last executing test programs: 6m20.879212735s ago: executing program 32 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="ab038a81b372"}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffff8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x24}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8090) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 5m30.722616743s ago: executing program 33 (id=1208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0xffc, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$isdn(0x22, 0x2, 0x10) r6 = socket$isdn(0x22, 0x2, 0x2) r7 = dup3(r6, r5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r9, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010001000000f60002000500", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0x0, @ANYBLOB="0400010000000000100007000000000020"], 0x34, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r2, 0x20, &(0x7f00000005c0)={&(0x7f00000007c0)=""/206, 0xce, 0x0, &(0x7f0000000540)=""/92, 0x5c}}, 0x10) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r12}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r11}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) sendmsg$nl_route(r13, 0x0, 0x40) quotactl_fd$Q_QUOTAON(r13, 0xffffffff80000202, 0x0, 0x0) recvmmsg(r13, 0x0, 0x0, 0x0, 0x0) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000200"/28], 0x50) r15 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$EVIOCGBITSW(r15, 0x80404525, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000980)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x20, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x0, 0x2, 0x1, 0x0, 0x1, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x24, &(0x7f0000000300)=""/36, 0x40f00, 0xc, '\x00', r8, 0x1b, r9, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x3, 0x2, 0x40, 0x5}, 0x10, r10, 0x0, 0x3, &(0x7f00000009c0)=[r12, r13, r14, r15, r16], &(0x7f0000000a00)=[{0x1, 0x1, 0x9, 0x2}, {0x2, 0x1, 0x0, 0xb}, {0x3, 0x1, 0x9, 0x8}], 0x10, 0x4771}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f00000000c0)="e3d786c430136eb0711d1e1b73df47d7d7581812742d3567ddaa51d1a101f3138e433c3aa347799eb3cb98215f1e55d30ad5dbba71d7c4185e8514bbf6aaecb280521832f58e8f8aba604b33b45d4f8f4203b5d23b7e2d72ea89fd28644e", &(0x7f0000000200)=@tcp6=r4, 0x2}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010081ffffff0000f8ff0000ff09000000010003000032dda4487eca6cc804ad1139bca1f20080000000000000140004800500"], 0x38}}, 0x0) 4m48.597356997s ago: executing program 34 (id=1514): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x8000, 0x8000, 0x400244}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0xc}) r4 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000001c0)={{0xff, 0xff}, 'port0\x00', 0x0, 0x0, 0x80, 0xe56e, 0xc17, 0x4, 0x80, 0x0, 0x4, 0x2}) r5 = eventfd2(0x5, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040)=r5, 0x1) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)=0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@nfc={0x27, r7, 0x1, 0x7}, 0x80, &(0x7f0000000140)=[{&(0x7f00000022c0)="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"}], 0x0, 0x0, 0x73277a8e48dd581d, 0x900}, 0x60) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xd0, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800, 0x0, 0x3}, 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000000411082abd7061b23057878a8b1519b58951eac586fbb4a00f6590f6dfd29e2ee9e21f7a5912055db61c879249aaefc7caba1ddbe0e1dce7afb6ac87c7a95e2ac0fef1d3fde0d635749059696c7a502b4c2c6f8d4865b35eac5f9b6e60bc01cbadc50be67fdb149142b85f2965272bd7c561cd20c51af31aadd57820e6d52128460fa7049a6a7625744df1cb2a48dd27f1781092cbb9975fa01c950151faafdcd62b4b99078c047bafe3f98191bd366325fa4dfa1b69df8dbae127a8931b451e5d7b7f2a69739dc60ffe0feb3fb5cf02eadab45bb68fb6add6bd10f30ff30072f56fec8d5e47924680f0e4"], 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x200000c0) 4m37.74060963s ago: executing program 7 (id=1594): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 4m37.553020516s ago: executing program 7 (id=1598): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002700170101000000fbdbdf2504"], 0x18}, 0x1, 0x0, 0x0, 0x24000005}, 0xc004) r1 = socket(0x400000000038, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x74, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {}, {0xffff, 0xffff}}, [@filter_kind_options=@f_bpf={{0x8}, {0xfffffffffffffee7, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0x6}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x9, 0xfff1}}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x9, 0x4, 0x1, 0x2}, {0xf, 0xf, 0x1, 0x1}, {0x4, 0x6, 0x1, 0xfffffff7}]}}, @TCA_BPF_NAME={0x0, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 4m37.536208822s ago: executing program 7 (id=1599): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) socket(0x80000000000000a, 0x2, 0x0) listen(0xffffffffffffffff, 0xd3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setns(r2, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xe0f02, 0x0) setns(0xffffffffffffffff, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x177) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000200)={0x4e, 0x4, 0x2, 0x5, 0x0, [@mcast1, @empty]}, 0x28) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x200000, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) getpeername$qrtr(r4, 0x0, &(0x7f0000000080)=0xa8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000002c0)=0x4, 0x4) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8cd62b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 4m37.440231675s ago: executing program 7 (id=1603): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001880)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0xffe0, 0x6}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x7, 0x6, 0x0, 0x1}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0x25) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000080)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x4, 0x0, 0x0, 'queue0\x00'}) getpid() ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r6, 0xc08c5336, &(0x7f00000001c0)={0x9de, 0xffff7fff, 0x1, 'queue1\x00', 0x6}) sendto$inet6(r2, 0x0, 0x1b, 0x24000891, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x400) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f0000000980)={{0x7, 0x1}, 'port1\x00', 0x1, 0x1, 0x200, 0xa, 0x0, 0xffff, 0xb456, 0x0, 0x2, 0x5}) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', r8, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000000280)={0x0, 0x0, 0xeb}) 4m37.36152878s ago: executing program 7 (id=1607): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x200, @mcast2, 0x7}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff8000000000000008000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01048100010f0008cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8800) r2 = socket$kcm(0x29, 0x5, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r3}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)}, 0x10) sendto$inet6(r0, &(0x7f0000000440)="7f", 0x48, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0xa, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x400}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x3800, 0x0, 0x1, 0x0, 0x6}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x24044092) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{0x59c4, 0x16, 0x2, 0x72}, {0x8, 0x7, 0x10}, {0xa, 0xa, 0x5, 0x1}, {0x5, 0x7, 0x4, 0xffff}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="534b0ac0", 0x4}], 0x1}}], 0x1, 0x4000000) 4m37.050353023s ago: executing program 7 (id=1616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000cc0)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000400)="83eb2d5dc0cd03b7edb12741e0ba29c1e21f16bc81bc534e18e7892391d55ad17cdd642f81079a2c7c6bfc352484f30d6ef9b35217617c022e5cde2b46e53cc29f824fd6e44c3d979a5faa9ce1b981fc628de65bc98b9774a950709def0adf3cd31cd3a641fa9aab46520eb5807ee26c9f5c861b562d61d4b642f695975822d75f7784151a03f02d405d38d01eca63e3b33a5530feb78fd5e883587365001a1f56833ede95cf18315f8c79728e178eb63f70e238fc7975f3c3223cd93d48279d87037ae0d1d38a542e74df88d09356fba32b808115dfd686af5bdcca", 0xdc}, {&(0x7f0000000840)="ffdba2142f2ffc97587de5fb4df4f36f58b7cb6d71379ffc4ac5dadd788d431a137af03a8270bf315d0b62962f094dedb03083f11a39d97f1e85649220eb236d19847bc81de60d02b57cb84081120c312e4b57586196adc3364f17a53a377b0cc76b27ebdaa546e5b27eb70bb1b3679403ea48c934adb15ab9abb47a381f24d1729d1c41d82b04d5b42adbe4c486", 0x8e}], 0x2) 4m37.007761945s ago: executing program 35 (id=1616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, 0x0, &(0x7f0000000cc0)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000400)="83eb2d5dc0cd03b7edb12741e0ba29c1e21f16bc81bc534e18e7892391d55ad17cdd642f81079a2c7c6bfc352484f30d6ef9b35217617c022e5cde2b46e53cc29f824fd6e44c3d979a5faa9ce1b981fc628de65bc98b9774a950709def0adf3cd31cd3a641fa9aab46520eb5807ee26c9f5c861b562d61d4b642f695975822d75f7784151a03f02d405d38d01eca63e3b33a5530feb78fd5e883587365001a1f56833ede95cf18315f8c79728e178eb63f70e238fc7975f3c3223cd93d48279d87037ae0d1d38a542e74df88d09356fba32b808115dfd686af5bdcca", 0xdc}, {&(0x7f0000000840)="ffdba2142f2ffc97587de5fb4df4f36f58b7cb6d71379ffc4ac5dadd788d431a137af03a8270bf315d0b62962f094dedb03083f11a39d97f1e85649220eb236d19847bc81de60d02b57cb84081120c312e4b57586196adc3364f17a53a377b0cc76b27ebdaa546e5b27eb70bb1b3679403ea48c934adb15ab9abb47a381f24d1729d1c41d82b04d5b42adbe4c486", 0x8e}], 0x2) 4m10.488795963s ago: executing program 3 (id=1832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="58010000100001000000000800000000ac1414bb0000000000000000000000000080ffffff0000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc32000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a0005009000000000000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017"], 0x158}}, 0x24000058) 4m10.435458743s ago: executing program 3 (id=1834): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1ff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000012400000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 4m9.417817755s ago: executing program 3 (id=1847): r0 = epoll_create(0x7) epoll_create1(0x0) epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)={0xa0000004}) 4m9.358931804s ago: executing program 3 (id=1848): timer_create(0x0, 0x0, &(0x7f0000000300)) (async) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x5, 0x3, 0x6361, 0x0, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r0, 0x1, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x10000, @empty, 0xffffffff}, {0xa, 0x1c, 0x2, @local, 0x9}, r4, 0xfffffffd}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) timer_settime(r0, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 4m8.439661314s ago: executing program 3 (id=1862): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2"], 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xf06f, 0x3180, 0x1, 0x283}, &(0x7f0000000300)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x63, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001e00010a00000000000000a42d"], 0x14}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) r7 = getpgid(0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r8 = syz_pidfd_open(r7, 0x0) r9 = pidfd_getfd(r8, r8, 0x0) setns(r9, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 4m7.307126444s ago: executing program 3 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003"], 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) listen(r2, 0x0) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, @local, 0x2000000, 0x0, 0x7d, 0x180, 0xfffffffffffffffe, 0x9b0318}) (async, rerun: 64) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, 0x10000006, 0x0, 0x1, 0x0, 0x9, 0x10280}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)='\"Y$', 0x3}], 0x1}, 0x4000000) unshare(0x60000600) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3m52.262204764s ago: executing program 36 (id=1868): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003"], 0x80}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) (async, rerun: 32) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 32) listen(r2, 0x0) (rerun: 32) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) (async, rerun: 32) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) close(0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, @local, 0x2000000, 0x0, 0x7d, 0x180, 0xfffffffffffffffe, 0x9b0318}) (async, rerun: 64) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @mcast1, 0x10000006, 0x0, 0x1, 0x0, 0x9, 0x10280}) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000400)='\"Y$', 0x3}], 0x1}, 0x4000000) unshare(0x60000600) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3m50.544756847s ago: executing program 8 (id=2024): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="ff7fff99a0901d25516e8f74fcaf7e4467ff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/28], 0x50) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x200100, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000005b69d0e068fa3922001e00150d2cbd7000fddbdf2507000000", @ANYRES32=0x0, @ANYBLOB="0200000000000000"], 0x20}}, 0x48010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x794, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdfffff, 0x2, @perf_config_ext={0xff, 0x30000000000}, 0x12132, 0x10000, 0xfffffffe, 0x3, 0x86, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)={0x14, 0x2, 0x3, 0x101}, 0x14}}, 0xc820) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0xdd}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 3m49.58928345s ago: executing program 8 (id=2030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fddbdf250f00000005002d000100000005002e0001000000080003003db6"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0xc, 0xc2}, {0x1}, {}, @time=@tick=0xd}], 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) mount_setattr(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8100, &(0x7f0000000300)={0x100006, 0x39, 0xa0000}, 0x20) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x80}, 0x3ff}, 0x1c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) unshare(0xc000400) mq_open(&(0x7f0000000040)='\xf7\x03\x85\xa5n\x02\x00\xfc\x00\x00', 0x842, 0x38b, 0x0) unshare(0x28000600) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x344}, &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) 3m48.559522119s ago: executing program 8 (id=2035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10001, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000f2ff110800014000000000140003"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xe0a, 0xdd5}, 0x100004, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x400, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0xc8884}, 0x440000c1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) readahead(0xffffffffffffffff, 0x3, 0xfffffffffffffff7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a", 0xd1}], 0x1}}], 0x1, 0x2090) sendto$inet(r3, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 3m47.604743893s ago: executing program 8 (id=2044): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800182, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303000000083ec4c0d6e84de0249d09f31ef580c3d000000000000000000"], 0x1, 0x191, &(0x7f00000002c0)="$eJzs3c+qElEcB/Cff5qkletoMdCmlVRPYIWCNBAULmpVYG00gtxMrXyL3qBX6XXClTsv3hHlyly4F64O1/l8Nn7xq5xzZjFnNWc+P/k+nfyYf/v77090Oo1o96Mfq0Z0oxmtKCwCADgnq/U6/q8LN/j56xNMCQA4slvu/wDAGbD/A0D92P8BoH4+fPz09lWWDd6naSdiucjH+bj4LPrhKBs8Ty919/9a5vm4tetfFH16tX8Qj7b9y9I+iWdPi37TvXmXHfQPY1I24X7jzq8BAAAAAAAAAAAAAAAAAAAAAACcWi/dKT3fp9dLrumLNBwl2+8Oz/dpx+N2yYDJUZYBAAAAAAAAAAAAAAAAAAAA99r81+/pl9ns609BEIRdqPrOBAAAAAAAAAAAAAAAAAAA9bN/6LfqmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAdfbv/z9e2IzTrHqhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU2kUAAAD//1z+TP8=") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81}) io_uring_enter(r3, 0x3516, 0x0, 0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000005c00), 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000300)='./file0\x00', 0x41) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r10, 0x1, 0x1, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x5050) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000200)={0x1c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80c0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@delneigh={0x78, 0x1d, 0x0, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x0, r6, 0x20, 0x0, 0x6}, [@NDA_MASTER={0x8, 0x9, 0x8001}, @NDA_FDB_EXT_ATTRS={0x3c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe2}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7f}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}]}, @NDA_VNI={0x8, 0x7, 0x41d}, @NDA_VLAN={0x6, 0x5, 0x3}, @NDA_MASTER={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 3m47.356228997s ago: executing program 8 (id=2047): syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0xff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r1 = syz_open_pts(r0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = dup3(r1, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1c6e, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x2, 0xd, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file1'}, 0xb) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x903d01) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) write$char_usb(r5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x57e, &(0x7f00000011c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x104) ioctl$EXT4_IOC_GROUP_ADD(r7, 0x40286608, &(0x7f0000000140)={0x9, 0x7e611d85, 0xc0c, 0xffffffffffff6d0a, 0xfffffffc, 0x2}) syz_read_part_table(0x1054, &(0x7f0000000000)="$eJzsz7GtwjAUhtE/Tl6e3NEwAkswBQ01BR1LQMMybMI+9EGO0mQBoDinsvxd6eqGr+rGXE59n6QmuWX6X+Vh6tpQS3+rUJNadknK5jp/jEt4npPX/OpLkn2SqVnyIfdtqUPS9pTj4wMnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDPewcAAP//hX0OGw==") syz_emit_ethernet(0x52, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp_prespec={0x44, 0x1c, 0xe, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@multicast2, 0x2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 3m47.131514775s ago: executing program 8 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) r1 = signalfd4(r0, &(0x7f0000000340)={[0x9]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e001c"], 0x74}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x174, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_FRAME_MATCH={0xda, 0x5b, "8510cfd86753775087d9783d5897734dd7759fa0a6aa1f050eeb5da0d5ec10af8493df7df0ce86f42305c0858ce5171c075f7e274d240e58ecd28858142194149c27e979bca2cc0f7ba5b76835b0fd77393dd0a99f2e9ad22ba26783b95db4eb5c95e21023ebc5088b945bddc2d03ca9d6cce38bd2b2f1034ca193f1ca1df98c6651ee3c20162bf7bebd6b78b2c464b55966b1c7616bdacf7e8c14d89e7822e42020917e1abee7d76e204641fd48e750a73a9b270ba2c38fa63794756550baf2181267f9cc6a5c0ac47a7f5912b7b11964ecab359a15"}, @NL80211_ATTR_FRAME_MATCH={0x6d, 