea98b67e0cf19b230a10fe043c87119dbac40957336cba1e73a53e6253e7b40f12c30b30b004000000a6f14c0734d9c5d8f34f749e56560638ee5e", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r3, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={0x0, 0x84}}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x3e8, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00"], 0x40c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0x4048000) 35.802709889s ago: executing program 8 (id=1841): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10008, 0x8, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10008, 0x8, 0x1, 0x5, 0x20009, 0x1b, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, &(0x7f0000000100)={0xdd0c, 0x40000001000001, 0xfffffffffffffffe, 0xb, 0x4, 0x800}) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 35.636494908s ago: executing program 8 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 35.356492515s ago: executing program 8 (id=1849): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) 35.356312425s ago: executing program 36 (id=1849): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x2) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x11) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x81, 0x214, &(0x7f0000000840)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x32600) 14.293454971s ago: executing program 7 (id=2179): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1100, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000080000000000900000000000000000000000902"], 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000190000000000000000000004000000000000"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a00000000000895"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r1 = syz_open_dev$loop(0x0, 0x7c, 0x1e9142) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x8000) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000200)={{'\x00', 0x2}, {0x200f}, 0x28, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)="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", 0x12f, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x18b}) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) write$char_usb(0xffffffffffffffff, &(0x7f00000007c0)="a19155d5701a5fa9c3c8d00f1806268e65c7e02055b4b0c286c18d25b1e33a342a97af31839b5eb396d937a9af493e9990f51b634df1ffaff960f49a10afda7c07a838cb855af95218a0e3c4fa00000000000000000000000000e2be07c9394a8e5521716d2fcfdc0dee51104b79c8dec998ebff63125f266cfbbb7a7e46d4516aa014a570e60c", 0x87) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0xffff, 0xc007}, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000740)=ANY=[@ANYRESHEX=r1, @ANYRESHEX=r2, @ANYRESDEC=r5, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESOCT], 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000008000000000008da580000850000007d0000009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/132, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0xce, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) mount_setattr(r7, 0x0, 0x9900, &(0x7f0000000040)={0x100002, 0xf4, 0x0, {r6}}, 0x20) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 14.230904915s ago: executing program 7 (id=2180): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x14) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7f, 0xfffffffffffffff7}, 0x100a, 0x10000, 0x0, 0x3, 0x1, 0x3, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 14.230155195s ago: executing program 7 (id=2181): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x400, 0xfffffbfd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x13, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x8000080) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000008500000060000000850000008800000095"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$pokeuser(0x6, r6, 0x388, 0x9) 14.051497365s ago: executing program 7 (id=2184): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000012", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@errors_remount}, {@jqfmt_vfsold}, {@bsdgroups}, {@discard}]}, 0x3, 0x43f, &(0x7f00000002c0)="$eJzs289vFFUcAPDvzHaL/LLV4A9+qFU0En+0tCBy8KLRxIMmJnrAY90WgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwAT2Nmd0Z2F12a1u23ep+PsnAe/Pe5r3vzrzZN/M6AQytifyfJGJHRPwWEWPNbHuFieZ/N65dqP117UItiSx788+kUe/6tQu1smr5ue1lZiQi/TSJvV3aXTx3/tRsvT5/NiK2RMTU0un3phbPnX/25OnZE/Mn5s/MHD16+ND080dmnutLnHlc1/d8uLBv96tvX369duzyOz99k5Txd8TRJxPLFT6RZX1ubrB2tqSTkQF2hFWpNIdpVBvjfywqcevgjcUrnwy0c8C6yrIsu7938cUM+B9LYtA9AAaj/KHP73/LbYOmHpvC1RebN0B53DeKrVkyEmlRp9pxf9tPExFx7OLfX+ZbrM9zCACANt/l859nus3/0mh9LnR3sYYyHhH3RMS9EXEkInZFxH0RjboPRMSDq2y/c5Hk9vlPemVNga1QPv97oVjbap//lbO/GK8UuZ2N+KvJ8ZP1+YPFd3Igqlvy/PQybXz/8q+f9yprnf/lW95+ORcs+nFlZEv7Z+Zml2bvJOZWVz+O2DPSLf7k5kpAEhG7I2LPGts4+dTX+3qV/Xv8y+jDOlP2VcSTzeN/MTriLyXLr09O3RX1+YNT5Vlxu59/ufRGr/bvKP4+yI//tq7n/834x5PW9drF1bdx6ffPatUeZWs9/0eTt9r2fTC7tHR2OmI0ea3Z6db9Mx31Zm7Vz+M/sL8t/qKraeMaV34TeyMiP4kfioiHI+KRou+PRsRjEbF/mfh/fOnxd3uVbYbjP7eq438rMRqde7onKqd++Lat0fHVxJ8f/8ON1IFiz0qufyvp19rOZgAAAPjvSSNiRyTp5M10mk5ONv+Gf1dsS+sLi0tPH194/8xc8x2B8aim5ZOusZbnodPFbf1oROT5mSJflh8qnht/UdnayE/WFupzgw4ehtz2HuM/90dl0L0D1p33tWB4Gf8wvIx/GF7GPwyvLuN/6yD6AWy8br//Hw2gH8DG6xj/lv1giLj/h+Fl/MPwMv5hKC1ujS7vxo9mWbay9+clhjUR6abohsQ6JQZ9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiPfwIAAP//Sdbn2A==") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0xa04801, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16], 0xf9, 0x1213, &(0x7f0000000600)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AtuxMWlycKVIEFSkAwotRFaQbg1Ex0yzpTcITAiVldu/Ryu3Ql+g2z8DO6y6bIL8UrvNG1SU4vQZMQ+z2Luyz3nxzkHhoEz3HP33/3xq+2tqtgqh9GamorWrYi8m5HRigOvr4+v12+sr7bba1czr6xeW34nMxfe+PXTb2Yi4twnPy/8MhN7S5/t31n5fe/C3sX9P6992a2yW2V/MMwybw4Gw/JmbyE3u9V2kflRr1NWnez2q87OofZObr0dEaMs+5vzc7d2OlWVZX+U251RDgc53Bll+UXZ7WdRFDk/FzzWmSd32fjpbl3XEXV9Jp6Puq7rszEX5+KFmI+F+C4iXoyX4uU4H6/EhXg1XouLTa/TmD4AAAAAAAAAAAAAAAAAAAA8O/7p/P9iLDn/DwAAAAAAAAAAAAAAAAAAAKfg4+s31lfb7bWrmbMRvR92N3Y3xtdx+9K9j1504nIsxh/RnP4fG9dXPmivXc7GUnzfu30/f3t347kmv3qQX25eJ3A/P920HeSXx/k8mp+JuXv5reg2+ZVYjPPHj79ybH423nrzUL6Ixfjt8xhELzabsR/mv13OfP/D9iP5S00/AAAA+D8o8oFj9+9F8bj2cf7B/vrJ/w88sr+ejkvTk107EdXo6+2y1evsNEXvoJj9252TK+IUx3q6RcSduilmjja1TmjQVkx8yYeKqf/GNBRPpzgbR+9M+peJ0/DwazDpmQAAAAAAAAAAAPBvnPBzhdNxzJNl701mqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzFDhwLAAAAAAjzt06jYwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//qH3FUA==") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', &(0x7f0000000340)={0x4009c1, 0x31, 0xa}, 0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r0 = socket$inet6(0xa, 0x3, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="40cfcef17b42de75affc7d706bd2461aea05961b954ec914b0f5c3757292793cb53d5dc1ff4ef94dac5ecb41ab53fc322f3cb7c4e44986a8b071ceaaacba223e2fa67fc12f806388aeac562de15c209dd9d56c7260bdf7bf2e1ba95c60db8e1faa9b042b224a1b6904c143bd4955685021e2b9cfa933512784ad2b705973fe367a30861c4634253b3a496edd9577c201232de7a22af29d85a88d98f033ff0c4f5d7dd4c6ba3bbd41252585312541165487db46c8c0f53bd6ebb59bf33e02fcb23887b4c83820dfc8d03999d526eec0f7ae530585f9ed3a7396f935240ba6f52a641fe66f55000000000000", 0xeb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x8, 0x2}, {0x0, 0x200000004, 0x41000000009, 0x6811220d, 0x100000000, 0x4, 0x1, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x1e}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000000002090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="d8000000180081050081f782db44b904021d080000000000000055a10a", 0x1d}], 0x1, 0x0, 0x0, 0x6000}, 0x72f1c90e0ff7f29b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000021", 0x5}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0xd, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="090000356b69ff68611016cee4f3ccd9470005000a4b5ce588c02de0b9ce5f36bd5e2051394323a15c2247a15cc79cbdd8f6d391151ac49bbe1e34464364636c898807b635b26ae6bf0ac4be5ae40c2a256272c56661510689d645a9c95cc54c947e3e06b33c3aa2d495d718473d811cea0d3902e9ad9eba9f54843b391c126a469e38e0000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0806"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r4, &(0x7f0000000140), &(0x7f0000001580)=""/92}, 0x20) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x101202, 0x0) 13.867243046s ago: executing program 7 (id=2188): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x38, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x3c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="2ddd70fcee40c4925b7052dc85bd5a27"}]}]}, 0x38}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x14) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r5, 0x25, 0x0, @void}, 0x10) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) 13.606791361s ago: executing program 7 (id=2195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010804) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.537073565s ago: executing program 37 (id=2195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010804) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.707477871s ago: executing program 5 (id=2385): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x400, 0xfffffbfd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x13, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000008500000060000000850000008800000095"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x9) 2.168560543s ago: executing program 3 (id=2396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000002000100090000000100000061d3dcfea9b3a710f59a0b592a1db5bc5882ebfd33dba025bad1d88b4c958e79cf7b05ef2cc80acbf8c88dc72e496be37e0e897553f415f6d745dd9aece7d2ce6dad55f07f05d3316cc87f1fae8cf38df6a9d4fb0dcb9c34d1df7a4000000000010000009d1d0ab902a48711e5b5e6864113534b0e007b35db9e79d63933ffffffff8d05d3fff720202b8ae2434028e0f44ae49e68ee0155c26a331c59b3b4e6ea99a4af6e15e7bae8550496938095a835bf8ab44b4479b59c43db3f87dd318792c2b6aa7918158ef736016e13ee274e6702", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000480)={[{@nodots}, {@fat=@fmask={'fmask', 0x3d, 0xdbd}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@fmask={'fmask', 0x3d, 0x9}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@sys_immutable}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@showexec}, {@nodots}, {@dots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = semget$private(0x0, 0x1, 0x40) semctl$SEM_STAT(r2, 0x0, 0x12, 0x0) semctl$IPC_RMID(r2, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8857}, 0x40488dc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000000)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x6, 0x3, 0x3bd1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r0], 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0xfffffffffffffd98}, 0x1, 0x0, 0x0, 0x20000004}, 0x40800) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r4) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',msize=0x0000000000001008,version=9p2000']) tgkill(r5, r5, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000001440)="5930a30279e55a82ef201f7e593a7063acb636cfbac242cd4c503e6aaced95ab54168c10a9a68d86b4cde8e9eb1eda367174fa9f59aee16ecb2685b4f5a242d2da65ea8d9b84ba242bcd37701900d074e35c407b34a19760eed22f12d472377d4a67772dda1ba02d5f53b958e791abaf52faa7d3936dc3e0a98ebb636cd99fe912efcf294cde98663564cc721f9d156190e0b039046ba971e9050ac09c222f3bdc8a63ad805c279c0bff2135942b32bbe0e917f5a09b214d258303f068f6a509d37c0b4059eae3a8a2c854860357fc4be50e23854a69df4cb4f8c537dd5d63f38219531a4b75be0d3b3b45d05a3e7f1b01fececf980c1e063c6b120aa8694ade8cb2513a87008ae72e3d8a509f8dde885425174406260da12b2a3e6494cba26c101a01f353abab50feb3b1bce640904011c1ede2ddb889b2a83998a078ea4390fcbcbe51e2967310a9d7eab8c103182f7573149cfc9144e7d5b814e023f5f94e26a9c6e7794ff1841a86cc8a9f03ff15c16001ff40f61e66bf860668464aced3d1a5a77e0c954576c07ac87e2b7e571901feb914f8b11292da02172891fc567667a08fffa5d2ca10105d6b73e2f5611abcc55c73550bc64aa22aedd7d8a1b114558965204dc8a55bc22c7a4243176a087d16aa668407860f22b608e6792369dd6ca0f562fe9d12943073ee6c8f9fa617559b81de35b75481184a4142e358bb8a417a2fee312427ac397a540f8ae453f190fdc8b54bb5952872702a939825cf963d63d17e2830e03d1a45b4be9b7d9a53c79f659d5f1056a75888c82e4c457361a589b41c8be2a281a3a9bf2689790ca521caced24ce543951a8e3a65f6f0a4716019758e8256143308f5366e1b9359a6045c7981aabc1c3dd459f1787835ae542b4d70aaa6ce7cd333a86ff28720813f48cb44012ded04119d462ebe216d50317fec8b5599b2d63e6011733129627039d2a81bc4a03d32b9e3406f3fe51973ac8133f2378ff538259d5c82d5698351030efc5df98e10a94eea7e8fe61be3007cf84d3ff7441c6dbb74ef2828838e85f9bd1cd9f9cea70ffc993a338a8fbfdb82a2b948013b5d5460813a80d56d15139b735870cf8953724c303d6abd062fed276d9b3d21a02f5e38f1c7f72deb9570b5a560e91ce8087c9536df7c911bfe711d6d1bbab1131d1e92e29e59236dcb60755f73594d29aae9deedb6b4688fd4589858730555d2d7cc72d2a5dfdaf3d478f897785d7bb48ff83f5e465acb39be0069c00650cd2d560d1af18615d7b80875c01619304e633081250ccc48e8dccab07dfc071d2797a1fdade887fef0c2399dc6a4948987e6dd9aacf775f2962623b096e3998f951392c14d3fafcb0f43e52f350c8233332ead5bf8aba4c4c920375722a9b67b698ed3876ac8b2fcba6472fc027bb16137a857af48be8b17ba24d904ec9a4c1c7fcc99b81f5a04ae1580f1d99748ff2d9d0d01a7f68b6f1258771f2a6825d979bd982faf3478aa7fadd470386b3d1801c128273e81eef9ad70505572dc559ac3e7b9fa9cac08244c0b31c116c6b8eefaf069689f37dc24e03c7c2855a2f08f628b715056235842c53e4de2c5e8952028510b68003fe2fd3977ffc26bb55c68f686ac95cd13841305f549d411c80926a4afdd83fd65a3b9b5611c2c691b4aca35bc3105b224cecbf2d261e970d248cbd9690ddb37183b23edf4e066abfddf19230bdefb11a2a12ee40e2a7fc9b4f35c1a395230cf96a630284344f2395b837c2dd901ab808fa01b964ce9a1779feeedb7a85692e524b0f7711e28b5a37cef0606fbea7f96105931bd401c9413d694b610bdbcff539b5fca43932ff39d5bcb3a36bc93452645530d447bdcc822396483d207ce417e99b308909b90d5ec30b97d0f46de96e3b270172231fed64f30f92f94918fc9f735e73caedcca0c44b87f01f0354dbdc920725df94e528fc4c9fb605eecdfe39c8760c2ffcc6e3a0a3384d342c9806aa0f107d92a240d6f7710164584df8e282b04f300a520f3baf17fe3c4d8b7ccfb16e004fddd222d7da2c98fa3175f661ae39fda833482a6ba82c8454d21ac41da4d0abd1afde0c9595f42753d95d79bd73b70e9fbf91ecc2be989ba4329478f5f4bc01dbb08e14bbab25074b3ca900982d08c5be90473169a1e74a70b154f4a543fcdacaee73357c57b4810788eedd8842b8d854bc8e463cd2bf670244b244f7e4c924b2ad987795e29a9defe6d6569ef3ed2e917d765b233eacbf0e0ec61db55ab474cafc3f50e8dd868e21ab4b89e8edea13e88d1460a03c2e97d15ae602b48e8513995512fcda4a48cb7ad9ffd36f5b4549084b5716d7df8eaa3741df71b8e181531e070d43ca7a6484b86946bf0bfeb8eebb5497b79804bcdaad92d3ed92ad53328400cd7e10a80aa6ddeb441206c33f304e43a594a83209258f12e89afbd3d3ce1a0c281646ba217e96e9e2d1441192f07f792fca3340fbbaa6cc4416d69eabf83eef143f2def3f3b05ff207cb8dc5ee7ad21d250db4d5fc1aaa70fc95bba79f584ebb665c866d663f8175222a816d7bf099a3c79a02c35b6133846de8e927cdbb6a59f2642d811e538a5e9d541f15f2c3746e1e79b3baac250bd86f10e97fdeee7f63c1062ad3d8b9a78843f3c07a5c3ebdcdecabb109c86ee9159f37349e38d2fbc9eedb1dda579f8ed36b607ee4481c7d2981236aff6fc6ee6932435d3a0762d5ff923990b65d6d757ceb389a27cb1ec27b00aa29d85fc55acd7202d3725ca50de64851c8b144fc3e6bbc07d15fbc70d71cd6e326c200ab5e1302fee98ca550fe328ce90f4d1bf2b7dd0d6d4c449dffe16c30bc6f9e27ea2c371e97b4332109321ba06c1b4525012f4b526a986dddc0290ee4fde45dd7b78816bf03e16ec9eb57f44ba3af7d65a03209d616795b81228cd06220de4fb2b3612db6fd778b2b96ee7a6c20f9443999f70b2044235910c9b588261d4db73c627dd2eefd9fe033aecc55b9d82c032e60f09ce2f2e076dbc7f2f27a5b249e7ae4cff7d298338e270a25f125b126f91a41fdd6ee2363c224849be02dbb06144a7bebb222eaac112f73f504a3e04c13de6e3453d222822f241f393ab2c5245ca73d59d75841e4e1747be1b8898d8291ba7a79126b01e174b0e47754f04c14b12e5aaa9f9605f0229952c206ea7a88b27aad4a5c4af8b33d1c29066fa00ae1f9f08f0faef99c8561767e6fb5a8d762b7eaad7f9728de83431ed653ae9521b7e8f0fe2e6d257d40cc951dcc01f0ef7e8ecbb66cc9362b36d572ae26b03fcec342d656cebbb89453b53c21e40e35cdc2f63921528e41f816a7922228ea1ea130b5efa65d3978892ee3ddfebaf87a041140679b54849d7bc28e5a06cbf1626dae291ed9d0ec329e997fcf2983584f01c98adefb5af2215405af7fc1aded8b2775825b4ec66abfd74b317e8ede8d445a3d2568d4da880742009fd4a4e1147e569af839ea46a464bca1611da382fa40dc98fc164ec69dcb19bc401f3149cd633b974b00a490184aa09f1947acad662f0e266c51bc2e16ff14e9393e167c4329547af77968177da0a833ba9ff22998a930c13f66660bfbe793c4517f38fa6f5fd2b0c27c447af29afb50dfe92cbc9cff5dd2fce42f69eb74f6dcfd3c6d3aa3e416b17f3a2ac96fc81fb8db2571e1b39a4e1bde348d34dc2904d9f1b51e8d15caa46ce9e165597025f52b38b0c43dc95639e655b61ef2b0a411f70ca4070d9ff55f62e9f7efb214887fea8b7ab2fb169412eb13c950e2a702abf91ba25cf9e5782e507c3e3f2811ef99df31456d3b1a0e856baf1c5359e6aee3315bfb331604ab91117a87e5a6c886a722334da1f99becab5ac9592a86299744337c281096fd56647b13e1e5469935ffa7e34b45236e7f8a35b18cfd7a7e3cae62c39de28dda21362270e83c6f5100ab2519ac341b1f2375685865aebcea9f22d857d9d92cdb5dcd8c687cc03d633dcb7438cc60f184fde2646a3cf657e5f37b7001c46080ade8140f00578fce00f06519754ffe73241d6dc92b2d848614677c5dd5042be081bd7b470c6d443b2e79ae664f7024d336ed2d5c569760fd814ea938490e0472d3ea0e21d754e48b172de4dd8d297008fd8e74ee2d9f64b9e940be545c39a0633ae55854c16a980c9b3b5661363c866a2fb33b25899d90cd6a09064071536e5759bb3e3a5a557a8dd270ddc70e5ab62b9109bdd27816dc6a444448357c3a19935c089bd478a22916b8c731c402a6ac68e6fe1fef590f3cd867ed3bae26a4f933af96f40d910052683a5587e0e0517c70d1355f5b8b45c2c57693014bfabd8e489975be6ea243ac5220a74183f6fb5cd46cb8f6c9a2b7435d087dfa0c946a162e54bf942d640ecc0ea2869295b8ad72c6b0bb0e8061bd86a5ce14da9e578ccc429c7998644294440127bc9a36fdc72dc489b17ebaae72794022c23d00e5886a9433099df0d89b1153977c9f882276caa07231bc0b0606bdd0000e0ae119fa6414ed1440f3285769d38209f9997acd1b53fd890036894f9f7535a014481654ca9c35d3202506eff601f35f353ef1369137ae93a294f079472a31e367e96b15675521f06ba6ca68c9f1f2c42ed3af2f352f276ef4af9dc985d01964c14c675ea092e0154e9b2e98384dc701cc6cf494e013423402a329e45938161e86e3db1468801c6246d9e370ec8b4b1db534989cb6293544cf87c7ccc9d5e965dabeac06925a2ad13409ab88fddc930724dd58da8d85addff546b962894b4b50e856339b3b4ce8e6de7f689d2cd7a67a3af34b8ca7eb6512e1f0caf1502ea14994f110d6f30922563ee7376eb0dd7eee3775cd4679ee92156d072ccef3f74613eda04d82f677888741bd6396d4bec065277f31186d88315add6c21acde7d3afe66ce9ea5ae9c1079d10da4cd8aceeee40664b83b280189623076bc67ec77509c987e4cf6a86422bdb579e8d4045f5716c1f412dc1d65e496de98462e21b231b0188b0d5092701580c3b61a35d5210c70c6f789edc9cf451c3ad839be66a257ce423ebf62ec39cf806e5df9a3722ca9f3e5953d913ff989d935beefc0db30cf9353326fb12f1332d118482af1e2829d1a2add64596e78584ac18d19e86065c9cfb64b82510e3c1ba2ec86460ccac4a0d330c9a8af0b0c81474269c52b62a36aa7c535b1d9d5406123818334774471d5e2cd8aed6dab60c21820e19e7bccb85a78fbcbdfe375ceae2743d216f9dd957dd9a8a54ebf49a6339708a27be93ca2d29b037f0cfd5a0a02c9be200065ae053ad5356496cc6a384e8f347f7f1d0dad902be4ecec22d05b0b26520812cebb83f4ef24baf517961b95dfc9bb7fa5a5056d62f8dbef77f00a7a258906f0af01a4bb2a4a935929a390fa16b64c05baab0bc221b8dd4c5489fea3654241c72fc059028c0c3374519a9acc72155ed640cea41010dc50aaa5e761e9f480ff27b8b1cdf5fe670262a4e157822780b611b0c1fce75e67913c04eb4f8da6e6ef2651352766963baadf626450711d46166ba044e1e227b60cdd1030286fc82125dab1b6aec020dc5dd168030a8531ab4850fe4d2ed6b0a07a907fc7d531f622cc699c575fc07f5653a66d6823aea36efc35a04429e66630db40890c318d1116713fa8c0e21c0d8f4e0bb3e9c01de4ba89115194504fcec6463b89d68c8f8d766cee2ffa8b9bc7a0b13366116271792e7fd706c60197e18f713deb8f1fa2d69c2c525464656b94e229f35c0022655791abb3ce2d3ca322f9e93807c5b409cb235a1a90"}, 0x20) 2.123025245s ago: executing program 3 (id=2398): r0 = socket(0x50c8ae49b4d333e4, 0x5, 0x9) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x610bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3fff8000}, 0x2090, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x100, 0xb152, 0x3, 0x1fb, 0xfffffff9, 0x5}}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) unshare(0x6a040000) r4 = add_key$keyring(&(0x7f0000000f40), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000001e80)={'syz', 0x1}, 0x0, r4) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) 2.096777887s ago: executing program 9 (id=2400): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x21, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0x0, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000640)={0x1, r0, 'id1\x00'}) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000006c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair(0x1d, 0xa, 0x0, &(0x7f0000000000)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x2, 0xe, 0x6, 0x3}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp6\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x4000, 0x0, 0xfffffffffffffffc, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/68, 0x44}], 0x1, 0x141, 0x8) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)=')', 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c"], 0x30}], 0x1, 0x200c1d2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x9, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000050040000000000008000000181a0000", @ANYRES32=r4, @ANYBLOB="000000000000000018290000", @ANYRES32=r10, @ANYBLOB="07c1501c7f98c1d72a000000002f29c82f18190000", @ANYRES32=r4, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0xc, 0x800, 0x5}, 0x10, 0x86ba, 0xffffffffffffffff, 0x7, &(0x7f0000000440)=[r6, r4], &(0x7f0000000480)=[{0x3, 0x5, 0x8, 0xb}, {0x2, 0x4, 0xb, 0x5}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x4, 0xa, 0x4}, {0x4, 0x1, 0x2}, {0x2, 0x3, 0x5, 0xa}, {0x1, 0x1, 0x0, 0x1}], 0x10, 0x5de}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r11) sendmsg$MPTCP_PM_CMD_GET_ADDR(r11, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010027bd7000ffdbdf25070000002400018008000700", @ANYRES32=0x0, @ANYBLOB="06000100020000000800030064"], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x14000080) 1.992068793s ago: executing program 5 (id=2402): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x1003]}}}}]}, 0x88}}, 0x20000000) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 1.907721528s ago: executing program 3 (id=2403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x1003]}}}}]}, 0x88}}, 0x20000000) 1.577326117s ago: executing program 1 (id=2405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 2) 1.335313392s ago: executing program 3 (id=2407): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7fff0000}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x2}, 0xfe7c, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000002850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c4600000007"], 0x78) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x7, 0x7f, 0x8, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', 0x7, 0x10, 0x5, 0x5}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0x2, &(0x7f0000000180)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit], &(0x7f0000000200)='GPL\x00', 0x7fffffff, 0x94, &(0x7f0000000300)=""/148, 0x41000, 0x2b, '\x00', r3, @sock_ops, r2, 0x8, &(0x7f00000004c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x5, 0x1, 0xb593}, 0x10, 0xffffffffffffffff, r1, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, r0, r4, r5, r2, r0, r2, r2, r0, r0], &(0x7f0000000780)=[{0x3, 0x1, 0x9}, {0x5, 0x5, 0xb, 0x7}, {0x3, 0x4, 0xd, 0x8}, {0x3, 0x3, 0xb, 0xa}, {0x0, 0x2, 0x0, 0x8}], 0x10, 0x900}, 0x94) io_setup(0x7, &(0x7f0000000280)=0x0) r7 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/freeze_filesystems', 0x40042, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000001c0)='7', 0x1, 0x4}]) io_uring_enter(r7, 0x4f7c, 0xfa6, 0x17, &(0x7f0000000140)={[0x8]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x44, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'ip6gre0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.334651661s ago: executing program 5 (id=2408): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000900), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf25070000002400018008000700", @ANYRES32=0x0, @ANYBLOB="06000100020000000800030064"], 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x14000080) 1.272408885s ago: executing program 1 (id=2409): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000d04fcff", 0x58}], 0x1) 1.269128765s ago: executing program 5 (id=2411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.02869875s ago: executing program 5 (id=2412): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x400, 0xfffffbfd, 0x40000331}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x13, 0x20001000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x6, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000800000000000000000008500000060000000850000008800000095"], &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x388, 0x9) 1.02154937s ago: executing program 3 (id=2413): lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000340)}, 0x0, 0x32, 0x4, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1f071f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1, 0x9}, 0xa022, 0xfff, 0xb, 0x3, 0xfff, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x0, @multicast, 'ip6tnl0\x00'}}, 0x1e) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f0000000140)={r3, r4+10000000}, &(0x7f0000000240)) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r6 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x56, 0x2, 0x5, 0x2}, {0xfffffffffffff801, 0x5, 0x0, 0x2, 0xfffffffffffffff6, 0x2000000, 0xfffffffffffffffd}, {0xfffffffffffffff7}, 0x1, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@loopback, 0x3507, 0x4, 0x2, 0x0, 0xffffffff, 0x2, 0x4}}, 0xe8) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x2, 0x4}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r8, @ANYBLOB="1380000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 932.605755ms ago: executing program 9 (id=2414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 932.194516ms ago: executing program 1 (id=2415): mprotect(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000000c0)=0xd4, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @multicast1}, &(0x7f0000000080)=0xfffffffffffffd65) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x880}, 0x0) 918.789906ms ago: executing program 9 (id=2416): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="0f63ef32c51837473b00008a6fc13029c1190cdcb2853ae095c9769990faa7f80deb4a2df1755ead44b9b2a67e44d656b41118cac15a777fd0336b53dc80", 0x3e}], 0x1}, 0x4) 906.860607ms ago: executing program 1 (id=2418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x2, 0x1003]}}}}]}, 0x88}}, 0x20000000) 787.562074ms ago: executing program 9 (id=2419): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xc0a55000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) recvmmsg(r2, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40086604, 0x0) socket(0x10, 0x3, 0x0) 769.198505ms ago: executing program 6 (id=2420): r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x800000, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) pread64(r1, 0x0, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 639.802692ms ago: executing program 6 (id=2421): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff2, 0x2, 0xfffff001, 0x0, 0x5, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000850}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 590.240416ms ago: executing program 9 (id=2422): r0 = syz_clone3(&(0x7f0000000580)={0x200000000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280), {0x23}, &(0x7f0000000380)=""/177, 0xb1, &(0x7f0000000440)=""/255, &(0x7f0000000540)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x9}, 0x58) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/udp\x00') r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x9000000d}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa7dabb495791b03f784896e31aaaaaaaa080045000034000000000005907864010102e000000200040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c10000090780000080a000000b2000000080000"], 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfa, 0x1}, {0x16}]}, 0x10) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4a22, @multicast2}, 0xff67, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) unshare(0x26000680) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setsig(r6, 0xa, 0x12) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000640)=0x9b5, 0x4) socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) connect$bt_l2cap(r3, &(0x7f0000000600)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x3}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) r8 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="280000001c00357466a9f5d02701915702000000"], 0x28}, 0x1, 0x0, 0x0, 0x44800}, 0xc0c1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 513.461679ms ago: executing program 6 (id=2423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0xa10e, 0xa88, 0x8406, 0x7, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2c020400) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AhSauyNZXnXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di79uaHvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiI9yNipjyelFu8093y8z7bfbC4t/tgMYkse++fSVGeH4uen8ldK19zKiJ+8J2IHydH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5627b9YeozVTx5a+0pwoU1/+9A873/hpXq3p8khvO56lbtMrB3FylyPie6cRbAQule2ZGHVFeCJpRLwYEa8W1/9MXCp+mwDARZZlM5HN9OYBgIsuLebAkrRazgVMR5pWq905vJfiatpotTu37rc215a6c2XXo5LeX2nU75RzhdejkuT5uSL9MF87lL8bES9ExC8mrxT56mKrsTTKGx8AGGPXDo3//5nsjv8AwAV3/MdmAICLyPgPAOPH+A8A48f4DwDjpzv+X3ncH8uy7GenUR0A4Ax4/geA8WP8B4Cx8v133823bK/8/uulD7Y2V1sf3F6qt1erzc3F6mJrY7263GotF9/Z0zzp9Rqt1vrcG7H54fVvrrc7s+2t7XvN1uZa517xvd736pXirJ0zaBkAMMgLr3zy5yQfkd++UmzRs5ZDZaQ1A05bOuoKACNzadQVAEbGal8wvh4+4z/2hwBMD8AF0WeJ3kdM9fsDoSzLstOrEnDKbn7B/D+Mq575f58ChjFz0vx/sTawNwnhQjL/D+Mry5Jh1/yPYU8EAM63Y+b4r5/lfQgwOgPe/3+x3P+2fHPgR0uHz/j4NGsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59v++r/Vcpnf6UjTajXiuWIBoEpyf6VRvxMRz0fEnyYrk3l+bsR1BgCeVvq3pFz/6+bM69OPFL187SA5ERE/+dV7v/xwodPZ+GPERPKvyf3jnY/L47UTg02dRgsAgOPtj9PFvudB/rPdB4v721nW5+/f7t4V5HH3didi7yD+5bhc7KeiEhFX/52U+a6kZ+7iaex8FBGf79f+JKaLOZDuLcvh+Hns5840fvpI/LRcoDkt/y0+9wzqAuPmk7z/eaff9ZfGjWLf//qfKnqop1f2f/lLLe4VfeDD+Pv936UB/d+NYWO88fvvdlNXjpZ9FPHFyxH7sfd6+p/9+MmA+K8PGf8vX3r51UFl2a8jbkb/+L2xZjvN9dn21vbtlebCcn25vlarzc/N33nr7pu12WKOenbwaPCPt289P6gsb//VAfGnTmj/V4ds/2/+9/4Pv3JM/K+/1i9+Gi8dEz8fE782ZPyFq78b+Nydx1862v5kmN//rSHjf/rX7SPLhgMAo9Pe2l5daDTqGxIS5z+R/5c9B9Xom/jWWcWaiP5FP3+te00fKsqyJ4o1qMd4FrNuwHlwcNFHxH9HXRkAAAAAAAAAAAAAAKCvs/iLpVG3EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIvr/wEAAP//Rb3T2A==") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, 0xffffffffffffffff, 0x6, 0x0, 0xa697, 0x3}) sendmsg$kcm(r1, &(0x7f0000000a80)={&(0x7f0000000780)=@caif=@util={0x25, "cf73d6ff4d35e2288a4ba73d19ed2c41"}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="cd3db142acb244f5634c16f7867251da0af3de583bc0ac50a4a7a33fd640dc1cde6541885fa54b42e2e2fd662a00b1c35f2ab7e7d9fa27ef4d8879e76abb2484352ed5b3731cdf5c89339994ab19f2be8e3fdc8b338691ee97e749e945d9145c165325a967812a237c481aa886f5d75b22f6a89c1b9ef1688b4e73472fae2abec441d53d064e7b2507c5514668bc1749930634ba1b5375f4cce9f4fb81", 0x9d}, {&(0x7f0000000040)="30a3aaea7b4592fb83a49c438d855f6133fae7ca16d734cdfebb547a72cceb7bb5a1ac9d12e2a162237c2012", 0x2c}, {&(0x7f00000000c0)="2e82bcd747903e8d6e55fdf81abdd4ca9d1e", 0x12}, {&(0x7f00000001c0)="376f433138a6db191fe9a9f9ec1278bc42ed01906bd24f", 0x17}, {&(0x7f00000008c0)}], 0x5, &(0x7f0000000980)=[{0x100, 0x112, 0xf, "6325dd6fbe2f1fe661e7b968c5ea220c301aaee7669aff8b84547233ca43a1b8482d654f1048013751371377b7b30ca571410052142ebcd7e179b84d7d99ea329164584d4022ef6666b2171563bab6cd36b2f6379a4ccd2d320472599fe3e6c76d883bcadac1fec7e39b0dfeb7a3054d9ef35cba799e4ff3fe06923be05f3612d4ed648f50ee30e5fa9ad3f31a5d5e34f7a86ab977d9ebb1f5df744f3d127bec40fe298fb696e5050e38bf9b802b0b0f999c1b22658a3ed52cd6fa2bbc316bfe8d61613ccb5c58c97deb7c1fdd513cd6383eead1ea85f6d64f5815dc1f43c720f16250c8b9d35fc46af586be43"}], 0x100}, 0x4004080) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000040603000000000000000000050000000500010007"], 0x1c}}, 0x40) 510.30015ms ago: executing program 1 (id=2424): io_pgetevents(0x0, 0x9, 0x0, 0x0, &(0x7f0000000640)={0x77359400}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000900)={0x114, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xcb, 0xa8, @random="dece413a337f66433d45c9ba569b4cc36a76dac6f1f2ca2bebaea9651f2795ce4ba8968abeb355b64edd0620ecb61972130ecbf37bbde7f12966f404f81ededb4a0c9d472d1a8b4a5f8fdf88bf3cb4e97e8e944d7504dac456a3abe7bb813c20dcb5e4aec26ba73a9455ea8107d2c982115087d8e1363affe7c7a9ec567e249d730d04e0821fb8f40ac83d62c1ef95e4e9fc16e380bc75e391a0c0eda4eb23f05a64edebcd512580498a9328554b732dcb9b6b95a1b463f0065326d5b34d1bdccbc3ffc7b833e1"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x401}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x4041) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x1235, &(0x7f0000000fc0)={@remote, @random, @val={@val={0x88a8, 0x3, 0x1, 0xffd}, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @udp={0x3, 0x6, "a66fce", 0x11f7, 0x11, 0x0, @local, @mcast1, {[@hopopts={0x88, 0x227, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x9, 0x3ff, [0x7fffffff]}}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x55}, @generic={0x8, 0x9c, "901604fb7c88d8a8d5852ec341bc94f9520903afd99156c74753bcf3ab2b617cd70cab111c0e8d5a7acfa8186ca8a1f88eb5713e088b3d80c3c8f13a637e148408a44368d5a0f60d4c2ee4306bf190d111260ce868602ae4d6f125abdfb26cda429f21b38546af43d9ffb428b98e39c884c982f9d1ceaa67f06030d300a65ba0c8bf3ee52c79e1cf56b67637418f24ea30e2a2c80df5f3c34f656bd8"}, @pad1, @generic={0x2, 0x79, "eb7b68262cb67dfa5a390d7d3b35be3500b662f4cffdd97b8b15b1385403ed6105eb5222e5cff239afe7a90cadfc081c8297190931be568071ca16f3b54a9d36984cae964195b0090e29c57b7c8caa7c122b9acb5b59d6f3fea99f59dd7589a416f7c46b9a7ccbb838512ee954c3f814a515784aeee51e41a6"}, @generic={0x3, 0x1000, "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"}]}, @fragment={0x5e, 0x0, 0xf6, 0x0, 0x0, 0x1a, 0x68}, @dstopts={0x11, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @pad1]}], {0x4e21, 0x4e21, 0x97, 0x0, @opaque="60edf4dfef5970375284cee1fb7462d0a966b135a64b289cc0d91898c3974015e9077bfcb5905f8fb48f5d3487c80d80c883e2be1f600a2da62bd2f7083d48e1da41f8428f94ff5835803b2a723aa3c0847af5ebc6f6843b39713c360e4353ecae82f8cd59e356dd286d508d9d7bb5d173ea70d56ff8426c01868579aa735dd5b21d6332b6832366dbbb4ef52f23dd"}}}}}}, 0x0) setreuid(0xee01, 0x0) 467.357003ms ago: executing program 1 (id=2425): r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x6887d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = socket$inet(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f00000000c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x20, 0x5, 0xffffffff, 0x0, 0x4, 0x0, 0xff, 0x28, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x45}}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010102}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53c, &(0x7f0000000b80)="$eJzs3cFrJFkZAPCvetKZzExmk1UPurDr4q7MLDrdk427GzysK4ieFsT1PsakJ4TppEPS2Z2ERTt/gSCigie9eBH8AwQZ8OJRhAG9qrCiiM4q6EG3pLqrk9ipTnrGnvSk8/tBTb1X1VXf93ryqqu6HtUBnFvPR8QbEfFBmqYvRcRMvryUT9HqTNnr3n/w7lI2JZGmb/01iSRf1t1Xks+v5JtNRcRXvhTx9eRo3K2d3TuL9XptM69Xm2sb1a2d3Rura4srtZXa+vz83KsLry28snBzKO28GhGvf+GP3/3Wj7/4+s8//c4fbv35+jeytKbz9Yfb8ZAmjlvZaXr54lTPBpuPGOxJlLWn3K1cGmybvceYDwAA/WXn+B+KiE9ExEsxExeOP50FAAAAzqD0c9Px7yQiLTbZZzkAAABwhpTaY2CTUiUfCzAdpVKl0hnD+5G4XKo3tpqfut3YXl/ujJWdjXLp9mq9djMfKzwb5SSrz7XLB/WXe+rzEfF0RHxn5lK7Xllq1JdH/eUHAAAAnBNXeq7//zHTuf4HAAAAxszsqBMAAAAAHjvX/wAAADD+XP8DAADAWPvym29m0++6v3+9/PbO9p3G2zeWa1t3KmvbS5WlxuZGZaXRWGk/s2/tpP3VG42Nz8T69t1qs7bVrF7d2b211theb95ajalTaRAAAABwxNMfv/fbJCJan73UnjKTo04KOBUT+6Uknxf0/t8/1Zm/d0pJAafiwgCvee9i8XLnCXC2TfQu6NPXgfFTHnUCwMglJ6zvO3jnV51Zacj5AAAAw3ftY8X3/08+n2855YczTieG86vn/n86M6pEgFPXvv8/6EAeJwswVsoDjQAExtn/e///ZGn6UAkBAABDN92eklIl/3pvOkqlSiXiavtnAcrJ7dV67WZEPBURv5kpX8zqc+0tkxOvGQAAAAAAAAAAAAAAAAAAAAAAAACAjjRNIgUAAADGWkTpT8kvOs/yvzbz4nTv9wOTyb/aPwk8GRHv/OCt791dbDY357Llf9tf3vx+vvzlUXyDAQAAAPTqXqe35/8cdTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjJv3H7y71J0GePmlYcX9y+cjYrYo/kRMtedTUY6Iy39PYuLQdklEXBhC/NZeRHy0KH6SpbUfsij+MN6E1l7SStsK48ds/i4Uxb8yhPhwnt3Ljj9vFPX/Ujzfnhf3v4mI/6k/qv7Hv9g//l3o0/+vDhjjmfs/rfaNvxfxzETx8a8bP+kT/4UB43/tq7u7/dalP4y41v38aR/xDkc4KFWbaxvVrZ3dG6triyu1ldr6/PzcqwuvLbyycLN6e7Vey/8tjPHtZ3/2wXHtv1z4+Zfk2fRv/4sF+yv6TPrP/bsPPtyttI7Gv/5CQfxf/ih/xdH4pTzOJ/Nytv5at9zqlA977ie/fu649i8ftL/8MP//1/vttNeRjvLsoH86AMBjsLWze2exXq9tjm0hu0p/AtJ4lMJkPBFpjG/hm1nh/rB2mKZpmvWpglX3ImKQ/SQx5JaWivM5KPQ9Aoz6yAQAAAzbwUn/qDMBAAAAAAAAAAAAAAAAAACA8+s0nrLWG/PgEcjJMB6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFP8NAAD//93e12I=") 322.426081ms ago: executing program 6 (id=2426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x294, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x70, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x29e42639}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_USERDATA={0xef, 0xc, "76cc02e911ed070badefb723e78065e0e679bbba78e23551e00ec30621ab5de9561bbf0e6da29b0251240e0223ffc5ca60f886fa05a67df1613003e70218d46ead5af5c8ee15db14828935a61c911c81d44c76d367943184c00dec01022a790bd210416cc4d7a978df8ea189a431ef5405171632097af6d44d10e82a064ad093cca43b8932e76521d310d0ebcaedf45aca64bf3b11403e060ddf33cb46c068049cdaecfadf0db198bc6712ae704d1826381620c5108e0b7c88564719a7ad10876abac62724fbebe7779935ea1e853deda2df4550dd9f128469acb4aa46639b8ec720b5eae096bd730809d9"}, @NFTA_CHAIN_USERDATA={0xfa, 