0x5b, "5f736a87d51b79f9cab27a5d71d5f6cfcd15575f728ec6392dd6f8677ad84b809bb1fb0026ad42634a4d5434fb59fab8d718348b78ded232834c3cb96d9cb8a7452fb16e0d646a27a00c74ab60d9312698b6cca194dba8287457b3907480841eb04abf7052399ae4c8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904004acc02e549dbffff00020000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3m47.131209486s ago: executing program 37 (id=2049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) r1 = signalfd4(r0, &(0x7f0000000340)={[0x9]}, 0x8, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="28000e001c"], 0x74}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x174, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_FRAME_MATCH={0xda, 0x5b, "8510cfd86753775087d9783d5897734dd7759fa0a6aa1f050eeb5da0d5ec10af8493df7df0ce86f42305c0858ce5171c075f7e274d240e58ecd28858142194149c27e979bca2cc0f7ba5b76835b0fd77393dd0a99f2e9ad22ba26783b95db4eb5c95e21023ebc5088b945bddc2d03ca9d6cce38bd2b2f1034ca193f1ca1df98c6651ee3c20162bf7bebd6b78b2c464b55966b1c7616bdacf7e8c14d89e7822e42020917e1abee7d76e204641fd48e750a73a9b270ba2c38fa63794756550baf2181267f9cc6a5c0ac47a7f5912b7b11964ecab359a15"}, @NL80211_ATTR_FRAME_MATCH={0x6d, 0x5b, "5f736a87d51b79f9cab27a5d71d5f6cfcd15575f728ec6392dd6f8677ad84b809bb1fb0026ad42634a4d5434fb59fab8d718348b78ded232834c3cb96d9cb8a7452fb16e0d646a27a00c74ab60d9312698b6cca194dba8287457b3907480841eb04abf7052399ae4c8"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001000010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a8904004acc02e549dbffff00020000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m32.859856956s ago: executing program 4 (id=3219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101010000000000000000000000000000ecdf001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc000000000000000000020000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000084000000000000000000000000000000000000000000000100000000000000000000000000000000000000a0001002c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4c001400686d61632873686132353629"], 0x194}}, 0x4050) 1m32.811312078s ago: executing program 4 (id=3220): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) close(0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f00000009c0)=0x2, 0x4) setsockopt$SO_J1939_PROMISC(r3, 0x6b, 0x2, &(0x7f0000000900)=0x1, 0x4) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004"], 0xfe44, 0x0) r5 = syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r4, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf8, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25c8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x851}, 0x0) rt_tgsigqueueinfo(r5, r5, 0x33, &(0x7f0000000940)={0x25, 0xdfd, 0x6}) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, r6, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x414, r7, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15a8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "124508c0296032d58d0e0719df52f212a93d73d1d39f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "72030dd70e943402c5f74239226f81ab8a3fa2653cdc175901eb95603299095a1d0232847fc29f5759d155254f148619db2cf5ca6cd7beb337f81700da372ee89ad1c1b3e11e9ce48ea369455c8cea0b28bc48d8094a2655bf8e34b5502efa840266e1479638215c0f0f5d97bbb251cd6cfaa3b09be08a8cd93848f3e39a01503186c0e3b33775c73241848dd1bf4e2eeb893078d5966ebb71578b51453eafcdf1134a486c7f43ddcb508d831a1519a52ea14fde8e71b3141891e4a607c613fc50420560ea2cb09e23a56756b85d345f43eec320aa0aefdf80e885df80e63c256a"}]}, @TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "90958c8d13a81d8997fe307b58e9355cac825e6d2931a6759decef252346ba4d18a4eb"}}, @TIPC_NLA_NODE_ID={0xed, 0x3, "6abac2f0680bb456dc1a34c2a81bdec8f22993ef89914643c6df819589fc8a98503d0fb1a723d5b5c0e5a906145ba87b7c0e7a0b16dc03cebe36e95397fa4823b78ccc23f5213c33b9d8759a9fd0d15a59ac655599ce70234502ca6fb7f9eacfacf95fe7c2bbb5623f5c74380c44ca4a7df3c3a3e18445f18beea9f63bd8eaa6789234296f355e388054bc0416b438a0d564ffff737c6f9c3e5c20a03d511f880e55c3ad42d134842a434ac9fcd1f2580adbde58837700d53711671f77af39ac060ea31781281b864c8b8ad6bb63e07f5141fca488f4b2faa1d3bbb2da167b1f8f311ff8e5dd53f613"}, @TIPC_NLA_NODE_ID={0xef, 0x3, "281165b644b1ba19b0b1bb25221982a25a15c4d30b029211f18023075f86669788fbafc28219c93d8ae3ea224da1fb0df171309d64c329630fa17a48d9f9c916696c9e760f85d7fb179c0375501c232bf8d545308c01581ae541c244c1612c2f4be9aece064564a2e8bef97bdbd67ce72b5c4541c58832d8cb4048354fef7a9842297d4e8437d642ce3e6c523fa5e4037d81750ac37e18b22e8b5db05dd85974cf351bfc7a85fc1f6a603c9c950e61db8d606498b44fa276f49fa43e683675727b971db25b69f52301f025e6fb64dc5b7e314323d13b1e785106bed14ad3ae2401df489230e940774971d6"}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x480c0}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1m32.618014202s ago: executing program 4 (id=3222): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x4, 0x0, 0x4, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1}, 0x102260, 0x10000, 0x0, 0x0, 0x8, 0x20020005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffb}}], 0x18}}, {{&(0x7f0000001000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc31f79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)='\x00\x00', 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="14000000000000efffff030001000000ff0100000000000014000000000000000000000201000020a00100000000000010c523068000002c94e95d961cd07fd9bccddc82b79b3abc8f7447f6baec16a64d4917c865fa075c51ef774c1e6572f67c956d6c2c6e8a572cfe7e134d8563b76086293277f14305ca112797cc91fb0f143cce893a5bcf9f3e35cf8d8dded56e253b5eda89e51d8e0ea269c4c7a0d88e07d5f79331f9bd6d2cdba48abf6ceb8ed1a22f8844d997511ae8a3a4b110256855f27b2fbcabd8492beb3a8f4dde00"/220], 0x40}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x38}}], 0x3, 0x4004094) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc040090) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xe81, 0x20000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6d4, 0x6}, 0x106200, 0x483, 0x40, 0x3, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000c}, 0x0, 0xa, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) r2 = memfd_create(&(0x7f0000001180)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf10x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001400030532bd7000fddbdf25021f02ff", @ANYRES32=r2, @ANYBLOB="08000100ac1414bb23b983dd6dd043a59efba691290291c33d9433a1a637df0602370936ff5c65"], 0x20}, 0x1, 0x0, 0x0, 0x2000e081}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000008000000e47f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000500), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000340), &(0x7f0000000780)=""/172}, 0x20) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$P9_RLCREATE(r4, 0x0, 0x2d) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfc, 0x550, &(0x7f0000000340)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) fallocate(r5, 0x0, 0xfffffffffffffffe, 0x1000f2) unshare(0x24020400) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) write$tun(r6, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) 1m32.071676221s ago: executing program 4 (id=3227): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x40, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "55bcc91e218327ff45a77529803a7205d4d1b6f934273f4a559820c63fe7b92f78992b04bde3f12c"}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20040000) 1m29.771336326s ago: executing program 4 (id=3234): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7da3}}, 0x24) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000104626f6e640000000014000280050001000500000005001b0000000000"], 0x44}}, 0x0) 1m29.74482772s ago: executing program 38 (id=3234): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) r2 = socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x6, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x2, @perf_bp={0x0}, 0xc224, 0x2, 0xffffffff, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7da3}}, 0x24) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) (async) r12 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x5, 0x6, 0x6, 0x5, 0x400, 0x2, 0x1, 0xc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000104626f6e640000000014000280050001000500000005001b0000000000"], 0x44}}, 0x0) 49.924594479s ago: executing program 5 (id=3532): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1bf, &(0x7f0000000400)="$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") mkdir(&(0x7f00000022c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xb6) r0 = open$dir(&(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x141) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xbd83, 0x2, 0x1, 0x80000a8}, &(0x7f0000000000)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x22d2, 0x20, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES16=r0, @ANYRESDEC=r1], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c080) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000240)='./file0\x00') 49.799640116s ago: executing program 5 (id=3536): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 49.632963585s ago: executing program 5 (id=3537): unshare(0x60000600) sync() sync() sync() sync() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140001002abd7000fddbdf2502013208000000000000003d098e56a764b3de78246da77b60d98a654d6c5fd15cd9481cf953154802001e87439381e74401a0e300000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000100000063c4d0a7e8f34fcb8d0e6b341b50301f00eaeeeeb1ac5fba408712a1c89d200ae3b89e4fa62d966c6130b2c56a4f1358884aa60733deb5ea0cd57aaf1533ce64c83380bcb049a45f4b1be080bd5ba99d2b22b0e08565fb1fd4448e983a85eae99b4a75b14e34b20d89eb7065f53a096790f0bc6e47e1e08df01f377225ad54fb91a27b47eadbe59f2a0e3548fe9415ba71abbdc943aa918a872606b1b1"], 0x1c}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x1000}, {@multicast1, 0x7}]}]}}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c6881c40cfdee6431d2264be052ec50070fbd41945757460f5d14be4443b7249b3458b619aa17764f3875fd0d9370a6385620247eba1e5f3ad826c4ad6d9bdd9fa5d108c278180e981dbd5c72617740f28e940585f15312965f76a66797416e4a52c8e908128a05206578059dd951038bcfafcf4a6ee9619f42d15653532d832647f5e9f76f6993393f1f841297cfe41c36cf207184b3c4372ffef2d80976ec4cb7e6de62b19b6014337b0e23e8d4765ea8286cb0ec20546ff57010776a5af6376342d5f4"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xd24) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 48.047056022s ago: executing program 5 (id=3545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101010000000000000000000000000000ecdf001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc000000000000000000000010000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000084000000000000000000000000000000000000000000000100000000000000000000000000000000000000a0001002c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4c001400686d61632873686132353629"], 0x194}}, 0x4050) 47.999054054s ago: executing program 5 (id=3547): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 47.861161858s ago: executing program 5 (id=3552): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x7, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0xfff}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800c55021827818e2e92782973998bf3d01ffffffff000000b7000a600000ff00ff0600000000080008d5874205"], 0x24}}, 0x0) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 32.806574675s ago: executing program 39 (id=3552): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x7, 0x4, {0xa, 0x4e20, 0x1, @mcast1, 0xfff}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001800c55021827818e2e92782973998bf3d01ffffffff000000b7000a600000ff00ff0600000000080008d5874205"], 0x24}}, 0x0) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) 15.013587487s ago: executing program 6 (id=3687): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000004800010029bd7000fcdbdf250a001000", @ANYRES32=r3, @ANYBLOB="ff030000080002000c000000140001"], 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x44800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000bcf000/0x4000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f0000590000/0x1000)=nil, &(0x7f00007ff000/0x800000)=nil, &(0x7f00008c8000/0x2000)=nil, &(0x7f0000419000/0x2000)=nil, &(0x7f0000a36000/0x1000)=nil, &(0x7f00001cf000/0x3000)=nil, &(0x7f000067d000/0x3000)=nil, &(0x7f0000562000/0x2000)=nil, &(0x7f00003ca000/0x4000)=nil, &(0x7f00000002c0)="befb99b53f8ea0b811654b38fa3ccdde3b682d213d8be2125c4257e33b4c329e0f1460d8b5c5e672935f85e2e3ed50", 0x2f, r3}, 0x68) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x21}, 0x1}, 0x1c) sendmmsg(r2, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = open(&(0x7f0000000280)='.\x00', 0xc8180, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffd, '\x00', 0x0, r1, 0x0, 0x5, 0x5}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r6, 0x1, 0x4a, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6143, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r8, 0x2405, 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018130000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 14.119574451s ago: executing program 9 (id=3698): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) capset(0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) 14.119124091s ago: executing program 9 (id=3699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x4c, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10001, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a002800726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$evdev(&(0x7f00000001c0), 0x9, 0xa4000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xe0a, 0xdd5}, 0x100004, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x400, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0xc8884}, 0x440000c1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) readahead(0xffffffffffffffff, 0x3, 0xfffffffffffffff7) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='cpu>>0&&\t') sendmmsg$inet(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a", 0xd1}], 0x1}}], 0x1, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0xffffffffffffff68, 0x10008095, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0xffffffff, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a", 0x21}, {&(0x7f00000001c0)="621eedf270983653e7dae4", 0xb}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) 14.071569652s ago: executing program 6 (id=3700): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f000080a000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x80000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0xd1e, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x100a, 0x38f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@deltclass={0x78, 0x29, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x2, 0xfff3}, {0x6, 0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xfe, 0xd8}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb0}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xc0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0xc7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abdff070000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 11.882091458s ago: executing program 9 (id=3705): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) (async) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000000340)={0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/225, 0xe1, 0xcacc8681f2055ae1, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x19, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000003000000000000006800000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000011d9a008500000082000000b7080000000000007baaf8ff00000000b50800000e0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r5, 0x9) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x20, 0x6044}, 0x6) (async) r6 = openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x40, 0x1a0, 0x14}, 0x18) close_range(0xffffffffffffffff, r6, 0x2) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r7, 0x0, 0x0, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x40}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r8 = syz_io_uring_setup(0x10d3, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r11 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r11, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6708100000003aff00034000000000000000ffffac1414aaff020000000000000000000000000001"], 0x0) (async) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) io_uring_enter(r8, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x60009400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 6.674882946s ago: executing program 6 (id=3708): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0xdd}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xecdf, 0x0, 0x2200, 0xa, 0x0, 0x0, 0x73}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {0x7fffffff, 0x2}, {0x8, 0x400800, 0x0, 0x400}, {0x0, 0x1f, 0x2000}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050) 6.179848214s ago: executing program 9 (id=3712): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1ff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000030000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 6.152099379s ago: executing program 1 (id=3713): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x26}, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x100000001, 0x100}, 0x10205, 0x0, 0x43a1bd76, 0x0, 0x9, 0x40088, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r0, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x400, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "9340f2307faa6431"}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x62, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x21510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 5.94354657s ago: executing program 6 (id=3715): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, 0x0, 0x0, 0x1, 0x9b, 0x8, 0xc7c, 0x1000, 0xf, 0xa, 0xfff, r0, r0}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8002, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x40, 0x1, 0x8, 0x20005, 0x800b, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x100}, 0x41ba14c8ff52e7bf, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000013"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) recvmsg$unix(r5, &(0x7f0000000f00)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000c00)=""/224, 0xe0}], 0x1}, 0x1b96391a320db264) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0xda92b92eb38eb61c) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000001f) close_range(r10, 0xffffffffffffffff, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r1, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "55bcc91e218327ff45a77529803a7205d4d1b6f934273f4a559820c63fe7b92f78992b04bde3f12c"}, 0x38) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) 5.94296919s ago: executing program 2 (id=3716): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f000080a000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x80000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0xd1e, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x100a, 