0xc, "d0bb88473ec053436aeb5dd51a00ab8594b07a7f5d0c0783073ded7b96e1435f4b523b782995baddce69d46a26e0c4ee2267436513aad060f770733c1a3b58bfb59c8a558dc6335d98339a0096d619852912c94049f83c7e2ecf60497a709c4debf324097e696bfe9afec14a91eef4ac83efaaff7c5488dce18ed0cb62915ed2d5bfaae6a58eef4233887db10018c25e82686e8365359d88dd47aae7eeab0f9934a7b797795be566aa6480f31577a79be117e557eaf474cf5a332662f3ba00634ce284d6b79530a665d150e976ebeb875938558a400077e934a4b5473f1ba5ab2e4a45e48c1b7a1ca26a946272ce083b853cbf6898a0"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0xa0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0x71, 0xd, 0x1, 0x0, "46524b300673ba209253624ce9df5c976d8361560dc268e54536234c4da597accd983feacd8777348481de4e2cc150c3f0cff779783793b0e26586f77b6380ed2437794190b30706b8e2e7c13544d3f03d9f36fde02c142b592221827f262a7768b066fbd2e0515c634ce20339"}]}, @NFT_MSG_DELCHAIN={0x144, 0x5, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf2, 0xc, "a16fdf607f559b05056123bd93acfce51a0dc7f69c74e9c31e6e48ac16dcab0260d15d5e9f6dc6ca42d011ba2d4e9624d12f09023f3e7c0302b963b24b5e8d1160143bee86db0cbfe0356131aa06602c4b086c5788bc3d32c876967dfe6ea57f65ae762ddb5242d4556354af9c08da113c11c48f0f3e855f4313879df943982f6e6cbb58b2ea883b0c7a6f2cf15a32b9c83d80d227cdfe77b2d43ff52046d291f9e169afe8345ecc82821f808bfa803d5d1938ea2ba686b4c08b7fc1b6f8e7f34d50e3cc95632c73b9e7f4c0eec00f89c01fd53dcc26165088f1717509c1cf09278cf5eca507ef658a17aa61e58b"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_KEY_TYPE={0x8}]}, @NFT_MSG_NEWTABLE={0x250, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xae, 0x6, "6a57c054b90cd54f5b32d1e344f5d63afcef93a78ec077b5c16654b755e29dc841246d8f9e3524e391a0104f3774c9d42bcf7946d28f1f3a08f7f347ea16aa7fbeeaed687a0e5262ec0d09b599649399b1deff33deef07052c73da9b8451d588a575e531d8190fa39ca9e8178f1759dd6fdc32a32ba0ef81da43ac42d80c3ecd607becd5d05f9d942c55a614fccb2d9120efd8b24167563a1c0298f53cfff319fd42dff99985cfb16ae7"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xea, 0x6, "a5a8ec05d49ea524d456c483475c8c72cb13f5434736f77446e860957532f11578fd560ab08010a1ed82fe2cc51b2eb3706c0a1b979f01a7dea48d6f69cc896b5a19382057c88a5a9f82289fb0936d9215343fdd6338942f0a97b6f32b95d30a97784760f55630208dbdd30de7b36d72896abf8da6c350a6317352b7fa2e16dfc3acc71ba06cdf308398db456df0d41f79b18101e69623c3cfe31d570bc5f5702c59576dbcd49413bd16cc1a69ee9de89b12943cd2be1042a6047ff7b4553bda95dfe95db40293733a121bb5829164e27410717dc711ef3dfd2c657e31a7a3c584bb432a6dbf"}, @NFTA_TABLE_USERDATA={0x64, 0x6, "e67b55cefca9bb6cfc05000acd4aa3a555d7d4f70e227a0e54f6e32e6a6229e88d44817dbda26c1fa3af2db03eec0b9060a4b4de309bda32e95fb8a513810098f12950d1b6d6ad645e3c13faee5c8497ed0246346d82f9c356c2ded9c94982f7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0xc4, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x8ad923f9b89a1aed}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x41}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x82c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) 209.913418ms ago: executing program 6 (id=2427): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) socket$xdp(0x2c, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x6, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 154.723151ms ago: executing program 5 (id=2428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (fail_nth: 2) 56.250557ms ago: executing program 6 (id=2429): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x26, 0x4, 0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4029, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000140), 0x2}, 0x9092, 0x200002, 0x43a1bd76, 0x2, 0x7, 0x6, 0x2, 0x0, 0x3, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x3ffe, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000037c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x776, &(0x7f0000003040)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x324a038, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x32, &(0x7f0000000080)={&(0x7f0000000440)=@gettfilter={0x0, 0x2e, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xe}, {0x0, 0x6}, {0x3, 0x7}}, [{0x39, 0xb, 0x7ff}, {0x0, 0xb, 0x612a}, {0x0, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x8840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="11110200338ae400140012800b0001006d6163736563000004000280080020"], 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000040) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8818}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet6(0xa, 0x2, 0x104) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) 24.890589ms ago: executing program 3 (id=2430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x10, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x3, 0x1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000091}, 0x20000000) 0s ago: executing program 9 (id=2431): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x31, 0x0, &(0x7f00000002c0)="b9ff0307680462f77d422802cbd7e8e5f0994a1001ffac3b6a277ca46e6a9e5b74dfc475752ca62894cfaf34c726796eb3", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): nted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.609899][ T9101] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1710'. [ 139.682087][ T9106] loop5: detected capacity change from 0 to 164 [ 139.841646][ T9110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1711'. [ 139.872203][ T9110] gtp0: entered promiscuous mode [ 139.948555][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.969643][ T9121] netlink: 'syz.8.1715': attribute type 4 has an invalid length. [ 139.977533][ T9121] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1715'. [ 140.007208][ T9121] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 140.086685][ T9121] can0: slcan on ttyS3. [ 140.265581][ T9145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1726'. [ 140.300907][ T6212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.372667][ T9147] EXT4-fs (loop6): 1 orphan inode deleted [ 140.378969][ T9147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.550192][ T3401] tipc: Node number set to 3461315951 [ 140.558629][ T9168] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1727'. [ 140.571046][ T9177] usb usb8: usbfs: process 9177 (syz.8.1735) did not claim interface 0 before use [ 140.585384][ T9186] SELinux: security_context_str_to_sid (unconfined_usmackfsfloor=¶lt§{uYì(Μ:ìvî_?±ÂBAПœ%ï3À÷ÐÖŽRww/ê锺J‚ë$ãb넟ÅJe<Ñ,fsuuid=2ee7,errors=continue) failed with errno=-22 [ 140.741056][ T9198] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1739'. [ 140.786682][ T9196] netlink: 'syz.8.1740': attribute type 1 has an invalid length. [ 140.797918][ T4357] IPVS: starting estimator thread 0... [ 140.892381][ T9204] IPVS: using max 2304 ests per chain, 115200 per kthread [ 141.129008][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.190146][ T9216] netlink: 'syz.5.1746': attribute type 4 has an invalid length. [ 141.198033][ T9216] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1746'. [ 141.207452][ T9216] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 141.297100][ T9225] bio_check_eod: 74 callbacks suppressed [ 141.297119][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.297119][ T9225] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 141.321121][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.321121][ T9225] loop5: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 141.334939][ T9225] buffer_io_error: 32 callbacks suppressed [ 141.334958][ T9225] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 141.354147][ T9216] can0 (unregistered): slcan off ttyS3. [ 141.362123][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.362123][ T9225] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 141.383941][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.383941][ T9225] loop5: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 141.397803][ T9225] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 141.420671][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.420671][ T9225] loop5: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 141.466498][ T9234] usb usb8: usbfs: process 9234 (syz.7.1749) did not claim interface 0 before use [ 141.466548][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.466548][ T9225] loop5: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 141.489593][ T9225] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 141.498579][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.498579][ T9225] loop5: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 141.537037][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.537037][ T9225] loop5: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 141.550832][ T9225] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 141.561980][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.561980][ T9225] loop5: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 141.576291][ T9225] syz.5.1746: attempt to access beyond end of device [ 141.576291][ T9225] loop5: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 141.590069][ T9225] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 141.599926][ T9225] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 141.612966][ T9225] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 141.623380][ T9225] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 141.668162][ T9247] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 141.681778][ T9225] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 141.695645][ T9247] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1753: invalid indirect mapped block 4294967295 (level 0) [ 141.727072][ T9225] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 141.741514][ T9247] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1753: invalid indirect mapped block 4294967295 (level 1) [ 141.763843][ T9247] EXT4-fs (loop8): 1 orphan inode deleted [ 141.769625][ T9247] EXT4-fs (loop8): 1 truncate cleaned up [ 141.782637][ T9247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.971524][ T9276] tipc: Enabling of bearer rejected, already enabled [ 142.002233][ T9280] usb usb8: usbfs: process 9280 (syz.5.1760) did not claim interface 0 before use [ 142.045341][ T9278] syzkaller0: entered promiscuous mode [ 142.051376][ T9278] syzkaller0: entered allmulticast mode [ 142.074522][ T9278] unsupported nlmsg_type 40 [ 142.123887][ T9286] set_capacity_and_notify: 5 callbacks suppressed [ 142.123901][ T9286] loop7: detected capacity change from 0 to 512 [ 142.144953][ T9286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.157805][ T9286] ext4 filesystem being mounted at /193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.169592][ T9286] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #4: comm syz.7.1763: corrupted inode contents [ 142.182149][ T9286] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #4: comm syz.7.1763: mark_inode_dirty error [ 142.194284][ T9286] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #4: comm syz.7.1763: corrupted inode contents [ 142.206675][ T9286] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #4: comm syz.7.1763: mark_inode_dirty error [ 142.218224][ T9286] __quota_error: 7 callbacks suppressed [ 142.218288][ T9286] Quota error (device loop7): write_blk: dquota write failed [ 142.231299][ T9286] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 142.240514][ T9286] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 142.250485][ T9286] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.1763: Failed to acquire dquot type 1 [ 142.297275][ T9291] loop6: detected capacity change from 0 to 128 [ 142.326457][ T6212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.364381][ T29] audit: type=1400 audit(1770386221.037:2455): avc: denied { getopt } for pid=9290 comm="syz.6.1764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 142.385279][ T9294] syz.6.1764 (9294): attempted to duplicate a private mapping with mremap. This is not supported. [ 142.398737][ T29] audit: type=1400 audit(1770386221.077:2456): avc: denied { write } for pid=9290 comm="syz.6.1764" lport=33877 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.426969][ T9298] FAULT_INJECTION: forcing a failure. [ 142.426969][ T9298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.440327][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.7.1767 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.440364][ T9298] Tainted: [W]=WARN [ 142.440373][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 142.440402][ T9298] Call Trace: [ 142.440412][ T9298] [ 142.440420][ T9298] __dump_stack+0x1d/0x30 [ 142.440450][ T9298] dump_stack_lvl+0x95/0xd0 [ 142.440543][ T9298] dump_stack+0x15/0x1b [ 142.440561][ T9298] should_fail_ex+0x263/0x280 [ 142.440615][ T9298] should_fail_alloc_page+0xf2/0x100 [ 142.440701][ T9298] __alloc_frozen_pages_noprof+0x108/0x350 [ 142.440800][ T9298] alloc_pages_mpol+0xb3/0x260 [ 142.440829][ T9298] vma_alloc_folio_noprof+0x1a9/0x300 [ 142.440886][ T9298] do_wp_page+0xf6d/0x2560 [ 142.440916][ T9298] ? css_rstat_updated+0xbb/0x280 [ 142.440940][ T9298] ? __rcu_read_lock+0x36/0x50 [ 142.440968][ T9298] handle_mm_fault+0x8c7/0x3030 [ 142.440999][ T9298] ? vma_start_read+0x1c7/0x2c0 [ 142.441095][ T9298] do_user_addr_fault+0x62f/0x1050 [ 142.441117][ T9298] ? ksys_mmap_pgoff+0xc1/0x310 [ 142.441145][ T9298] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 142.441163][ T9298] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 142.441237][ T9298] ? irqentry_exit+0x3c/0x510 [ 142.441259][ T9298] exc_page_fault+0x62/0xa0 [ 142.441305][ T9298] asm_exc_page_fault+0x26/0x30 [ 142.441330][ T9298] RIP: 0033:0x7f66882027e3 [ 142.441401][ T9298] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 142.441419][ T9298] RSP: 002b:00007f6686da6470 EFLAGS: 00010202 [ 142.441454][ T9298] RAX: 0000000000000400 RBX: 00007f6686da6530 RCX: 00007f667e987000 [ 142.441472][ T9298] RDX: 00007f6686da66d0 RSI: 0000000000000019 RDI: 00007f6686da65d0 [ 142.441491][ T9298] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003ac [ 142.441549][ T9298] R10: 00000000000003d4 R11: 00007f6686da6530 R12: 0000000000000001 [ 142.441562][ T9298] R13: 00007f66883f8120 R14: 0000000000000020 R15: 00007f6686da65d0 [ 142.441580][ T9298] [ 142.441589][ T9298] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 142.450704][ T29] audit: type=1400 audit(1770386221.127:2457): avc: denied { setopt } for pid=9290 comm="syz.6.1764" lport=33877 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.474287][ T9298] loop7: detected capacity change from 0 to 2048 [ 142.693334][ T9298] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 142.721866][ T8472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.781013][ T9311] tipc: Started in network mode [ 142.785947][ T9311] tipc: Node identity , cluster identity 4711 [ 142.792045][ T9311] tipc: Failed to obtain node identity [ 142.797555][ T9311] tipc: Enabling of bearer rejected, failed to enable media [ 142.916225][ T29] audit: type=1326 audit(1770386221.587:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9245aeb9 code=0x7ffc0000 [ 142.940434][ T29] audit: type=1326 audit(1770386221.597:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9245aeb9 code=0x7ffc0000 [ 142.966027][ T29] audit: type=1326 audit(1770386221.597:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7feb9245aeb9 code=0x7ffc0000 [ 142.989537][ T29] audit: type=1326 audit(1770386221.617:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9329 comm="syz.3.1775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9245aeb9 code=0x7ffc0000 [ 143.013206][ T9332] loop5: detected capacity change from 0 to 512 [ 143.101213][ T9344] loop7: detected capacity change from 0 to 512 [ 143.131352][ T9344] EXT4-fs (loop7): 1 orphan inode deleted [ 143.138525][ T9344] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.217485][ T9332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.237214][ T9332] ext4 filesystem being mounted at /346/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.251076][ T9332] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1777: corrupted inode contents [ 143.263445][ T9332] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.1777: mark_inode_dirty error [ 143.285601][ T9332] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1777: corrupted inode contents [ 143.297697][ T9332] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.1777: mark_inode_dirty error [ 143.312221][ T9332] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1777: Failed to acquire dquot type 1 [ 143.418310][ T9374] usb usb8: usbfs: process 9374 (syz.6.1785) did not claim interface 0 before use [ 143.441185][ T9377] tipc: Started in network mode [ 143.446303][ T9377] tipc: Node identity , cluster identity 4711 [ 143.452436][ T9377] tipc: Failed to obtain node identity [ 143.457916][ T9377] tipc: Enabling of bearer rejected, failed to enable media [ 143.681539][ T9404] FAULT_INJECTION: forcing a failure. [ 143.681539][ T9404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.694689][ T9404] CPU: 0 UID: 0 PID: 9404 Comm: syz.6.1791 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 143.694756][ T9404] Tainted: [W]=WARN [ 143.694762][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 143.694776][ T9404] Call Trace: [ 143.694782][ T9404] [ 143.694789][ T9404] __dump_stack+0x1d/0x30 [ 143.694818][ T9404] dump_stack_lvl+0x95/0xd0 [ 143.694847][ T9404] dump_stack+0x15/0x1b [ 143.694934][ T9404] should_fail_ex+0x263/0x280 [ 143.694967][ T9404] should_fail+0xb/0x20 [ 143.695063][ T9404] should_fail_usercopy+0x1a/0x20 [ 143.695104][ T9404] _copy_from_user+0x1c/0xb0 [ 143.695182][ T9404] ___sys_sendmsg+0xc1/0x1e0 [ 143.695225][ T9404] __x64_sys_sendmsg+0xd4/0x160 [ 143.695316][ T9404] x64_sys_call+0x17ba/0x3000 [ 143.695348][ T9404] do_syscall_64+0xc0/0x2a0 [ 143.695387][ T9404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.695426][ T9404] RIP: 0033:0x7ff655deaeb9 [ 143.695442][ T9404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.695519][ T9404] RSP: 002b:00007ff654847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.695539][ T9404] RAX: ffffffffffffffda RBX: 00007ff656065fa0 RCX: 00007ff655deaeb9 [ 143.695558][ T9404] RDX: 0000000000020040 RSI: 0000200000000840 RDI: 0000000000000004 [ 143.695576][ T9404] RBP: 00007ff654847090 R08: 0000000000000000 R09: 0000000000000000 [ 143.695593][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.695609][ T9404] R13: 00007ff656066038 R14: 00007ff656065fa0 R15: 00007ffdb412ffe8 [ 143.695648][ T9404] [ 143.892239][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.933333][ T9412] loop8: detected capacity change from 0 to 128 [ 143.975244][ T6212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.082925][ T9431] loop8: detected capacity change from 0 to 1024 [ 144.088078][ T9429] usb usb8: usbfs: process 9429 (syz.6.1798) did not claim interface 0 before use [ 144.115946][ T9431] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.160973][ T9431] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.1800: missing EA_INODE flag [ 144.161495][ T9440] loop5: detected capacity change from 0 to 2048 [ 144.174533][ T9431] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1800: error while reading EA inode 11 err=-117 [ 144.238678][ T9443] loop6: detected capacity change from 0 to 1024 [ 144.246880][ T9440] EXT4-fs: Ignoring removed orlov option [ 144.252737][ T9440] EXT4-fs: Ignoring removed oldalloc option [ 144.261916][ T8472] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.301622][ T9440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.321493][ T9440] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.357902][ T9443] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.374148][ T9456] loop7: detected capacity change from 0 to 512 [ 144.411777][ T9457] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 144.436472][ T9443] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.464288][ T9456] EXT4-fs (loop7): 1 orphan inode deleted [ 144.471759][ T9443] FAULT_INJECTION: forcing a failure. [ 144.471759][ T9443] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.485712][ T9443] CPU: 0 UID: 0 PID: 9443 Comm: syz.6.1803 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 144.485803][ T9443] Tainted: [W]=WARN [ 144.485814][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 144.485828][ T9443] Call Trace: [ 144.485834][ T9443] [ 144.485842][ T9443] __dump_stack+0x1d/0x30 [ 144.485872][ T9443] dump_stack_lvl+0x95/0xd0 [ 144.485907][ T9443] dump_stack+0x15/0x1b [ 144.485958][ T9443] should_fail_ex+0x263/0x280 [ 144.486067][ T9443] should_fail_alloc_page+0xf2/0x100 [ 144.486099][ T9443] __alloc_frozen_pages_noprof+0x108/0x350 [ 144.486146][ T9443] alloc_pages_mpol+0xb3/0x260 [ 144.486265][ T9443] ? css_rstat_updated+0xbb/0x280 [ 144.486296][ T9443] vma_alloc_folio_noprof+0x1a9/0x300 [ 144.486333][ T9443] handle_mm_fault+0x111f/0x3030 [ 144.486431][ T9443] ? _raw_spin_lock+0x52/0xa0 [ 144.486512][ T9443] ? __pte_offset_map_lock+0x1d9/0x240 [ 144.486566][ T9443] __get_user_pages+0x1023/0x1ea0 [ 144.486685][ T9443] __gup_longterm_locked+0x2fa/0xe30 [ 144.486715][ T9443] pin_user_pages+0x88/0xc0 [ 144.486736][ T9443] xdp_umem_pin_pages+0xc0/0x200 [ 144.486817][ T9443] xdp_umem_create+0x4f5/0x590 [ 144.486939][ T9443] xsk_setsockopt+0x5ea/0x640 [ 144.487057][ T9443] ? __pfx_xsk_setsockopt+0x10/0x10 [ 144.487161][ T9443] __sys_setsockopt+0x184/0x200 [ 144.487270][ T9443] ? __secure_computing+0x81/0x150 [ 144.487298][ T9443] __x64_sys_setsockopt+0x64/0x80 [ 144.487387][ T9443] x64_sys_call+0x21d5/0x3000 [ 144.487439][ T9443] do_syscall_64+0xc0/0x2a0 [ 144.487482][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.487510][ T9443] RIP: 0033:0x7ff655deaeb9 [ 144.487529][ T9443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.487626][ T9443] RSP: 002b:00007ff654847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 144.487654][ T9443] RAX: ffffffffffffffda RBX: 00007ff656065fa0 RCX: 00007ff655deaeb9 [ 144.487739][ T9443] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 144.487813][ T9443] RBP: 00007ff654847090 R08: 000000000000001c R09: 0000000000000000 [ 144.487828][ T9443] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 144.487844][ T9443] R13: 00007ff656066038 R14: 00007ff656065fa0 R15: 00007ffdb412ffe8 [ 144.487877][ T9443] [ 144.488721][ T9457] EXT4-fs (loop8): 1 truncate cleaned up [ 144.507526][ T9456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.517674][ T9457] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 9 (only 1 groups) [ 144.753548][ T9465] __nla_validate_parse: 6 callbacks suppressed [ 144.753563][ T9465] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1805'. [ 144.926079][ T9484] netlink: 'syz.8.1811': attribute type 4 has an invalid length. [ 144.934059][ T9484] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1811'. [ 145.001785][ T9492] can0: slcan on ttyS3. [ 145.010484][ T9495] usb usb8: usbfs: process 9495 (syz.6.1814) did not claim interface 0 before use [ 145.022030][ T9484] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 145.095810][ T9492] can0 (unregistered): slcan off ttyS3. [ 145.254908][ T9517] EXT4-fs: Ignoring removed orlov option [ 145.260648][ T9517] EXT4-fs: Ignoring removed oldalloc option [ 145.368437][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.412660][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.435142][ T9538] ext4 filesystem being mounted at /278/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.448746][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1823'. [ 145.465845][ T9538] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #4: comm syz.6.1824: corrupted inode contents [ 145.487013][ T9538] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #4: comm syz.6.1824: mark_inode_dirty error [ 145.543922][ T9538] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #4: comm syz.6.1824: corrupted inode contents [ 145.573713][ T9549] EXT4-fs (loop8): 1 orphan inode deleted [ 145.580541][ T9538] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.1824: mark_inode_dirty error [ 145.610506][ T9538] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1824: Failed to acquire dquot type 1 [ 145.658929][ T9561] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1826'. [ 145.800300][ T9572] usb usb8: usbfs: process 9572 (syz.7.1829) did not claim interface 0 before use [ 145.898331][ T52] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 145.917694][ T52] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 200 with error 28 [ 145.930211][ T52] EXT4-fs (loop7): This should not happen!! Data will be lost [ 145.930211][ T52] [ 145.939926][ T52] EXT4-fs (loop7): Total free blocks count 0 [ 145.945991][ T52] EXT4-fs (loop7): Free/Dirty block details [ 145.951896][ T52] EXT4-fs (loop7): free_blocks=66060288 [ 145.957602][ T52] EXT4-fs (loop7): dirty_blocks=208 [ 145.962908][ T52] EXT4-fs (loop7): Block reservation details [ 145.968902][ T52] EXT4-fs (loop7): i_reserved_data_blocks=13 [ 146.002555][ T9583] netlink: 'syz.7.1833': attribute type 4 has an invalid length. [ 146.010334][ T9583] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1833'. [ 146.025895][ T9583] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 146.048490][ T9583] can0: slcan on ttyS3. [ 146.123189][ T9583] can0 (unregistered): slcan off ttyS3. [ 146.207890][ T9609] ext4 filesystem being mounted at /357/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.224829][ T9609] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1839: corrupted inode contents [ 146.268652][ T9609] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.1839: mark_inode_dirty error [ 146.296234][ T9609] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.1839: corrupted inode contents [ 146.324268][ T9609] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.1839: mark_inode_dirty error [ 146.394267][ T9609] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1839: Failed to acquire dquot type 1 [ 146.394833][ T9634] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 146.604107][ T9643] netlink: 'syz.7.1844': attribute type 21 has an invalid length. [ 146.612255][ T9643] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1844'. [ 146.729499][ T9647] syzkaller0: entered promiscuous mode [ 146.735733][ T9647] syzkaller0: entered allmulticast mode [ 146.766874][ T9651] 9pnet_virtio: no channels available for device ./file0 [ 146.818287][ T1644] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.865980][ T9658] EXT4-fs (loop6): 1 orphan inode deleted [ 146.897037][ T1644] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.937102][ T1644] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.964405][ T9666] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1851'. [ 146.989226][ T1644] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.012981][ T9668] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1852'. [ 147.142134][ T9679] FAULT_INJECTION: forcing a failure. [ 147.142134][ T9679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.155965][ T9679] CPU: 0 UID: 0 PID: 9679 Comm: syz.5.1854 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.156142][ T9679] Tainted: [W]=WARN [ 147.156151][ T9679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 147.156167][ T9679] Call Trace: [ 147.156243][ T9679] [ 147.156253][ T9679] __dump_stack+0x1d/0x30 [ 147.156284][ T9679] dump_stack_lvl+0x95/0xd0 [ 147.156312][ T9679] dump_stack+0x15/0x1b [ 147.156356][ T9679] should_fail_ex+0x263/0x280 [ 147.156397][ T9679] should_fail+0xb/0x20 [ 147.156432][ T9679] should_fail_usercopy+0x1a/0x20 [ 147.156512][ T9679] _copy_from_user+0x1c/0xb0 [ 147.156536][ T9679] do_sys_poll+0x137/0xc10 [ 147.156561][ T9679] ? avc_has_perm_noaudit+0xab/0x130 [ 147.156683][ T9679] ? __fget_files+0x184/0x1c0 [ 147.156710][ T9679] __se_sys_ppoll+0x1e2/0x220 [ 147.156810][ T9679] ? fput+0x8f/0xc0 [ 147.156843][ T9679] __x64_sys_ppoll+0x67/0x80 [ 147.156867][ T9679] x64_sys_call+0x22fe/0x3000 [ 147.156954][ T9679] do_syscall_64+0xc0/0x2a0 [ 147.156989][ T9679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.157014][ T9679] RIP: 0033:0x7fe593cfaeb9 [ 147.157032][ T9679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.157062][ T9679] RSP: 002b:00007fe59272e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 147.157086][ T9679] RAX: ffffffffffffffda RBX: 00007fe593f76090 RCX: 00007fe593cfaeb9 [ 147.157125][ T9679] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 147.157142][ T9679] RBP: 00007fe59272e090 R08: 0000000000000000 R09: 0000000000000000 [ 147.157159][ T9679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.157175][ T9679] R13: 00007fe593f76128 R14: 00007fe593f76090 R15: 00007ffd9ccd64e8 [ 147.157201][ T9679] [ 147.360755][ T1644] bridge_slave_1: left allmulticast mode [ 147.366480][ T1644] bridge_slave_1: left promiscuous mode [ 147.372174][ T1644] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.395111][ T1644] bridge_slave_0: left allmulticast mode [ 147.400879][ T1644] bridge_slave_0: left promiscuous mode [ 147.406708][ T1644] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.434411][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 147.434425][ T29] audit: type=1400 audit(1770386226.117:2550): avc: denied { read } for pid=9688 comm="syz.3.1856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 147.545106][ T1644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.555196][ T1644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.565656][ T1644] bond0 (unregistering): Released all slaves [ 147.576045][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 147.632049][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.639180][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.662461][ T9654] bridge_slave_0: entered allmulticast mode [ 147.669081][ T9654] bridge_slave_0: entered promiscuous mode [ 147.678083][ T1644] hsr_slave_0: left promiscuous mode [ 147.685103][ T1644] hsr_slave_1: left promiscuous mode [ 147.725953][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.733494][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.746092][ T1644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.747412][ T9715] set_capacity_and_notify: 10 callbacks suppressed [ 147.747442][ T9715] loop6: detected capacity change from 0 to 512 [ 147.755184][ T1644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.780182][ T1644] veth1_macvtap: left promiscuous mode [ 147.793040][ T1644] veth0_macvtap: left promiscuous mode [ 147.799023][ T9715] EXT4-fs: Ignoring removed nobh option [ 147.804664][ T9715] ext4: Unknown parameter 'dont_measure' [ 147.816111][ T1644] veth1_vlan: left promiscuous mode [ 147.821693][ T1644] veth0_vlan: left promiscuous mode [ 147.871556][ T9725] loop6: detected capacity change from 0 to 1024 [ 147.879213][ T9725] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 147.891754][ T9725] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1863: lblock 2 mapped to illegal pblock 2 (length 1) [ 147.906246][ T9725] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 147.914588][ T9725] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1863: lblock 0 mapped to illegal pblock 48 (length 1) [ 147.930183][ T9725] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 147.939159][ T9725] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1863: Failed to acquire dquot type 0 [ 147.950607][ T9725] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 147.960195][ T9725] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1863: mark_inode_dirty error [ 147.971645][ T9725] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 147.981896][ T9725] EXT4-fs (loop6): 1 orphan inode deleted [ 147.993069][ T52] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 148.009241][ T52] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 148.017808][ T52] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:3: Failed to release dquot type 0 [ 148.049746][ T1644] team0 (unregistering): Port device team_slave_1 removed [ 148.060239][ T1644] team0 (unregistering): Port device team_slave_0 removed [ 148.095622][ T4742] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 148.108933][ T4742] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 148.118917][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.120579][ T4742] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 148.127752][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.147246][ T9654] bridge_slave_1: entered allmulticast mode [ 148.161419][ T9654] bridge_slave_1: entered promiscuous mode [ 148.207425][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.220437][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.288916][ T9738] IPVS: set_ctl: invalid protocol: 51 172.20.20.26:20000 [ 148.303084][ T9654] team0: Port device team_slave_0 added [ 148.320464][ T9654] team0: Port device team_slave_1 added [ 148.372348][ T29] audit: type=1400 audit(1770386227.047:2551): avc: denied { mount } for pid=9737 comm="syz.3.1867" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 148.404285][ T1644] IPVS: stop unused estimator thread 0... [ 148.410482][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.417489][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.444243][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.510269][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.517468][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.543578][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.592733][ T9764] loop7: detected capacity change from 0 to 764 [ 148.608813][ T9760] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1871'. [ 148.632232][ T9654] hsr_slave_0: entered promiscuous mode [ 148.647835][ T9654] hsr_slave_1: entered promiscuous mode [ 148.660513][ T9654] debugfs: 'hsr0' already exists in 'hsr' [ 148.667146][ T9654] Cannot create hsr debugfs directory [ 148.682678][ T9768] tipc: Enabled bearer , priority 0 [ 148.720988][ T9768] syzkaller0: entered promiscuous mode [ 148.726570][ T9768] syzkaller0: entered allmulticast mode [ 148.925191][ T9776] tipc: Resetting bearer [ 148.960059][ T9767] tipc: Resetting bearer [ 148.965317][ T9780] FAULT_INJECTION: forcing a failure. [ 148.965317][ T9780] name failslab, interval 1, probability 0, space 0, times 0 [ 148.978657][ T9780] CPU: 1 UID: 0 PID: 9780 Comm: syz.7.1877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 148.978709][ T9780] Tainted: [W]=WARN [ 148.978719][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 148.978735][ T9780] Call Trace: [ 148.978742][ T9780] [ 148.978756][ T9780] __dump_stack+0x1d/0x30 [ 148.978826][ T9780] dump_stack_lvl+0x95/0xd0 [ 148.978846][ T9780] dump_stack+0x15/0x1b [ 148.978863][ T9780] should_fail_ex+0x263/0x280 [ 148.978892][ T9780] should_failslab+0x8c/0xb0 [ 148.978990][ T9780] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 148.979013][ T9780] ? __alloc_skb+0x2f0/0x4b0 [ 148.979040][ T9780] __alloc_skb+0x2f0/0x4b0 [ 148.979065][ T9780] ? __alloc_skb+0x219/0x4b0 [ 148.979102][ T9780] virtual_ncidev_write+0x3b/0x110 [ 148.979135][ T9780] ? __pfx_virtual_ncidev_write+0x10/0x10 [ 148.979162][ T9780] vfs_write+0x269/0x9f0 [ 148.979243][ T9780] ? __rcu_read_unlock+0x4e/0x70 [ 148.979272][ T9780] ? __fget_files+0x184/0x1c0 [ 148.979370][ T9780] ksys_write+0xdc/0x1a0 [ 148.979426][ T9780] __x64_sys_write+0x40/0x50 [ 148.979444][ T9780] x64_sys_call+0x2847/0x3000 [ 148.979467][ T9780] do_syscall_64+0xc0/0x2a0 [ 148.979495][ T9780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.979564][ T9780] RIP: 0033:0x7f668834aeb9 [ 148.979626][ T9780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.979733][ T9780] RSP: 002b:00007f6686da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.979751][ T9780] RAX: ffffffffffffffda RBX: 00007f66885c5fa0 RCX: 00007f668834aeb9 [ 148.979764][ T9780] RDX: 0000000000000014 RSI: 0000200000000040 RDI: 0000000000000003 [ 148.979796][ T9780] RBP: 00007f6686da7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.979813][ T9780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.979859][ T9780] R13: 00007f66885c6038 R14: 00007f66885c5fa0 R15: 00007ffe24e0dd38 [ 148.979878][ T9780] [ 148.981061][ T9767] tipc: Disabling bearer [ 149.214723][ T9654] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 149.234691][ T9654] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 149.245624][ T9654] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 149.266566][ T9654] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 149.283143][ T9792] loop6: detected capacity change from 0 to 1024 [ 149.290189][ T9792] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.375258][ T9811] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1880'. [ 149.422625][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.446880][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.462870][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.469990][ T1644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.500462][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.507581][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.540421][ T9654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.625342][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.780035][ T9855] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 150.177186][ T9888] loop7: detected capacity change from 0 to 512 [ 150.231329][ T9654] veth0_vlan: entered promiscuous mode [ 150.239472][ T9654] veth1_vlan: entered promiscuous mode [ 150.253672][ T9898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9898 comm=syz.3.1893 [ 150.266844][ T9654] veth0_macvtap: entered promiscuous mode [ 150.278746][ T9654] veth1_macvtap: entered promiscuous mode [ 150.281412][ T9888] EXT4-fs (loop7): 1 orphan inode deleted [ 150.296053][ T9899] loop5: detected capacity change from 0 to 764 [ 150.314659][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.331722][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.350580][ T418] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.373747][ T29] audit: type=1400 audit(1770386229.047:2552): avc: denied { mount } for pid=9654 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.405119][ T418] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.446235][ T418] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.456717][ T9910] __nla_validate_parse: 1 callbacks suppressed [ 150.456776][ T9910] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1891'. [ 150.501924][ T9913] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 150.509840][ T418] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.560098][ T9919] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1850'. [ 150.630815][ T9925] netlink: 'syz.3.1901': attribute type 3 has an invalid length. [ 150.638710][ T9925] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1901'. [ 150.665296][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1901'. [ 150.675345][ T9925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1901'. [ 150.686061][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1901'. [ 150.695010][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 150.708560][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.717261][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.747916][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.756710][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.763100][ T9923] loop5: detected capacity change from 0 to 1024 [ 150.801978][ T9923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 150.839032][ T9923] System zones: 0-1, 3-36 [ 150.857149][ T9937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9937 comm=syz.3.1905 [ 150.884505][ T9923] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1899: bad orphan inode 134217728 [ 150.955265][ T9939] loop9: detected capacity change from 0 to 764 [ 153.443152][ T9902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.496067][ T9957] netlink: 'syz.9.1909': attribute type 1 has an invalid length. [ 153.542912][ T9965] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 153.552801][ T29] audit: type=1400 audit(1770386232.237:2553): avc: denied { relabelto } for pid=9963 comm="syz.5.1912" name="usbmon4" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 153.580836][ T29] audit: type=1400 audit(1770386232.237:2554): avc: denied { associate } for pid=9963 comm="syz.5.1912" name="usbmon4" dev="devtmpfs" ino=154 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cron_spool_t:s0" [ 153.616511][ T9968] loop9: detected capacity change from 0 to 512 [ 153.664165][ T9978] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9978 comm=syz.5.1917 [ 153.692421][ T9976] loop7: detected capacity change from 0 to 128 [ 153.717945][ T9968] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1914: inode has both inline data and extents flags [ 153.731437][ T9968] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1914: couldn't read orphan inode 15 (err -117) [ 153.763869][ T29] audit: type=1400 audit(1770386232.447:2555): avc: denied { mounton } for pid=9967 comm="syz.9.1914" path="mnt:[4026532783]" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 153.862014][ T12] bio_check_eod: 46 callbacks suppressed [ 153.862031][ T12] kworker/u8:0: attempt to access beyond end of device [ 153.862031][ T12] loop7: rw=1, sector=129, nr_sectors = 8 limit=128 [ 153.962620][ T12] kworker/u8:0: attempt to access beyond end of device [ 153.962620][ T12] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 154.127116][ T12] kworker/u8:0: attempt to access beyond end of device [ 154.127116][ T12] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 154.181153][ T12] kworker/u8:0: attempt to access beyond end of device [ 154.181153][ T12] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 154.201759][ T12] kworker/u8:0: attempt to access beyond end of device [ 154.201759][ T12] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 154.218158][ T12] kworker/u8:0: attempt to access beyond end of device [ 154.218158][ T12] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 154.237272][T10003] netlink: 'syz.5.1924': attribute type 1 has an invalid length. [ 154.355326][ T29] audit: type=1400 audit(1770386233.037:2556): avc: denied { ioctl } for pid=10007 comm="syz.7.1922" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 154.415376][T10008] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1922'. [ 154.559766][T10035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10035 comm=syz.3.1934 [ 154.582842][T10036] FAULT_INJECTION: forcing a failure. [ 154.582842][T10036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.596106][T10036] CPU: 1 UID: 0 PID: 10036 Comm: syz.7.1933 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.596147][T10036] Tainted: [W]=WARN [ 154.596156][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 154.596227][T10036] Call Trace: [ 154.596235][T10036] [ 154.596245][T10036] __dump_stack+0x1d/0x30 [ 154.596280][T10036] dump_stack_lvl+0x95/0xd0 [ 154.596307][T10036] dump_stack+0x15/0x1b [ 154.596329][T10036] should_fail_ex+0x263/0x280 [ 154.596370][T10036] should_fail+0xb/0x20 [ 154.596436][T10036] should_fail_usercopy+0x1a/0x20 [ 154.596523][T10036] _copy_from_user+0x1c/0xb0 [ 154.596550][T10036] sctp_setsockopt+0x164/0xea0 [ 154.596578][T10036] sock_common_setsockopt+0x69/0x80 [ 154.596611][T10036] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 154.596646][T10036] __sys_setsockopt+0x184/0x200 [ 154.596757][T10036] __x64_sys_setsockopt+0x64/0x80 [ 154.596795][T10036] x64_sys_call+0x21d5/0x3000 [ 154.596826][T10036] do_syscall_64+0xc0/0x2a0 [ 154.596870][T10036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.596891][T10036] RIP: 0033:0x7f668834aeb9 [ 154.596984][T10036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.597007][T10036] RSP: 002b:00007f6686da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 154.597029][T10036] RAX: ffffffffffffffda RBX: 00007f66885c5fa0 RCX: 00007f668834aeb9 [ 154.597082][T10036] RDX: 0000000000000083 RSI: 0000000000000084 RDI: 0000000000000003 [ 154.597098][T10036] RBP: 00007f6686da7090 R08: 0000000000000008 R09: 0000000000000000 [ 154.597114][T10036] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 154.597131][T10036] R13: 00007f66885c6038 R14: 00007f66885c5fa0 R15: 00007ffe24e0dd38 [ 154.597158][T10036] [ 154.825573][T10038] usb usb8: usbfs: process 10038 (syz.6.1935) did not claim interface 0 before use [ 154.843460][T10040] netlink: 'syz.7.1936': attribute type 1 has an invalid length. [ 154.865750][T10042] syzkaller0: entered promiscuous mode [ 154.871317][T10042] syzkaller0: entered allmulticast mode [ 155.093959][T10055] tipc: Enabled bearer , priority 0 [ 155.204833][T10069] FAULT_INJECTION: forcing a failure. [ 155.204833][T10069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.218082][T10069] CPU: 1 UID: 0 PID: 10069 Comm: syz.5.1947 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.218157][T10069] Tainted: [W]=WARN [ 155.218164][T10069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 155.218177][T10069] Call Trace: [ 155.218183][T10069] [ 155.218192][T10069] __dump_stack+0x1d/0x30 [ 155.218225][T10069] dump_stack_lvl+0x95/0xd0 [ 155.218283][T10069] dump_stack+0x15/0x1b [ 155.218303][T10069] should_fail_ex+0x263/0x280 [ 155.218341][T10069] should_fail+0xb/0x20 [ 155.218377][T10069] should_fail_usercopy+0x1a/0x20 [ 155.218424][T10069] _copy_from_user+0x1c/0xb0 [ 155.218453][T10069] __copy_msghdr+0x244/0x300 [ 155.218499][T10069] ___sys_sendmsg+0x10c/0x1e0 [ 155.218569][T10069] __x64_sys_sendmsg+0xd4/0x160 [ 155.218596][T10069] x64_sys_call+0x17ba/0x3000 [ 155.218688][T10069] do_syscall_64+0xc0/0x2a0 [ 155.218724][T10069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.218782][T10069] RIP: 0033:0x7fe593cfaeb9 [ 155.218801][T10069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.218864][T10069] RSP: 002b:00007fe59274f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.218904][T10069] RAX: ffffffffffffffda RBX: 00007fe593f75fa0 RCX: 00007fe593cfaeb9 [ 155.218920][T10069] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000005 [ 155.218934][T10069] RBP: 00007fe59274f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.218948][T10069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.218961][T10069] R13: 00007fe593f76038 R14: 00007fe593f75fa0 R15: 00007ffd9ccd64e8 [ 155.218979][T10069] [ 155.229080][T10073] netlink: 'syz.7.1949': attribute type 1 has an invalid length. [ 155.246993][T10048] tipc: Resetting bearer [ 155.415095][T10079] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1950'. [ 155.440993][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1951'. [ 155.491648][T10047] tipc: Disabling bearer [ 155.545914][T10086] loop7: detected capacity change from 0 to 764 [ 155.657662][T10097] loop6: detected capacity change from 0 to 256 [ 155.819979][T10109] loop9: detected capacity change from 0 to 512 [ 155.859297][T10113] loop6: detected capacity change from 0 to 512 [ 155.883656][T10109] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.901673][T10113] ext4 filesystem being mounted at /298/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.945844][T10123] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 155.966348][T10113] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #4: comm syz.6.1960: corrupted inode contents [ 155.996398][T10113] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #4: comm syz.6.1960: mark_inode_dirty error [ 155.996678][T10128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1963'. [ 156.018614][T10125] syzkaller0: entered promiscuous mode [ 156.024242][T10125] syzkaller0: entered allmulticast mode [ 156.033892][T10113] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #4: comm syz.6.1960: corrupted inode contents [ 156.042867][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1963'. [ 156.055445][T10127] 9p: Bad value for 'rfdno' [ 156.060204][T10113] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.1960: mark_inode_dirty error [ 156.081271][T10113] Quota error (device loop6): write_blk: dquota write failed [ 156.089332][T10113] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 156.098414][T10113] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 156.108363][T10113] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1960: Failed to acquire dquot type 1 [ 156.331976][T10142] tipc: Started in network mode [ 156.337218][T10142] tipc: Node identity 56161f9167cd, cluster identity 4711 [ 156.345198][T10142] tipc: Enabled bearer , priority 0 [ 156.354125][T10142] tipc: Resetting bearer [ 156.361482][T10140] tipc: Disabling bearer [ 156.464546][T10153] tipc: Enabled bearer , priority 0 [ 156.471897][T10153] syzkaller0: entered promiscuous mode [ 156.477427][T10153] syzkaller0: entered allmulticast mode [ 156.488513][T10153] tipc: Resetting bearer [ 156.496625][T10152] tipc: Resetting bearer [ 156.504499][T10152] tipc: Disabling bearer [ 156.519421][T10159] netlink: 'syz.3.1973': attribute type 1 has an invalid length. [ 156.802475][T10176] syzkaller0: entered promiscuous mode [ 156.808029][T10176] syzkaller0: entered allmulticast mode [ 156.830154][T10178] tipc: Enabled bearer , priority 0 [ 156.849342][T10183] loop6: detected capacity change from 0 to 512 [ 156.863114][T10184] netlink: 300 bytes leftover after parsing attributes in process `syz.5.1983'. [ 156.899508][T10186] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 156.989826][T10183] EXT4-fs (loop6): 1 orphan inode deleted [ 157.222840][T10194] tipc: Enabling of bearer rejected, failed to enable media [ 157.244884][T10200] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1982'. [ 157.287065][ T29] audit: type=1400 audit(1770386235.967:2557): avc: denied { mount } for pid=10204 comm="syz.9.1989" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.322712][ T29] audit: type=1400 audit(1770386235.997:2558): avc: denied { unmount } for pid=9654 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 157.426949][T10220] loop9: detected capacity change from 0 to 512 [ 157.438833][T10220] EXT4-fs: Ignoring removed bh option [ 157.445072][T10220] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 157.453801][T10220] EXT4-fs (loop9): external journal device major/minor numbers have changed [ 157.464579][T10220] EXT4-fs (loop9): failed to open journal device unknown-block(8,224) -6 [ 157.678812][ T29] audit: type=1326 audit(1770386236.357:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.3.1997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb9245aeb9 code=0x7ffc0000 [ 157.946822][T10243] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 157.971835][ T23] tipc: Node number set to 2545166565 [ 158.057510][T10256] loop5: detected capacity change from 0 to 256 [ 158.144285][T10256] FAT-fs (loop5): Directory bread(block 64) failed [ 158.170354][T10256] FAT-fs (loop5): Directory bread(block 65) failed [ 158.179781][ T418] bond0: (slave syz_tun): link status definitely down, disabling slave [ 158.201334][T10256] FAT-fs (loop5): Directory bread(block 66) failed [ 158.218825][T10256] FAT-fs (loop5): Directory bread(block 67) failed [ 158.255750][T10256] FAT-fs (loop5): Directory bread(block 68) failed [ 158.268610][T10256] FAT-fs (loop5): Directory bread(block 69) failed [ 158.277344][T10281] tipc: Enabling of bearer rejected, failed to enable media [ 158.279005][T10256] FAT-fs (loop5): Directory bread(block 70) failed [ 158.297981][T10256] FAT-fs (loop5): Directory bread(block 71) failed [ 158.342573][T10256] FAT-fs (loop5): Directory bread(block 72) failed [ 158.349348][T10256] FAT-fs (loop5): Directory bread(block 73) failed [ 158.421996][T10286] syz.5.2004: attempt to access beyond end of device [ 158.421996][T10286] loop5: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 158.505028][T10256] syz.5.2004: attempt to access beyond end of device [ 158.505028][T10256] loop5: rw=8388608, sector=1160, nr_sectors = 4 limit=256 [ 159.194226][T10393] syzkaller0: entered promiscuous mode [ 159.199776][T10393] syzkaller0: entered allmulticast mode [ 159.342134][T10395] loop7: detected capacity change from 0 to 2048 [ 159.655264][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 159.655279][ T29] audit: type=1326 audit(1770386238.337:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.772957][ T29] audit: type=1326 audit(1770386238.447:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.796630][ T29] audit: type=1326 audit(1770386238.447:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.820196][ T29] audit: type=1326 audit(1770386238.447:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.847338][ T29] audit: type=1326 audit(1770386238.467:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.870898][ T29] audit: type=1326 audit(1770386238.467:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.895238][ T29] audit: type=1326 audit(1770386238.467:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.918805][ T29] audit: type=1326 audit(1770386238.467:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.943326][ T29] audit: type=1326 audit(1770386238.467:2587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 159.967023][ T29] audit: type=1326 audit(1770386238.467:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10419 comm="syz.6.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 160.045560][T10448] loop9: detected capacity change from 0 to 512 [ 160.071964][T10448] EXT4-fs (loop9): 1 orphan inode deleted [ 160.083706][T10448] EXT4-fs mount: 36 callbacks suppressed [ 160.083726][T10448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.116992][T10452] loop7: detected capacity change from 0 to 512 [ 160.140636][T10452] EXT4-fs (loop7): 1 orphan inode deleted [ 160.153151][T10452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.175165][T10457] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2036'. [ 160.281930][T10469] loop6: detected capacity change from 0 to 8192 [ 160.290314][T10475] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2037'. [ 160.503425][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2051'. [ 160.554175][T10500] loop6: detected capacity change from 0 to 8192 [ 160.561944][T10500] vfat: Unknown parameter '00000000000000000000003' [ 160.829620][T10523] tipc: Enabled bearer , priority 0 [ 160.836848][T10523] syzkaller0: entered promiscuous mode [ 160.842407][T10523] syzkaller0: entered allmulticast mode [ 160.851214][T10522] tipc: Resetting bearer [ 160.861739][T10522] tipc: Disabling bearer [ 160.893259][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.946329][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2057'. [ 160.972800][ T6212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.042026][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2062'. [ 161.084908][T10550] x_tables: duplicate underflow at hook 2 [ 161.090937][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2057'. [ 161.100336][T10550] bridge_slave_1: left allmulticast mode [ 161.106086][T10550] bridge_slave_1: left promiscuous mode [ 161.111863][T10550] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.120700][T10550] bridge_slave_0: left allmulticast mode [ 161.126483][T10550] bridge_slave_0: left promiscuous mode [ 161.132392][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.611549][T10599] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2066'. [ 163.995468][T10531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.090775][T10652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10652 comm=syz.5.2081 [ 164.113166][T10652] netlink: 'syz.5.2081': attribute type 1 has an invalid length. [ 164.160446][T10652] bond4: (slave bridge0): making interface the new active one [ 164.172218][T10652] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 164.223808][T10665] loop6: detected capacity change from 0 to 128 [ 164.251559][T10665] EXT4-fs: Ignoring removed nobh option [ 164.261835][T10669] tipc: Enabling of bearer rejected, failed to enable media [ 164.285092][T10665] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.297295][T10671] tipc: Enabling of bearer rejected, already enabled [ 164.309075][T10671] tipc: Resetting bearer [ 164.329523][T10665] ext4 filesystem being mounted at /317/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.384896][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2091'. [ 164.393909][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2091'. [ 164.575667][ T4742] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.588996][T10695] loop5: detected capacity change from 0 to 256 [ 164.609021][T10695] FAT-fs (loop5): Directory bread(block 64) failed [ 164.619644][T10697] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2096'. [ 164.628737][T10697] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2096'. [ 164.637774][T10697] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2096'. [ 164.647158][T10695] FAT-fs (loop5): Directory bread(block 65) failed [ 164.678200][T10695] FAT-fs (loop5): Directory bread(block 66) failed [ 164.696022][T10695] FAT-fs (loop5): Directory bread(block 67) failed [ 164.702992][T10695] FAT-fs (loop5): Directory bread(block 68) failed [ 164.709573][T10695] FAT-fs (loop5): Directory bread(block 69) failed [ 164.716774][T10695] FAT-fs (loop5): Directory bread(block 70) failed [ 164.740280][T10695] FAT-fs (loop5): Directory bread(block 71) failed [ 164.750388][T10695] FAT-fs (loop5): Directory bread(block 72) failed [ 164.758780][T10695] FAT-fs (loop5): Directory bread(block 73) failed [ 164.827793][T10707] tipc: Enabling of bearer rejected, already enabled [ 164.846464][T10709] loop6: detected capacity change from 0 to 512 [ 164.885476][T10709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.928389][T10709] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.942023][T10709] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2102: corrupted inode contents [ 164.949712][T10719] loop7: detected capacity change from 0 to 128 [ 164.960477][T10709] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.2102: mark_inode_dirty error [ 164.965972][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 164.966015][ T29] audit: type=1400 audit(1770386243.637:2769): avc: denied { write } for pid=10716 comm="syz.9.2105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 164.977726][T10719] EXT4-fs: Ignoring removed nobh option [ 165.003730][T10709] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2102: corrupted inode contents [ 165.016289][T10709] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2102: mark_inode_dirty error [ 165.020061][T10719] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 165.020322][T10719] ext4 filesystem being mounted at /272/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 165.060352][T10709] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2102: corrupted inode contents [ 165.072410][T10709] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #2: comm syz.6.2102: mark_inode_dirty error [ 165.084287][T10709] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2102: corrupted inode contents [ 165.107675][T10709] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #2: comm syz.6.2102: corrupted inode contents [ 165.122558][ T29] audit: type=1400 audit(1770386243.787:2770): avc: denied { link } for pid=10708 comm="syz.6.2102" name="file1" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 165.145947][T10709] EXT4-fs error (device loop6): add_dirent_to_buf:2151: inode #2: comm syz.6.2102: mark_inode_dirty error [ 165.234528][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.306476][T10735] loop5: detected capacity change from 0 to 512 [ 165.317448][T10733] loop6: detected capacity change from 0 to 512 [ 165.336821][T10733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 165.357057][T10735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.371081][T10733] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 165.379163][T10733] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 165.389463][T10738] tipc: Enabled bearer , priority 0 [ 165.398613][T10738] tipc: Resetting bearer [ 165.406054][T10737] tipc: Disabling bearer [ 165.406965][T10733] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 165.421366][T10733] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 165.430968][T10733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 165.462561][T10735] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.482852][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.495505][T10735] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.2112: corrupted inode contents [ 165.507756][T10735] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.2112: mark_inode_dirty error [ 165.520172][T10735] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.2112: corrupted inode contents [ 165.532592][T10735] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.2112: mark_inode_dirty error [ 165.548156][T10735] Quota error (device loop5): write_blk: dquota write failed [ 165.555627][T10735] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 165.564706][T10735] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 165.575410][T10735] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2112: Failed to acquire dquot type 1 [ 165.594509][ T6212] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 165.606068][ T29] audit: type=1400 audit(1770386244.277:2771): avc: denied { mount } for pid=10744 comm="syz.9.2117" name="/" dev="configfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 165.629068][ T29] audit: type=1400 audit(1770386244.277:2772): avc: denied { search } for pid=10744 comm="syz.9.2117" name="/" dev="configfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.651657][ T29] audit: type=1400 audit(1770386244.277:2773): avc: denied { search } for pid=10744 comm="syz.9.2117" name="/" dev="configfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.673972][ T29] audit: type=1400 audit(1770386244.277:2774): avc: denied { read open } for pid=10744 comm="syz.9.2117" path="/" dev="configfs" ino=2168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 165.779093][T10762] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2120'. [ 165.793251][T10762] loop7: detected capacity change from 0 to 764 [ 165.860240][T10774] loop7: detected capacity change from 0 to 1024 [ 165.874425][T10774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.924271][ T29] audit: type=1400 audit(1770386244.607:2775): avc: denied { create } for pid=10773 comm="syz.7.2126" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=appletalk_socket permissive=1 [ 165.973676][T10783] loop6: detected capacity change from 0 to 512 [ 165.991959][ T6212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.032381][T10783] EXT4-fs (loop6): 1 orphan inode deleted [ 166.038763][T10783] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.051507][T10790] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2130'. [ 166.060676][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2130'. [ 166.134104][T10801] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2129'. [ 166.148855][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.384275][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2141'. [ 166.394027][T10824] loop7: detected capacity change from 0 to 512 [ 166.415110][T10824] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.421838][T10820] bond_slave_0: entered promiscuous mode [ 166.433297][T10820] @0Ù: entered promiscuous mode [ 166.438343][T10820] macvlan3: entered promiscuous mode [ 166.444538][T10820] bond0: entered promiscuous mode [ 166.450265][T10820] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 166.458496][T10824] ext4 filesystem being mounted at /281/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.500114][ T6212] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.754337][T10864] ipvlan1: entered allmulticast mode [ 166.759710][T10864] veth0_vlan: entered allmulticast mode [ 166.806040][T10866] xt_SECMARK: invalid mode: 2 [ 166.863730][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.170503][T10894] FAULT_INJECTION: forcing a failure. [ 167.170503][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 167.183932][T10894] CPU: 0 UID: 0 PID: 10894 Comm: syz.6.2168 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.183972][T10894] Tainted: [W]=WARN [ 167.183981][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.184061][T10894] Call Trace: [ 167.184067][T10894] [ 167.184081][T10894] __dump_stack+0x1d/0x30 [ 167.184112][T10894] dump_stack_lvl+0x95/0xd0 [ 167.184219][T10894] dump_stack+0x15/0x1b [ 167.184245][T10894] should_fail_ex+0x263/0x280 [ 167.184286][T10894] should_failslab+0x8c/0xb0 [ 167.184317][T10894] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 167.184358][T10894] ? __alloc_skb+0x2f0/0x4b0 [ 167.184420][T10894] __alloc_skb+0x2f0/0x4b0 [ 167.184624][T10894] ? __alloc_skb+0x219/0x4b0 [ 167.184663][T10894] netlink_ack+0xfd/0x500 [ 167.184703][T10894] netlink_rcv_skb+0x192/0x220 [ 167.184836][T10894] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.184926][T10894] rtnetlink_rcv+0x1c/0x30 [ 167.184948][T10894] netlink_unicast+0x5c0/0x690 [ 167.185023][T10894] netlink_sendmsg+0x5c8/0x6f0 [ 167.185052][T10894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.185078][T10894] ____sys_sendmsg+0x5af/0x600 [ 167.185231][T10894] ___sys_sendmsg+0x195/0x1e0 [ 167.185265][T10894] __x64_sys_sendmsg+0xd4/0x160 [ 167.185295][T10894] x64_sys_call+0x17ba/0x3000 [ 167.185404][T10894] do_syscall_64+0xc0/0x2a0 [ 167.185437][T10894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.185528][T10894] RIP: 0033:0x7ff655deaeb9 [ 167.185549][T10894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.185568][T10894] RSP: 002b:00007ff654847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.185590][T10894] RAX: ffffffffffffffda RBX: 00007ff656065fa0 RCX: 00007ff655deaeb9 [ 167.185607][T10894] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000004 [ 167.185681][T10894] RBP: 00007ff654847090 R08: 0000000000000000 R09: 0000000000000000 [ 167.185699][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.185726][T10894] R13: 00007ff656066038 R14: 00007ff656065fa0 R15: 00007ffdb412ffe8 [ 167.185758][T10894] [ 167.409248][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2162'. [ 167.428672][T10878] vlan2: entered allmulticast mode [ 167.433889][T10878] bridge_slave_0: entered allmulticast mode [ 167.498355][T10906] syzkaller0: entered promiscuous mode [ 167.503952][T10906] syzkaller0: entered allmulticast mode [ 167.516518][T10907] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2169'. [ 167.576309][T10912] loop6: detected capacity change from 0 to 512 [ 167.594530][T10912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.607289][T10912] ext4 filesystem being mounted at /332/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.618662][T10912] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #4: comm syz.6.2173: corrupted inode contents [ 167.630855][T10912] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #4: comm syz.6.2173: mark_inode_dirty error [ 167.643899][T10912] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #4: comm syz.6.2173: corrupted inode contents [ 167.655920][T10912] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #4: comm syz.6.2173: mark_inode_dirty error [ 167.667608][T10912] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2173: Failed to acquire dquot type 1 [ 167.901442][T10931] veth1_vlan: entered allmulticast mode [ 168.035962][T10943] syzkaller0: entered promiscuous mode [ 168.041499][T10943] syzkaller0: entered allmulticast mode [ 168.131842][T10947] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2184: inode has both inline data and extents flags [ 168.146184][T10947] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2184: couldn't read orphan inode 15 (err -117) [ 168.159177][T10947] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.218159][T10952] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.245376][T10952] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.310922][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.359350][T10944] tipc: Resetting bearer [ 168.408186][T10944] tipc: Disabling bearer [ 168.442507][T10955] bond0: (slave syz_tun): Releasing backup interface [ 168.460399][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.480542][T10964] FAT-fs (loop5): Directory bread(block 64) failed [ 168.496215][T10964] FAT-fs (loop5): Directory bread(block 65) failed [ 168.521738][T10964] FAT-fs (loop5): Directory bread(block 66) failed [ 168.531790][T10955] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.549616][T10964] FAT-fs (loop5): Directory bread(block 67) failed [ 168.565929][T10976] 9pnet_fd: Insufficient options for proto=fd [ 168.576684][T10964] FAT-fs (loop5): Directory bread(block 68) failed [ 168.610245][T10964] FAT-fs (loop5): Directory bread(block 69) failed [ 168.628014][T10964] FAT-fs (loop5): Directory bread(block 70) failed [ 168.659918][T10964] FAT-fs (loop5): Directory bread(block 71) failed [ 168.666930][T10982] netlink: 'syz.6.2191': attribute type 5 has an invalid length. [ 168.702048][T10964] FAT-fs (loop5): Directory bread(block 72) failed [ 168.717273][T10964] FAT-fs (loop5): Directory bread(block 73) failed [ 168.779765][T10987] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2197'. [ 168.822589][ T52] bridge_slave_1: left allmulticast mode [ 168.828290][ T52] bridge_slave_1: left promiscuous mode [ 168.834171][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.860165][ T52] bridge_slave_0: left allmulticast mode [ 168.865940][ T52] bridge_slave_0: left promiscuous mode [ 168.871691][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.916706][T10998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2198'. [ 168.929677][ T52] dvmrp6 (unregistering): left allmulticast mode [ 168.968522][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.998809][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.017155][ T52] bond0 (unregistering): Released all slaves [ 169.034433][T10992] bridge_slave_0: entered promiscuous mode [ 169.187055][ T52] tipc: Left network mode [ 169.194560][ T52] hsr_slave_0: left promiscuous mode [ 169.205288][ T52] hsr_slave_1: left promiscuous mode [ 169.212922][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.238125][T11023] netlink: 'syz.6.2201': attribute type 10 has an invalid length. [ 169.276205][T11027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.289550][T11027] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.290129][ T52] team0 (unregistering): Port device team_slave_1 removed [ 169.308535][T11027] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #4: comm syz.9.2202: corrupted inode contents [ 169.321152][T11027] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #4: comm syz.9.2202: mark_inode_dirty error [ 169.332869][ T52] team0 (unregistering): Port device team_slave_0 removed [ 169.333031][T11027] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #4: comm syz.9.2202: corrupted inode contents [ 169.352077][T11027] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #4: comm syz.9.2202: mark_inode_dirty error [ 169.364379][T11027] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.2202: Failed to acquire dquot type 1 [ 169.390007][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.401800][T11023] syz_tun: left promiscuous mode [ 169.583512][T11047] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.2207: corrupted in-inode xattr: e_value size too large [ 169.600241][T10983] chnl_net:caif_netlink_parms(): no params data found [ 169.653061][T11047] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.2207: couldn't read orphan inode 15 (err -117) [ 169.691093][ T52] IPVS: stop unused estimator thread 0... [ 169.698068][T11047] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.726128][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.790900][T10983] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.798076][T10983] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.841454][T10983] bridge_slave_0: entered allmulticast mode [ 169.856785][T10983] bridge_slave_0: entered promiscuous mode [ 169.916978][T10983] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.924165][T10983] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.941719][T10983] bridge_slave_1: entered allmulticast mode [ 169.960120][T10983] bridge_slave_1: entered promiscuous mode [ 170.059974][T10983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.110972][T10983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.170863][T11097] set_capacity_and_notify: 5 callbacks suppressed [ 170.170879][T11097] loop9: detected capacity change from 0 to 512 [ 170.201972][T11090] loop5: detected capacity change from 0 to 512 [ 170.233645][T11097] EXT4-fs (loop9): 1 orphan inode deleted [ 170.244986][T11090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.266771][T11097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.279026][T11090] ext4 filesystem being mounted at /415/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.303883][T11090] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.2213: corrupted inode contents [ 170.315620][T10983] team0: Port device team_slave_0 added [ 170.319833][T10983] team0: Port device team_slave_1 added [ 170.339575][T10983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.346675][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.373401][T10983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.384694][T11090] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #4: comm syz.5.2213: mark_inode_dirty error [ 170.413114][T10983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.415540][T11090] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #4: comm syz.5.2213: corrupted inode contents [ 170.420203][T10983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.458678][T10983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.472773][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 170.472789][ T29] audit: type=1326 audit(1770386249.157:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.502598][ T29] audit: type=1326 audit(1770386249.157:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.527511][T11107] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2215'. [ 170.544530][T11090] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #4: comm syz.5.2213: mark_inode_dirty error [ 170.556819][T11090] Quota error (device loop5): write_blk: dquota write failed [ 170.564298][T11090] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 170.573371][T11090] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 170.583433][T11090] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2213: Failed to acquire dquot type 1 [ 170.595697][ T29] audit: type=1326 audit(1770386249.217:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.619293][ T29] audit: type=1326 audit(1770386249.217:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.642894][ T29] audit: type=1326 audit(1770386249.217:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.666464][ T29] audit: type=1326 audit(1770386249.217:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.684063][T10983] hsr_slave_0: entered promiscuous mode [ 170.690080][ T29] audit: type=1326 audit(1770386249.217:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.6.