0x38f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@deltclass={0x78, 0x29, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x2, 0xfff3}, {0x6, 0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xfe, 0xd8}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb0}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xc0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0xc7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abdff070000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 1.950899781s ago: executing program 6 (id=3718): unshare(0x60000600) sync() sync() sync() sync() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140001002abd7000fddbdf2502013208000000000000003d098e56a764b3de78246da77b60d98a654d6c5fd15cd9481cf953154802001e87439381e74401a0e300000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000100000063c4d0a7e8f34fcb8d0e6b341b50301f00eaeeeeb1ac5fba408712a1c89d200ae3b89e4fa62d966c6130b2c56a4f1358884aa60733deb5ea0cd57aaf1533ce64c83380bcb049a45f4b1be080bd5ba99d2b22b0e08565fb1fd4448e983a85eae99b4a75b14e34b20d89eb7065f53a096790f0bc6e47e1e08df01f377225ad54fb91a27b47eadbe59f2a0e3548fe9415ba71abbdc943aa918a872606b1b1"], 0x1c}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x1000}, {@multicast1, 0x7}]}]}}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c6881c40cfdee6431d2264be052ec50070fbd41945757460f5d14be4443b7249b3458b619aa17764f3875fd0d9370a6385620247eba1e5f3ad826c4ad6d9bdd9fa5d108c278180e981dbd5c72617740f28e940585f15312965f76a66797416e4a52c8e908128a05206578059dd951038bcfafcf4a6ee9619f42d15653532d832647f5e9f76f6993393f1f841297cfe41c36cf207184b3c4372ffef2d80976ec4cb7e6de62b19b6014337b0e23e8d4765ea8286cb0ec20546ff57010776a5af6376342d5f4"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.949982991s ago: executing program 9 (id=3728): unshare(0x60000600) sync() sync() sync() sync() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140001002abd7000fddbdf2502013208000000000000003d098e56a764b3de78246da77b60d98a654d6c5fd15cd9481cf953154802001e87439381e74401a0e300000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000100000063c4d0a7e8f34fcb8d0e6b341b50301f00eaeeeeb1ac5fba408712a1c89d200ae3b89e4fa62d966c6130b2c56a4f1358884aa60733deb5ea0cd57aaf1533ce64c83380bcb049a45f4b1be080bd5ba99d2b22b0e08565fb1fd4448e983a85eae99b4a75b14e34b20d89eb7065f53a096790f0bc6e47e1e08df01f377225ad54fb91a27b47eadbe59f2a0e3548fe9415ba71abbdc943aa918a872606b1b1"], 0x1c}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x1000}, {@multicast1, 0x7}]}]}}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c6881c40cfdee6431d2264be052ec50070fbd41945757460f5d14be4443b7249b3458b619aa17764f3875fd0d9370a6385620247eba1e5f3ad826c4ad6d9bdd9fa5d108c278180e981dbd5c72617740f28e940585f15312965f76a66797416e4a52c8e908128a05206578059dd951038bcfafcf4a6ee9619f42d15653532d832647f5e9f76f6993393f1f841297cfe41c36cf207184b3c4372ffef2d80976ec4cb7e6de62b19b6014337b0e23e8d4765ea8286cb0ec20546ff57010776a5af6376342d5f4"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xd24) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.869343756s ago: executing program 2 (id=3719): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.761009466s ago: executing program 1 (id=3721): r0 = socket(0xa, 0x2400000001, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r1, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r3, r4, 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0x4, 0x0, &(0x7f0000000080)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1, 0x4}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 1.699304104s ago: executing program 0 (id=3722): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.663118928s ago: executing program 1 (id=3723): unshare(0x60000600) sync() sync() sync() sync() r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140001002abd7000fddbdf2502013208000000000000003d098e56a764b3de78246da77b60d98a654d6c5fd15cd9481cf953154802001e87439381e74401a0e300000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c00000002030104000000000000000000000000080001000100000063c4d0a7e8f34fcb8d0e6b341b50301f00eaeeeeb1ac5fba408712a1c89d200ae3b89e4fa62d966c6130b2c56a4f1358884aa60733deb5ea0cd57aaf1533ce64c83380bcb049a45f4b1be080bd5ba99d2b22b0e08565fb1fd4448e983a85eae99b4a75b14e34b20d89eb7065f53a096790f0bc6e47e1e08df01f377225ad54fb91a27b47eadbe59f2a0e3548fe9415ba71abbdc943aa918a872606b1b1"], 0x1c}}, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000180)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote, {[@timestamp_prespec={0x44, 0x24, 0x15, 0x3, 0xb, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@broadcast, 0x1000}, {@multicast1, 0x7}]}]}}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x2}}, 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c6881c40cfdee6431d2264be052ec50070fbd41945757460f5d14be4443b7249b3458b619aa17764f3875fd0d9370a6385620247eba1e5f3ad826c4ad6d9bdd9fa5d108c278180e981dbd5c72617740f28e940585f15312965f76a66797416e4a52c8e908128a05206578059dd951038bcfafcf4a6ee9619f42d15653532d832647f5e9f76f6993393f1f841297cfe41c36cf207184b3c4372ffef2d80976ec4cb7e6de62b19b6014337b0e23e8d4765ea8286cb0ec20546ff57010776a5af6376342d5f4"], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0xd24) sync() syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.56327656s ago: executing program 0 (id=3724): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001c000100feffffff000100fdff", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1.550976788s ago: executing program 0 (id=3725): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101010000000000000000000000000000ecdf001000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc000000000000000000000000010000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000084000000000000000000000000000000000000000000000100000000000000000000000000000000000000a0001002c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4c001400686d61632873686132353629"], 0x194}}, 0x4050) 1.523392802s ago: executing program 0 (id=3726): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0xdd}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0xecdf, 0x0, 0x2200, 0xa, 0x0, 0x0, 0x73}, {@in=@broadcast, 0x0, 0x32}, @in=@multicast1, {0x7fffffff, 0x2}, {0x8, 0x400800, 0x0, 0x400}, {0x0, 0x80ff, 0x2000}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0xc0}}]}, 0x184}}, 0x4050) 1.303255471s ago: executing program 0 (id=3727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) close(0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0}, './bus\x00'}) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000009c0)=0x2, 0x4) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000900)=0x1, 0x4) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r6 = syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r5) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf8, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x25c8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x851}, 0x0) rt_tgsigqueueinfo(r6, r6, 0x33, &(0x7f0000000940)={0x25, 0xdfd, 0x6}) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r5, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a40)={0x88, r7, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x4) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x414, r8, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x15a8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "124508c0296032d58d0e0719df52f212a93d73d1d39f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xe5, 0x3, "72030dd70e943402c5f74239226f81ab8a3fa2653cdc175901eb95603299095a1d0232847fc29f5759d155254f148619db2cf5ca6cd7beb337f81700da372ee89ad1c1b3e11e9ce48ea369455c8cea0b28bc48d8094a2655bf8e34b5502efa840266e1479638215c0f0f5d97bbb251cd6cfaa3b09be08a8cd93848f3e39a01503186c0e3b33775c73241848dd1bf4e2eeb893078d5966ebb71578b51453eafcdf1134a486c7f43ddcb508d831a1519a52ea14fde8e71b3141891e4a607c613fc50420560ea2cb09e23a56756b85d345f43eec320aa0aefdf80e885df80e63c256a"}]}, @TIPC_NLA_NODE={0x230, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "90958c8d13a81d8997fe307b58e9355cac825e6d2931a6759decef252346ba4d18a4eb"}}, @TIPC_NLA_NODE_ID={0xed, 0x3, "6abac2f0680bb456dc1a34c2a81bdec8f22993ef89914643c6df819589fc8a98503d0fb1a723d5b5c0e5a906145ba87b7c0e7a0b16dc03cebe36e95397fa4823b78ccc23f5213c33b9d8759a9fd0d15a59ac655599ce70234502ca6fb7f9eacfacf95fe7c2bbb5623f5c74380c44ca4a7df3c3a3e18445f18beea9f63bd8eaa6789234296f355e388054bc0416b438a0d564ffff737c6f9c3e5c20a03d511f880e55c3ad42d134842a434ac9fcd1f2580adbde58837700d53711671f77af39ac060ea31781281b864c8b8ad6bb63e07f5141fca488f4b2faa1d3bbb2da167b1f8f311ff8e5dd53f613"}, @TIPC_NLA_NODE_ID={0xef, 0x3, "281165b644b1ba19b0b1bb25221982a25a15c4d30b029211f18023075f86669788fbafc28219c93d8ae3ea224da1fb0df171309d64c329630fa17a48d9f9c916696c9e760f85d7fb179c0375501c232bf8d545308c01581ae541c244c1612c2f4be9aece064564a2e8bef97bdbd67ce72b5c4541c58832d8cb4048354fef7a9842297d4e8437d642ce3e6c523fa5e4037d81750ac37e18b22e8b5db05dd85974cf351bfc7a85fc1f6a603c9c950e61db8d606498b44fa276f49fa43e683675727b971db25b69f52301f025e6fb64dc5b7e314323d13b1e785106bed14ad3ae2401df489230e940774971d6"}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x480c0}, 0x80) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.29276778s ago: executing program 2 (id=3729): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="6ff567452d54cc0c26783778eec9dc8ded24919bcd401b7cb7d66df749685a31eccd51a5676180af5bb6ac61d689d1b0fb4da01beca89044cb52ac9cd4f5bba708238b199d08f9a306bd223383b8c13e6ee7a9bc027fc18dfb3d0dd481e590c3abe71645691a84ff0100"/117, 0x75}, {&(0x7f0000001380)="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", 0xe4c}], 0x2}}], 0x1, 0x44) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES8], 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x4) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x200000b, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES64, @ANYRES64=r1], 0x1, 0x257, &(0x7f00000000c0)="$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") ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.074844159s ago: executing program 2 (id=3730): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x1ff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000040000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 948.721846ms ago: executing program 9 (id=3731): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f000080a000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x80000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0xd1e, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x100a, 0x38f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@deltclass={0x78, 0x29, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x2, 0xfff3}, {0x6, 0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xfe, 0xd8}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb0}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xc0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0xc7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abdff070000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 928.770982ms ago: executing program 0 (id=3732): socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x26}, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x100000001, 0x100}, 0x10205, 0x0, 0x43a1bd76, 0x0, 0x9, 0x40088, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, r0, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x400, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x28) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x100}, @ETHTOOL_A_CHANNELS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5bebd250addb1b29", "0fe52ccf5ae523f0d36375dedff0d425", "5cccf758", "9340f2307faa6431"}, 0x28) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x62, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x21510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 919.393891ms ago: executing program 6 (id=3733): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x80, 0x5}, 0x0, 0x10000, 0x40, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121a, &(0x7f0000002800)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='blkio.bfq.dequeue\x00', 0x275a, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) write$selinux_load(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="8cff7cf9080000005345206e757855bcc96f218327ff45a77529803a7205d4d1b6f934273f4a559820c63fe7b92f78992b04bde3f12cdc29f2f63f1e2de1a3b731849676525bea496386b6dd0a9dc6968309b773253d2eb35969f87972c2"], 0x38) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) 450.486254ms ago: executing program 1 (id=3734): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000140), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) capset(0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) 178.418653ms ago: executing program 1 (id=3735): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000140)={0x3}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="40c469738961ea3c63eced8e46dc", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.809946ms ago: executing program 2 (id=3736): r0 = socket(0xa, 0x2400000001, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r1, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r3, r4, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1, 0x4}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000480)={0x3, {{0xa, 0x4, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 31.455126ms ago: executing program 1 (id=3737): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000100)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000001c0)=0x7f, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 2 (id=3738): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="f00000001c000100feffffff0001000000", @ANYRES32=0x0], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) kernel console output (not intermixed with test programs): utes in process `syz.5.3172'. [ 399.293560][ T28] audit: type=1326 audit(2000004355.021:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.350057][T15888] loop4: detected capacity change from 0 to 512 [ 399.417050][ T28] audit: type=1326 audit(2000004355.021:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.443318][T15888] EXT4-fs: Ignoring removed oldalloc option [ 399.476922][ T28] audit: type=1326 audit(2000004355.021:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.500618][ T28] audit: type=1326 audit(2000004355.021:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.524202][ T28] audit: type=1326 audit(2000004355.021:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.534033][T15340] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 399.570470][T15888] EXT4-fs (loop4): 1 truncate cleaned up [ 399.582648][T15888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.614688][ T28] audit: type=1326 audit(2000004355.041:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.681820][ T28] audit: type=1326 audit(2000004355.041:8077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.706622][ T28] audit: type=1326 audit(2000004355.041:8078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.748448][ T28] audit: type=1326 audit(2000004355.041:8079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15891 comm="syz.5.3172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 399.773478][T11453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.783806][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 399.829239][T15918] netlink: 'syz.5.3179': attribute type 4 has an invalid length. [ 399.862711][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3179'. [ 399.873661][T15918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3179'. [ 399.914447][T15918] bond0: left promiscuous mode [ 399.922296][T15918] bond_slave_0: left promiscuous mode [ 399.927837][T15918] bond_slave_1: left promiscuous mode [ 399.942452][T15918] bond0: left allmulticast mode [ 399.947352][T15918] bond_slave_0: left allmulticast mode [ 399.960795][T15925] netlink: 'syz.5.3179': attribute type 4 has an invalid length. [ 399.962370][T15918] bond_slave_1: left allmulticast mode [ 400.002298][T15925] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3179'. [ 400.740256][T15926] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.779254][T15925] .`: renamed from bond0 [ 401.051494][T15954] netlink: 656 bytes leftover after parsing attributes in process `syz.2.3189'. [ 401.225689][T15964] loop0: detected capacity change from 0 to 2048 [ 401.328048][ T3303] loop0: p4 < > [ 401.353785][T15964] loop0: p4 < > [ 401.379310][ T3001] loop0: p4 < > [ 401.533444][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 401.613458][T15983] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=12828 sclass=netlink_xfrm_socket pid=15983 comm=syz.0.3197 [ 401.634981][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 401.700226][T15985] loop4: detected capacity change from 0 to 512 [ 401.803146][T15989] SELinux: policydb version 516537429 does not match my version range 15-35 [ 401.811981][T15989] SELinux: failed to load policy [ 401.884174][T15985] EXT4-fs (loop4): 1 orphan inode deleted [ 401.884676][T15993] lo speed is unknown, defaulting to 1000 [ 401.890888][T15985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.896570][T15993] lo speed is unknown, defaulting to 1000 [ 402.028858][T15994] netlink: 'syz.9.3199': attribute type 13 has an invalid length. [ 402.095358][T15997] loop9: detected capacity change from 0 to 512 [ 402.117251][T11453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.130641][T15994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.226559][T15997] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.490473][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3208'. [ 402.923795][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.611308][T16041] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 404.004347][T16062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16062 comm=syz.4.3214 [ 404.949228][T16102] loop9: detected capacity change from 0 to 256 [ 404.991049][T16102] FAT-fs (loop9): Directory bread(block 64) failed [ 404.997761][T16102] FAT-fs (loop9): Directory bread(block 65) failed [ 405.005151][T16102] FAT-fs (loop9): Directory bread(block 66) failed [ 405.033244][T16102] FAT-fs (loop9): Directory bread(block 67) failed [ 405.052309][T16102] FAT-fs (loop9): Directory bread(block 68) failed [ 405.058878][T16102] FAT-fs (loop9): Directory bread(block 69) failed [ 405.088380][T16098] loop4: detected capacity change from 0 to 1024 [ 405.131905][T16102] FAT-fs (loop9): Directory bread(block 70) failed [ 405.164877][T16104] loop0: detected capacity change from 0 to 512 [ 405.194685][T16098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.222455][T16102] FAT-fs (loop9): Directory bread(block 71) failed [ 405.278926][T11453] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 405.307058][T16102] FAT-fs (loop9): Directory bread(block 72) failed [ 405.340088][T16102] FAT-fs (loop9): Directory bread(block 73) failed [ 