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff655deaeb9 code=0x7ffc0000 [ 170.732851][T10983] hsr_slave_1: entered promiscuous mode [ 170.741676][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.749071][T10983] debugfs: 'hsr0' already exists in 'hsr' [ 170.756443][T10983] Cannot create hsr debugfs directory [ 171.008803][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.290742][T10983] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.306918][T10983] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.317105][T10983] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.347939][T10983] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.406205][T11199] netlink: 'syz.9.2235': attribute type 4 has an invalid length. [ 171.414069][T11199] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2235'. [ 171.421730][T11202] loop6: detected capacity change from 0 to 512 [ 171.482044][T10983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.488169][T11202] EXT4-fs (loop6): 1 orphan inode deleted [ 171.510602][T11202] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.523297][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.542021][T10349] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.549195][T10349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.589386][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.596509][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.616008][T10983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.626571][T10983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.652374][T11222] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2236'. [ 171.715788][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.801440][T11247] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2246'. [ 171.911588][T10983] veth0_vlan: entered promiscuous mode [ 171.921925][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2249'. [ 171.933989][T10983] veth1_vlan: entered promiscuous mode [ 171.951445][T10983] veth0_macvtap: entered promiscuous mode [ 171.981114][T11276] loop9: detected capacity change from 0 to 256 [ 172.018291][T10983] veth1_macvtap: entered promiscuous mode [ 172.033613][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.081450][T11276] FAT-fs (loop9): Directory bread(block 64) failed [ 172.096112][T11276] FAT-fs (loop9): Directory bread(block 65) failed [ 172.104610][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.112443][T11276] FAT-fs (loop9): Directory bread(block 66) failed [ 172.127068][T11284] batman_adv: batadv0: Adding interface: dummy0 [ 172.133479][T11284] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 172.168327][T11276] FAT-fs (loop9): Directory bread(block 67) failed [ 172.175325][T11276] FAT-fs (loop9): Directory bread(block 68) failed [ 172.181897][T11276] FAT-fs (loop9): Directory bread(block 69) failed [ 172.188798][T11284] batman_adv: batadv0: Interface activated: dummy0 [ 172.195591][T11276] FAT-fs (loop9): Directory bread(block 70) failed [ 172.202496][T11276] FAT-fs (loop9): Directory bread(block 71) failed [ 172.210976][T11276] FAT-fs (loop9): Directory bread(block 72) failed [ 172.216025][T10349] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.218113][T11276] FAT-fs (loop9): Directory bread(block 73) failed [ 172.227945][T10349] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.267230][T10349] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.278987][T11293] netlink: 'syz.5.2253': attribute type 4 has an invalid length. [ 172.291068][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.304318][T10349] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.358105][T11307] loop1: detected capacity change from 0 to 1024 [ 172.388014][T11307] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.449801][T11307] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.499165][T11313] loop6: detected capacity change from 0 to 4096 [ 172.523780][T11324] FAULT_INJECTION: forcing a failure. [ 172.523780][T11324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.533225][T11313] EXT4-fs: Ignoring removed bh option [ 172.537108][T11324] CPU: 0 UID: 0 PID: 11324 Comm: syz.5.2259 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.537242][T11324] Tainted: [W]=WARN [ 172.537265][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.537301][T11324] Call Trace: [ 172.537321][T11324] [ 172.537349][T11324] __dump_stack+0x1d/0x30 [ 172.537424][T11324] dump_stack_lvl+0x95/0xd0 [ 172.537496][T11324] dump_stack+0x15/0x1b [ 172.537560][T11324] should_fail_ex+0x263/0x280 [ 172.537696][T11324] should_fail+0xb/0x20 [ 172.537790][T11324] should_fail_usercopy+0x1a/0x20 [ 172.537980][T11324] _copy_from_user+0x1c/0xb0 [ 172.538053][T11324] do_sock_getsockopt+0xf1/0x210 [ 172.538168][T11324] __x64_sys_getsockopt+0x11d/0x1a0 [ 172.538362][T11324] x64_sys_call+0x2dc7/0x3000 [ 172.538453][T11324] do_syscall_64+0xc0/0x2a0 [ 172.538578][T11324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.538644][T11324] RIP: 0033:0x7fe593cfaeb9 [ 172.538715][T11324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.538778][T11324] RSP: 002b:00007fe59274f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 172.538899][T11324] RAX: ffffffffffffffda RBX: 00007fe593f75fa0 RCX: 00007fe593cfaeb9 [ 172.538942][T11324] RDX: 0000000000000007 RSI: 0000000000000029 RDI: 0000000000000003 [ 172.538991][T11324] RBP: 00007fe59274f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.539094][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.539149][T11324] R13: 00007fe593f76038 R14: 00007fe593f75fa0 R15: 00007ffd9ccd64e8 [ 172.539228][T11324] [ 172.707678][T11313] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.772898][T11313] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.831304][T11313] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2255'. [ 172.979433][T10983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.005457][T11358] netlink: 'syz.9.2266': attribute type 13 has an invalid length. [ 173.105071][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.159727][T11358] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.167034][T11358] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.209075][T11386] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2270'. [ 173.218985][T11387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2270'. [ 173.249719][T11358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.259992][T11358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.315726][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'. [ 173.347362][T11386] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2270'. [ 173.356476][ T52] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.400408][ T52] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.421875][ T52] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.448694][T11400] loop5: detected capacity change from 0 to 1024 [ 173.486540][ T52] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.515950][T11400] ext4: Unknown parameter 'dont_appraise' [ 173.550513][T11410] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2276'. [ 173.596348][T11400] loop5: detected capacity change from 0 to 128 [ 173.735226][T11435] loop6: detected capacity change from 0 to 512 [ 173.781533][T11400] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.794788][T11435] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 173.802852][T11435] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 173.820092][T11435] EXT4-fs (loop6): orphan cleanup on readonly fs [ 173.827634][T11449] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 173.844217][T11450] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 173.853517][T11435] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 173.860162][T11400] ext4 filesystem being mounted at /425/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.868264][T11435] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 173.903760][T11446] loop9: detected capacity change from 0 to 512 [ 173.921288][T11435] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2280: bg 0: block 40: padding at end of block bitmap is not set [ 173.936897][T11435] EXT4-fs (loop6): Remounting filesystem read-only [ 173.961561][T11446] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 173.969645][T11446] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 174.003092][T11435] EXT4-fs (loop6): 1 truncate cleaned up [ 174.025661][T11435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.048308][T11446] EXT4-fs (loop9): orphan cleanup on readonly fs [ 174.055823][T11446] EXT4-fs warning (device loop9): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 174.070442][T11446] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 174.097636][T11446] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2282: bg 0: block 40: padding at end of block bitmap is not set [ 174.123374][T11446] EXT4-fs (loop9): Remounting filesystem read-only [ 174.129992][T11446] EXT4-fs (loop9): 1 truncate cleaned up [ 174.140753][T11400] can0: slcan on ttyS3. [ 174.177640][T11446] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.202240][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.337463][ T3558] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.364431][T11503] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.445193][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.709661][T11565] EXT4-fs: test_dummy_encryption option not supported [ 175.249713][T11617] set_capacity_and_notify: 1 callbacks suppressed [ 175.249735][T11617] loop5: detected capacity change from 0 to 136 [ 175.509585][T11638] macvtap1: entered promiscuous mode [ 175.515806][T11638] hsr0: entered promiscuous mode [ 175.534495][T11638] hsr0: left promiscuous mode [ 175.554606][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 175.554621][ T29] audit: type=1326 audit(1770386254.237:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.632346][ T29] audit: type=1326 audit(1770386254.237:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.655905][ T29] audit: type=1326 audit(1770386254.237:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.679582][ T29] audit: type=1326 audit(1770386254.237:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.703121][ T29] audit: type=1326 audit(1770386254.237:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.726626][ T29] audit: type=1326 audit(1770386254.237:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.750244][ T29] audit: type=1326 audit(1770386254.237:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.773767][ T29] audit: type=1326 audit(1770386254.237:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.797315][ T29] audit: type=1326 audit(1770386254.237:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.820983][ T29] audit: type=1326 audit(1770386254.237:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11657 comm="syz.5.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe593cfaeb9 code=0x7ffc0000 [ 175.826462][T11601] loop9: detected capacity change from 0 to 512 [ 175.892673][T11667] FAULT_INJECTION: forcing a failure. [ 175.892673][T11667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.905789][T11667] CPU: 0 UID: 0 PID: 11667 Comm: syz.1.2320 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 175.905910][T11667] Tainted: [W]=WARN [ 175.905929][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 175.905967][T11667] Call Trace: [ 175.905974][T11667] [ 175.905984][T11667] __dump_stack+0x1d/0x30 [ 175.906014][T11667] dump_stack_lvl+0x95/0xd0 [ 175.906039][T11667] dump_stack+0x15/0x1b [ 175.906063][T11667] should_fail_ex+0x263/0x280 [ 175.906147][T11667] should_fail+0xb/0x20 [ 175.906213][T11667] should_fail_usercopy+0x1a/0x20 [ 175.906253][T11667] _copy_to_user+0x20/0xa0 [ 175.906278][T11667] simple_read_from_buffer+0xb5/0x130 [ 175.906322][T11667] proc_fail_nth_read+0x10e/0x150 [ 175.906398][T11667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.906453][T11667] vfs_read+0x1ab/0x7f0 [ 175.906470][T11667] ? __rcu_read_unlock+0x4e/0x70 [ 175.906503][T11667] ? __fget_files+0x184/0x1c0 [ 175.906557][T11667] ? mutex_lock+0x57/0x90 [ 175.906587][T11667] ksys_read+0xdc/0x1a0 [ 175.906610][T11667] __x64_sys_read+0x40/0x50 [ 175.906629][T11667] x64_sys_call+0x2889/0x3000 [ 175.906652][T11667] do_syscall_64+0xc0/0x2a0 [ 175.906837][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.906927][T11667] RIP: 0033:0x7fb4af01b78e [ 175.906976][T11667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.906998][T11667] RSP: 002b:00007fb4adab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.907022][T11667] RAX: ffffffffffffffda RBX: 00007fb4adab76c0 RCX: 00007fb4af01b78e [ 175.907039][T11667] RDX: 000000000000000f RSI: 00007fb4adab70a0 RDI: 0000000000000006 [ 175.907052][T11667] RBP: 00007fb4adab7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.907129][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.907144][T11667] R13: 00007fb4af2d6038 R14: 00007fb4af2d5fa0 R15: 00007ffe5dc6c728 [ 175.907167][T11667] [ 176.165895][T11601] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 176.331473][T11601] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 176.355147][T11601] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.421877][T11693] loop5: detected capacity change from 0 to 1024 [ 176.453768][T11601] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.2306: Unimplemented hash flags: 0x0001 [ 176.466487][T11601] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2306: Corrupt directory, running e2fsck is recommended [ 176.480361][T11693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.511973][T11693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 176.562730][T11693] System zones: 0-1, 3-36 [ 176.577352][T11693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.719004][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.769686][T11714] loop6: detected capacity change from 0 to 1024 [ 176.806213][T11714] EXT4-fs: dax option not supported [ 176.833701][T11721] loop5: detected capacity change from 0 to 512 [ 176.908561][T11721] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.916151][T11733] __nla_validate_parse: 4 callbacks suppressed [ 176.916240][T11733] netlink: 424 bytes leftover after parsing attributes in process `syz.6.2332'. [ 176.944081][T11700] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.2306: Unimplemented hash flags: 0x0001 [ 176.955731][T11700] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2306: Corrupt directory, running e2fsck is recommended [ 176.969678][T11721] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2331: Failed to acquire dquot type 1 [ 176.994735][T11721] EXT4-fs (loop5): 1 truncate cleaned up [ 177.003090][T11721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 177.133397][T11751] loop6: detected capacity change from 0 to 4096 [ 177.143406][T11751] EXT4-fs: Ignoring removed bh option [ 177.149085][T11751] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.164941][T11751] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.171096][T11700] EXT4-fs warning (device loop9): dx_probe:837: inode #2: comm syz.9.2306: Unimplemented hash flags: 0x0001 [ 177.189570][T11700] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.2306: Corrupt directory, running e2fsck is recommended [ 177.230097][T11700] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.2306: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=196612, size=1024 fake=0 [ 177.291349][T11760] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2338'. [ 177.306125][ T3558] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 177.342696][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.370532][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.390357][T11762] netlink: 'syz.1.2339': attribute type 5 has an invalid length. [ 177.398209][T11762] netlink: 'syz.1.2339': attribute type 11 has an invalid length. [ 177.537136][T11782] loop9: detected capacity change from 0 to 128 [ 177.550430][T11782] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.653850][T11782] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.676192][T11782] netlink: 83992 bytes leftover after parsing attributes in process `syz.9.2345'. [ 177.734828][T11782] netlink: zone id is out of range [ 177.740008][T11782] netlink: zone id is out of range [ 177.817461][T11782] netlink: zone id is out of range [ 177.822769][T11782] netlink: zone id is out of range [ 177.827913][T11782] netlink: zone id is out of range [ 177.833110][T11782] netlink: zone id is out of range [ 177.838305][T11782] netlink: zone id is out of range [ 177.843474][T11782] netlink: zone id is out of range [ 177.848615][T11782] netlink: zone id is out of range [ 177.887464][T11762] ip6t_rpfilter: unknown options [ 177.936251][T11754] loop1: detected capacity change from 0 to 1024 [ 177.953648][T11754] EXT4-fs: Ignoring removed orlov option [ 177.976688][T11754] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 178.031093][T11754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.471044][T10983] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.548619][T11860] netlink: 'syz.1.2364': attribute type 4 has an invalid length. [ 178.737684][T11869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2368'. [ 178.746826][T11869] netem: incorrect gi model size [ 178.751923][T11869] netem: change failed [ 178.896907][T11883] loop9: detected capacity change from 0 to 128 [ 178.920203][T11883] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.971390][T11883] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.999624][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2374'. [ 179.008638][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2374'. [ 179.050536][T11889] loop6: detected capacity change from 0 to 512 [ 179.063897][T11889] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 179.076804][T11889] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 179.124085][T11889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 179.144508][T11895] FAULT_INJECTION: forcing a failure. [ 179.144508][T11895] name failslab, interval 1, probability 0, space 0, times 0 [ 179.147948][T11889] block device autoloading is deprecated and will be removed. [ 179.157294][T11895] CPU: 0 UID: 0 PID: 11895 Comm: syz.1.2379 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.157491][T11895] Tainted: [W]=WARN [ 179.157520][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 179.157564][T11895] Call Trace: [ 179.157588][T11895] [ 179.157619][T11895] __dump_stack+0x1d/0x30 [ 179.157704][T11895] dump_stack_lvl+0x95/0xd0 [ 179.157810][T11895] dump_stack+0x15/0x1b [ 179.157913][T11895] should_fail_ex+0x263/0x280 [ 179.158020][T11895] should_failslab+0x8c/0xb0 [ 179.158156][T11895] __kmalloc_noprof+0xb8/0x580 [ 179.158233][T11895] ? do_sys_poll+0x186/0xc10 [ 179.158319][T11895] do_sys_poll+0x186/0xc10 [ 179.158395][T11895] ? selinux_file_open+0x2e6/0x330 [ 179.158705][T11895] ? timespec64_add_safe+0x106/0x150 [ 179.158879][T11895] __se_sys_poll+0x104/0x230 [ 179.158979][T11895] __x64_sys_poll+0x43/0x50 [ 179.159045][T11895] x64_sys_call+0x289f/0x3000 [ 179.159139][T11895] do_syscall_64+0xc0/0x2a0 [ 179.159247][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.159365][T11895] RIP: 0033:0x7fb4af05aeb9 [ 179.159421][T11895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.159562][T11895] RSP: 002b:00007fb4adab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 179.159647][T11895] RAX: ffffffffffffffda RBX: 00007fb4af2d5fa0 RCX: 00007fb4af05aeb9 [ 179.159692][T11895] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 179.159732][T11895] RBP: 00007fb4adab7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.159775][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.159856][T11895] R13: 00007fb4af2d6038 R14: 00007fb4af2d5fa0 R15: 00007ffe5dc6c728 [ 179.159964][T11895] [ 179.343648][T11889] EXT4-fs (loop6): couldn't read superblock of external journal [ 179.478491][T11916] FAULT_INJECTION: forcing a failure. [ 179.478491][T11916] name failslab, interval 1, probability 0, space 0, times 0 [ 179.491379][T11916] CPU: 0 UID: 0 PID: 11916 Comm: syz.1.2387 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.491411][T11916] Tainted: [W]=WARN [ 179.491436][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 179.491471][T11916] Call Trace: [ 179.491478][T11916] [ 179.491484][T11916] __dump_stack+0x1d/0x30 [ 179.491508][T11916] dump_stack_lvl+0x95/0xd0 [ 179.491600][T11916] dump_stack+0x15/0x1b [ 179.491626][T11916] should_fail_ex+0x263/0x280 [ 179.491708][T11916] should_failslab+0x8c/0xb0 [ 179.491738][T11916] kmem_cache_alloc_noprof+0x68/0x490 [ 179.491769][T11916] ? skb_clone+0x151/0x1f0 [ 179.491793][T11916] skb_clone+0x151/0x1f0 [ 179.491812][T11916] __netlink_deliver_tap+0x2c9/0x500 [ 179.491883][T11916] ? netlink_attachskb+0x2e2/0x660 [ 179.491934][T11916] netlink_sendskb+0x126/0x150 [ 179.491970][T11916] netlink_unicast+0x2a2/0x690 [ 179.492010][T11916] netlink_ack+0x4c8/0x500 [ 179.492108][T11916] netlink_rcv_skb+0x192/0x220 [ 179.492181][T11916] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.492241][T11916] rtnetlink_rcv+0x1c/0x30 [ 179.492272][T11916] netlink_unicast+0x5c0/0x690 [ 179.492310][T11916] netlink_sendmsg+0x5c8/0x6f0 [ 179.492337][T11916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.492362][T11916] ____sys_sendmsg+0x5af/0x600 [ 179.492394][T11916] ___sys_sendmsg+0x195/0x1e0 [ 179.492431][T11916] __x64_sys_sendmsg+0xd4/0x160 [ 179.492460][T11916] x64_sys_call+0x17ba/0x3000 [ 179.492490][T11916] do_syscall_64+0xc0/0x2a0 [ 179.492621][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.492724][T11916] RIP: 0033:0x7fb4af05aeb9 [ 179.492741][T11916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.492772][T11916] RSP: 002b:00007fb4adab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.492793][T11916] RAX: ffffffffffffffda RBX: 00007fb4af2d5fa0 RCX: 00007fb4af05aeb9 [ 179.492808][T11916] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 179.492864][T11916] RBP: 00007fb4adab7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.492876][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.492888][T11916] R13: 00007fb4af2d6038 R14: 00007fb4af2d5fa0 R15: 00007ffe5dc6c728 [ 179.492907][T11916] [ 179.782780][ T9654] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.826460][T11931] EXT4-fs: Ignoring removed i_version option [ 179.833323][T11931] EXT4-fs: Ignoring removed bh option [ 179.927900][T11931] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.957155][T11931] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.037852][T11931] usb usb7: usbfs: interface 0 claimed by hub while 'syz.9.2390' sets config #4 [ 180.051270][T11950] netlink: 'syz.1.2397': attribute type 3 has an invalid length. [ 180.075655][ T9654] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.111946][T11950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11950 comm=syz.1.2397 [ 180.175193][T11957] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 180.205137][T11959] can: request_module (can-proto-0) failed. [ 180.218958][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2400'. [ 180.228642][T11957] EXT4-fs (loop6): mount failed [ 180.311056][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2400'. [ 180.320103][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2400'. [ 180.338917][T11972] FAULT_INJECTION: forcing a failure. [ 180.338917][T11972] name failslab, interval 1, probability 0, space 0, times 0 [ 180.352433][T11972] CPU: 0 UID: 0 PID: 11972 Comm: syz.6.2404 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.352474][T11972] Tainted: [W]=WARN [ 180.352483][T11972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.352500][T11972] Call Trace: [ 180.352508][T11972] [ 180.352516][T11972] __dump_stack+0x1d/0x30 [ 180.352566][T11972] dump_stack_lvl+0x95/0xd0 [ 180.352589][T11972] dump_stack+0x15/0x1b [ 180.352621][T11972] should_fail_ex+0x263/0x280 [ 180.352740][T11972] should_failslab+0x8c/0xb0 [ 180.352771][T11972] __kmalloc_noprof+0xb8/0x580 [ 180.352798][T11972] ? kobject_get_path+0x92/0x1c0 [ 180.352843][T11972] kobject_get_path+0x92/0x1c0 [ 180.352901][T11972] kobject_uevent_env+0x1da/0x570 [ 180.352935][T11972] kobject_uevent+0x1d/0x30 [ 180.352958][T11972] lo_ioctl+0xe1a/0x13a0 [ 180.352988][T11972] ? ioctl_has_perm+0x27e/0x2d0 [ 180.353019][T11972] ? blkdev_common_ioctl+0xc12/0x20b0 [ 180.353117][T11972] ? do_vfs_ioctl+0x84f/0xe70 [ 180.353150][T11972] ? selinux_file_ioctl+0x5f7/0xcb0 [ 180.353176][T11972] ? __rcu_read_unlock+0x4e/0x70 [ 180.353274][T11972] ? __rcu_read_unlock+0x4e/0x70 [ 180.353345][T11972] ? __pfx_lo_ioctl+0x10/0x10 [ 180.353408][T11972] ? __pfx_blkdev_ioctl+0x10/0x10 [ 180.353438][T11972] blkdev_ioctl+0x387/0x460 [ 180.353468][T11972] ? __pfx_blkdev_ioctl+0x10/0x10 [ 180.353504][T11972] __se_sys_ioctl+0xce/0x140 [ 180.353611][T11972] __x64_sys_ioctl+0x43/0x50 [ 180.353656][T11972] x64_sys_call+0x14b0/0x3000 [ 180.353727][T11972] do_syscall_64+0xc0/0x2a0 [ 180.353765][T11972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.353854][T11972] RIP: 0033:0x7ff655deaeb9 [ 180.353873][T11972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.353895][T11972] RSP: 002b:00007ff654847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.353917][T11972] RAX: ffffffffffffffda RBX: 00007ff656065fa0 RCX: 00007ff655deaeb9 [ 180.353931][T11972] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 180.353997][T11972] RBP: 00007ff654847090 R08: 0000000000000000 R09: 0000000000000000 [ 180.354010][T11972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.354022][T11972] R13: 00007ff656066038 R14: 00007ff656065fa0 R15: 00007ffdb412ffe8 [ 180.354046][T11972] [ 180.597649][T11974] FAULT_INJECTION: forcing a failure. [ 180.597649][T11974] name failslab, interval 1, probability 0, space 0, times 0 [ 180.610415][T11974] CPU: 1 UID: 0 PID: 11974 Comm: syz.1.2405 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.610501][T11974] Tainted: [W]=WARN [ 180.610509][T11974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.610522][T11974] Call Trace: [ 180.610529][T11974] [ 180.610537][T11974] __dump_stack+0x1d/0x30 [ 180.610563][T11974] dump_stack_lvl+0x95/0xd0 [ 180.610596][T11974] dump_stack+0x15/0x1b [ 180.610647][T11974] should_fail_ex+0x263/0x280 [ 180.610688][T11974] should_failslab+0x8c/0xb0 [ 180.610719][T11974] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 180.610807][T11974] ? __alloc_skb+0x2f0/0x4b0 [ 180.610848][T11974] __alloc_skb+0x2f0/0x4b0 [ 180.610921][T11974] ? __alloc_skb+0x219/0x4b0 [ 180.610964][T11974] netlink_alloc_large_skb+0xbf/0xf0 [ 180.611017][T11974] netlink_sendmsg+0x40c/0x6f0 [ 180.611045][T11974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.611070][T11974] ____sys_sendmsg+0x5af/0x600 [ 180.611099][T11974] ___sys_sendmsg+0x195/0x1e0 [ 180.611141][T11974] __x64_sys_sendmsg+0xd4/0x160 [ 180.611220][T11974] x64_sys_call+0x17ba/0x3000 [ 180.611253][T11974] do_syscall_64+0xc0/0x2a0 [ 180.611340][T11974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.611369][T11974] RIP: 0033:0x7fb4af05aeb9 [ 180.611390][T11974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.611413][T11974] RSP: 002b:00007fb4adab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.611438][T11974] RAX: ffffffffffffffda RBX: 00007fb4af2d5fa0 RCX: 00007fb4af05aeb9 [ 180.611465][T11974] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 180.611488][T11974] RBP: 00007fb4adab7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.611500][T11974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.611515][T11974] R13: 00007fb4af2d6038 R14: 00007fb4af2d5fa0 R15: 00007ffe5dc6c728 [ 180.611542][T11974] [ 180.860301][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2408'. [ 180.908896][T11985] FAULT_INJECTION: forcing a failure. [ 180.908896][T11985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.922017][T11985] CPU: 1 UID: 0 PID: 11985 Comm: syz.6.2410 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 180.922061][T11985] Tainted: [W]=WARN [ 180.922071][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 180.922088][T11985] Call Trace: [ 180.922094][T11985] [ 180.922102][T11985] __dump_stack+0x1d/0x30 [ 180.922129][T11985] dump_stack_lvl+0x95/0xd0 [ 180.922151][T11985] dump_stack+0x15/0x1b [ 180.922179][T11985] should_fail_ex+0x263/0x280 [ 180.922249][T11985] should_fail+0xb/0x20 [ 180.922329][T11985] should_fail_usercopy+0x1a/0x20 [ 180.922373][T11985] _copy_from_user+0x1c/0xb0 [ 180.922412][T11985] sctp_setsockopt+0x164/0xea0 [ 180.922437][T11985] sock_common_setsockopt+0x69/0x80 [ 180.922471][T11985] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.922525][T11985] __sys_setsockopt+0x184/0x200 [ 180.922567][T11985] __x64_sys_setsockopt+0x64/0x80 [ 180.922669][T11985] x64_sys_call+0x21d5/0x3000 [ 180.922706][T11985] do_syscall_64+0xc0/0x2a0 [ 180.922746][T11985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.922846][T11985] RIP: 0033:0x7ff655deaeb9 [ 180.922866][T11985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.922887][T11985] RSP: 002b:00007ff654847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 180.922912][T11985] RAX: ffffffffffffffda RBX: 00007ff656065fa0 RCX: 00007ff655deaeb9 [ 180.922931][T11985] RDX: 0000000000000018 RSI: 0000000000000084 RDI: 0000000000000003 [ 180.922961][T11985] RBP: 00007ff654847090 R08: 0000000000000008 R09: 0000000000000000 [ 180.922978][T11985] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 180.922994][T11985] R13: 00007ff656066038 R14: 00007ff656065fa0 R15: 00007ffdb412ffe8 [ 180.923019][T11985] [ 181.152614][T11982] can0 (unregistered): slcan off ttyS3. [ 181.211659][ T29] kauditd_printk_skb: 271 callbacks suppressed [ 181.211677][ T29] audit: type=1400 audit(1770386259.887:3426): avc: denied { setopt } for pid=12001 comm="syz.1.2415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.335224][ T29] audit: type=1326 audit(1770386260.017:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.359643][ T29] audit: type=1326 audit(1770386260.017:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.434737][ T29] audit: type=1326 audit(1770386260.017:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=469 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.459066][ T29] audit: type=1326 audit(1770386260.017:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.483417][ T29] audit: type=1326 audit(1770386260.017:3431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.507210][ T29] audit: type=1326 audit(1770386260.017:3432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.531765][ T29] audit: type=1326 audit(1770386260.017:3433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.556147][ T29] audit: type=1326 audit(1770386260.017:3434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.579851][ T29] audit: type=1326 audit(1770386260.017:3435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12019 comm="syz.9.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a118eaeb9 code=0x7ffc0000 [ 181.723282][T12051] set_capacity_and_notify: 2 callbacks suppressed [ 181.723302][T12051] loop6: detected capacity change from 0 to 512 [ 181.762190][T12051] EXT4-fs: Ignoring removed i_version option [ 181.768995][T12051] EXT4-fs: Ignoring removed bh option [ 181.805379][T12051] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.819902][T12051] ext4 filesystem being mounted at /395/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.852163][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.194669][T12090] FAULT_INJECTION: forcing a failure. [ 182.194669][T12090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.207824][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz.5.2428 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.207867][T12090] Tainted: [W]=WARN [ 182.207877][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.207895][T12090] Call Trace: [ 182.207903][T12090] [ 182.207984][T12090] __dump_stack+0x1d/0x30 [ 182.208078][T12090] dump_stack_lvl+0x95/0xd0 [ 182.208177][T12090] dump_stack+0x15/0x1b [ 182.208265][T12090] should_fail_ex+0x263/0x280 [ 182.208298][T12090] should_fail+0xb/0x20 [ 182.208328][T12090] should_fail_usercopy+0x1a/0x20 [ 182.208372][T12090] _copy_from_user+0x1c/0xb0 [ 182.208438][T12090] __copy_msghdr+0x244/0x300 [ 182.208492][T12090] ___sys_sendmsg+0x10c/0x1e0 [ 182.208545][T12090] __x64_sys_sendmsg+0xd4/0x160 [ 182.208577][T12090] x64_sys_call+0x17ba/0x3000 [ 182.208623][T12090] do_syscall_64+0xc0/0x2a0 [ 182.208679][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.208714][T12090] RIP: 0033:0x7fe593cfaeb9 [ 182.208731][T12090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.208749][T12090] RSP: 002b:00007fe59274f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.208775][T12090] RAX: ffffffffffffffda RBX: 00007fe593f75fa0 RCX: 00007fe593cfaeb9 [ 182.208794][T12090] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000007 [ 182.208811][T12090] RBP: 00007fe59274f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.208897][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.208913][T12090] R13: 00007fe593f76038 R14: 00007fe593f75fa0 R15: 00007ffd9ccd64e8 [ 182.209007][T12090] [ 182.383659][T12126] loop6: detected capacity change from 0 to 2048 [ 182.398178][T12131] ================================================================== [ 182.406295][T12131] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 182.414225][T12131] [ 182.416578][T12131] write to 0xffff88811a0a5900 of 8 bytes by task 12135 on cpu 0: [ 182.424325][T12131] cpu_map_kthread_run+0x4e7/0x1650 [ 182.429541][T12131] kthread+0x488/0x510 [ 182.433642][T12131] ret_from_fork+0x148/0x280 [ 182.438248][T12131] ret_from_fork_asm+0x1a/0x30 [ 182.443037][T12131] [ 182.445367][T12131] read to 0xffff88811a0a5900 of 8 bytes by task 12131 on cpu 1: [ 182.453010][T12131] bq_flush_to_queue+0x124/0x350 [ 182.457986][T12131] cpu_map_enqueue+0x1a5/0x1c0 [ 182.462768][T12131] xdp_do_redirect_frame+0x27b/0x560 [ 182.468083][T12131] bpf_test_run_xdp_live+0xac3/0x1360 [ 182.473488][T12131] bpf_prog_test_run_xdp+0x57b/0xa10 [ 182.478831][T12131] bpf_prog_test_run+0x204/0x340 [ 182.483795][T12131] __sys_bpf+0x4c0/0x7b0 [ 182.488063][T12131] __x64_sys_bpf+0x41/0x50 [ 182.492503][T12131] x64_sys_call+0x28e1/0x3000 [ 182.497211][T12131] do_syscall_64+0xc0/0x2a0 [ 182.501745][T12131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.507660][T12131] [ 182.509994][T12131] value changed: 0xffff8881033c2070 -> 0x0000000000000000 [ 182.517108][T12131] [ 182.519447][T12131] Reported by Kernel Concurrency Sanitizer on: [ 182.525615][T12131] CPU: 1 UID: 0 PID: 12131 Comm: syz.9.2431 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 182.537023][T12131] Tainted: [W]=WARN [ 182.540830][T12131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.550902][T12131] ================================================================== [ 182.603952][T12126] loop6: detected capacity change from 0 to 512 [ 182.610680][T12126] EXT4-fs: Ignoring removed orlov option [ 182.649014][T12126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.677039][T12126] EXT4-fs (loop6): orphan cleanup on readonly fs [ 182.688466][T12126] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2429: bg 0: block 248: padding at end of block bitmap is not set [ 182.703277][T12126] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2429: Failed to acquire dquot type 1 [ 182.715027][T12126] EXT4-fs (loop6): 1 truncate cleaned up [ 182.721325][T12144] loop1: detected capacity change from 0 to 512 [ 182.722169][T12126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.740205][T12144] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 182.744778][T12126] EXT4-fs: Ignoring removed orlov option [ 182.755423][T12126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 182.764078][T12126] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 182.784196][T12126] EXT4-fs error (device loop6): __ext4_remount:6789: comm syz.6.2429: Abort forced by user [ 182.801435][T12126] EXT4-fs (loop6): Remounting filesystem read-only [ 182.808051][T12126] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 182.817062][T12126] ext4 filesystem being remounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.864076][ T4742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.