405.640244][T11453] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 405.693999][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 405.738598][T11453] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 405.761981][T11453] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 405.781640][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 405.840976][T11453] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 406.068712][T11453] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 406.319160][T16122] 8021q: adding VLAN 0 to HW filter on device bond5 [ 406.376927][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 406.449618][T11453] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 406.632596][T11453] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 406.692418][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 406.732353][T11453] EXT4-fs error (device loop4): ext4_readdir:265: inode #11: block 32: comm syz-executor: path /214/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 406.802362][T11453] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 406.862387][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 406.902838][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 406.962876][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 407.022999][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 407.062840][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 407.095561][T11453] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 407.252649][T16136] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3233'. [ 407.291479][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3233'. [ 407.372602][ T3543] Bluetooth: hci0: sending frame failed (-49) [ 407.378804][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 407.536677][ T7039] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.548046][T11453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.616526][ T7039] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.686040][ T7039] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.783494][ T7039] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.932075][T16141] lo speed is unknown, defaulting to 1000 [ 407.973472][T16141] lo speed is unknown, defaulting to 1000 [ 407.989700][ T7039] bridge_slave_1: left allmulticast mode [ 408.002879][ T7039] bridge_slave_1: left promiscuous mode [ 408.008624][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.036911][ T7039] bridge_slave_0: left allmulticast mode [ 408.042681][ T7039] bridge_slave_0: left promiscuous mode [ 408.062501][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.337475][T16183] 9pnet_fd: Insufficient options for proto=fd [ 408.344305][T16167] netlink: 'syz.2.3238': attribute type 13 has an invalid length. [ 408.417031][T16170] loop2: detected capacity change from 0 to 512 [ 408.453915][T16170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.483633][ T7039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.506121][ T7039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.524524][ T7039] bond0 (unregistering): Released all slaves [ 408.588628][T16167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.614696][T16165] lo speed is unknown, defaulting to 1000 [ 408.669381][T16165] lo speed is unknown, defaulting to 1000 [ 408.833410][ T7039] hsr_slave_0: left promiscuous mode [ 408.839207][ T7039] hsr_slave_1: left promiscuous mode [ 408.846186][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.853712][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.893309][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.971714][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.016323][ T7039] veth1_macvtap: left promiscuous mode [ 409.021934][ T7039] veth0_macvtap: left promiscuous mode [ 409.105626][ T7039] veth1_vlan: left promiscuous mode [ 409.154721][ T7039] veth0_vlan: left promiscuous mode [ 409.683143][ T7039] team0 (unregistering): Port device team_slave_1 removed [ 409.751366][ T7039] team0 (unregistering): Port device team_slave_0 removed [ 409.873412][ T8925] smc: removing ib device syz0 [ 409.883919][T16209] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 409.888206][ T3422] lo speed is unknown, defaulting to 1000 [ 409.955347][ T3422] syz0: Port: 1 Link DOWN [ 409.990034][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.001036][T16141] chnl_net:caif_netlink_parms(): no params data found [ 410.428898][T16141] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.466437][T16141] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.506443][T16141] bridge_slave_0: entered allmulticast mode [ 410.584146][T16141] bridge_slave_0: entered promiscuous mode [ 410.609405][T16141] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.625750][T16246] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3248'. [ 410.627051][T16141] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.670462][T16246] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3248'. [ 410.682434][T16141] bridge_slave_1: entered allmulticast mode [ 410.696553][T16141] bridge_slave_1: entered promiscuous mode [ 410.703802][ T8925] Bluetooth: hci0: Frame reassembly failed (-84) [ 410.755363][T16141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.794639][T16141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.874926][T16141] team0: Port device team_slave_0 added [ 410.875339][ T7039] IPVS: stop unused estimator thread 0... [ 410.902027][T16141] team0: Port device team_slave_1 added [ 410.962024][T16141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.971974][T16141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.052342][T16141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.053573][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 411.053606][ T28] audit: type=1326 audit(2000004366.781:8083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.084608][T16141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.100476][T16141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.151390][ T28] audit: type=1326 audit(2000004366.821:8084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.177354][ T28] audit: type=1326 audit(2000004366.800:8085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.201564][T16141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.204565][ T28] audit: type=1326 audit(2000004366.800:8086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.260723][T16271] netlink: 156 bytes leftover after parsing attributes in process `syz.9.3254'. [ 411.291890][T16275] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3253'. [ 411.299744][ T28] audit: type=1400 audit(2000004366.800:8087): avc: denied { module_load } for pid=16264 comm="syz.2.3251" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=50579 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1 [ 411.329031][ T28] audit: type=1326 audit(2000004366.800:8088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.330547][T16141] hsr_slave_0: entered promiscuous mode [ 411.359173][ T28] audit: type=1326 audit(2000004366.800:8089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.403159][ T28] audit: type=1326 audit(2000004366.800:8090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.425574][T16141] hsr_slave_1: entered promiscuous mode [ 411.428159][ T28] audit: type=1326 audit(2000004366.800:8091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.486075][ T28] audit: type=1326 audit(2000004366.800:8092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16264 comm="syz.2.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd820a6c799 code=0x7ffc0000 [ 411.649786][T16285] lo speed is unknown, defaulting to 1000 [ 411.678301][T16288] netlink: 'syz.2.3256': attribute type 13 has an invalid length. [ 411.838059][T16288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.200667][T16300] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.273600][T16292] loop2: detected capacity change from 0 to 512 [ 412.336037][T16292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.762298][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 412.762338][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 412.809970][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.533445][T16141] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 413.564366][T16141] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 413.613773][T16141] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 413.671774][T16141] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 413.693966][T16355] 9p: Unknown Cache mode or invalid value l [ 413.743600][T16359] SELinux: failed to load policy [ 413.832680][T16355] netlink: 656 bytes leftover after parsing attributes in process `syz.9.3264'. [ 413.934519][T16141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.958292][T16141] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.969064][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.976243][ T7039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.020528][T16141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 414.048198][T16141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.078230][T16391] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3269'. [ 414.090127][T16391] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3269'. [ 414.171267][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.178600][ T7039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.486868][T16408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.628331][T16141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.159744][T16435] SELinux: failed to load policy [ 415.165269][T16438] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3276'. [ 415.190505][T16141] veth0_vlan: entered promiscuous mode [ 415.215940][T16141] veth1_vlan: entered promiscuous mode [ 415.297756][T16141] veth0_macvtap: entered promiscuous mode [ 415.323858][T16141] veth1_macvtap: entered promiscuous mode [ 415.362621][T16456] netlink: 656 bytes leftover after parsing attributes in process `syz.0.3278'. [ 415.374935][T16141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.391210][T16141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.403760][ T7036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.436099][ T7036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.487907][ T7036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.517828][ T7036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.659419][T16468] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 415.700320][T16468] batman_adv: batadv0: Adding interface: ip6gretap1 [ 415.723079][T16468] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.806924][T16468] batman_adv: batadv0: Interface activated: ip6gretap1 [ 416.028970][T16497] SELinux: failed to load policy [ 416.122811][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 416.241062][T16528] x_tables: duplicate underflow at hook 2 [ 416.800749][T16557] 8021q: adding VLAN 0 to HW filter on device bond6 [ 417.123350][T16565] loop2: detected capacity change from 0 to 512 [ 417.140734][T16562] lo speed is unknown, defaulting to 1000 [ 417.209976][T16565] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 417.307402][T16565] EXT4-fs (loop2): orphan cleanup on readonly fs [ 417.357030][T16565] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.3301: Block bitmap for bg 0 marked uninitialized [ 417.424470][T16565] loop2: lost filesystem error report for type 5 error -117 [ 417.424629][T16565] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 417.440702][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 417.440752][ C0] EXT4-fs (loop2): initial error at time 2000004373: ext4_read_block_bitmap_nowait:517 [ 417.440778][ C0] EXT4-fs (loop2): last error at time 2000004373: ext4_read_block_bitmap_nowait:517 [ 417.467341][T16574] SELinux: policydb version 516537429 does not match my version range 15-35 [ 417.501794][T16574] SELinux: failed to load policy [ 417.542334][T16581] netlink: 724 bytes leftover after parsing attributes in process `syz.5.3304'. [ 417.694421][T16565] loop2: lost filesystem error report for type 5 error -117 [ 417.694715][T16565] EXT4-fs (loop2): 1 orphan inode deleted [ 417.763728][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3305'. [ 417.793375][T16565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 417.865181][T16595] syz_tun: entered promiscuous mode [ 417.870496][T16595] macvtap1: entered allmulticast mode [ 417.879642][T16565] ext4: Unknown parameter '00000000000000000000' [ 417.918820][T16595] syz_tun: entered allmulticast mode [ 418.003710][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.103373][T16610] lo speed is unknown, defaulting to 1000 [ 418.315408][T16610] netlink: 'syz.9.3309': attribute type 13 has an invalid length. [ 418.340470][T16610] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 418.400346][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3313'. [ 418.409898][T16634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3313'. [ 418.442431][ T8923] Bluetooth: hci0: Frame reassembly failed (-84) [ 418.464325][T16610] loop9: detected capacity change from 0 to 512 [ 418.498997][T16610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.577189][T16646] SELinux: failed to load policy [ 418.594015][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.497740][T16688] loop9: detected capacity change from 0 to 512 [ 420.036707][T16696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.572281][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 420.578369][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 420.602836][T16703] netlink: 724 bytes leftover after parsing attributes in process `syz.1.3325'. [ 420.729320][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 420.729337][ T28] audit: type=1326 audit(2000004376.420:8113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16704 comm="syz.9.3326" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2649c4c799 code=0x0 [ 420.848300][T16711] SELinux: failed to load policy [ 420.976520][T16715] loop1: detected capacity change from 0 to 1024 [ 421.006371][T16715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 421.042448][T16715] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.948750][T16758] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3341'. [ 421.967688][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3341'. [ 421.993016][ T8923] Bluetooth: hci0: Frame reassembly failed (-84) [ 422.022383][ T8923] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm kworker/u8:20: lblock 0 mapped to illegal pblock 0 (length 6) [ 422.043172][ T8923] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 422.057316][ T8923] EXT4-fs (loop1): This should not happen!! Data will be lost [ 422.057316][ T8923] [ 422.079141][ T8923] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:20: lblock 8 mapped to illegal pblock 8 (length 8) [ 422.094307][ T8923] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 422.107969][ T8923] EXT4-fs (loop1): This should not happen!! Data will be lost [ 422.107969][ T8923] [ 422.304525][T16761] SELinux: ebitmap: truncated map [ 422.309841][T16761] SELinux: failed to load policy [ 422.419048][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 422.567792][T16768] infiniband syz1: set active [ 422.578284][T16768] infiniband syz1: added syz_tun [ 422.610014][T16768] RDS/IB: syz1: added [ 422.622080][T16768] smc: adding ib device syz1 with port count 1 [ 422.634903][T16768] smc: ib device syz1 port 1 has no pnetid [ 423.127407][T16817] loop2: detected capacity change from 0 to 1024 [ 423.181486][T16817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 423.202646][T16817] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.227584][T16817] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3353: bg 0: block 112: padding at end of block bitmap is not set [ 423.296055][T16817] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.3353: lblock 0 mapped to illegal pblock 0 (length 1) [ 423.324598][T16823] SELinux: policydb version 516537429 does not match my version range 15-35 [ 423.347775][T16823] SELinux: failed to load policy [ 423.357903][T16817] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.3353: lblock 0 mapped to illegal pblock 0 (length 1) [ 423.400928][T16817] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.3353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 423.438563][T16826] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.3353: lblock 0 mapped to illegal pblock 0 (length 1) [ 423.476316][T16826] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.3353: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 423.498721][T16828] netlink: 656 bytes leftover after parsing attributes in process `syz.1.3356'. [ 423.528166][T16817] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.3353: lblock 0 mapped to illegal pblock 0 (length 1) [ 423.553670][T16830] loop1: detected capacity change from 0 to 512 [ 423.562665][T16830] EXT4-fs: Ignoring removed nobh option [ 423.568291][T16830] EXT4-fs: Ignoring removed bh option [ 423.581738][T16830] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 423.592901][T16830] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3357: invalid indirect mapped block 256 (level 1) [ 423.619635][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 423.655468][T16830] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 423.655690][T16830] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3357: invalid indirect mapped block 2683928664 (level 1) [ 423.664997][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 423.665034][ C0] EXT4-fs (loop1): initial error at time 2000004379: ext4_free_branches:1023: inode 13 [ 423.665073][ C0] EXT4-fs (loop1): last error at time 2000004379: ext4_free_branches:1023: inode 13 [ 423.727863][T16830] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 423.728454][T16830] EXT4-fs (loop1): 1 truncate cleaned up [ 423.743903][T16833] loop2: detected capacity change from 0 to 164 [ 423.745966][T16833] iso9660: Bad value for 'check' [ 423.758886][ T28] audit: type=1400 audit(2000004379.430:8114): avc: denied { listen } for pid=16832 comm="syz.2.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 423.780401][T16830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.805818][ T28] audit: type=1400 audit(2000004379.500:8115): avc: denied { write } for pid=16829 comm="syz.1.3357" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 423.849884][T16830] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 423.892212][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.032275][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 424.038398][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 424.133555][T16842] netlink: 'syz.1.3362': attribute type 4 has an invalid length. [ 424.150519][T16842] netlink: 'syz.1.3362': attribute type 4 has an invalid length. [ 424.322718][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.330165][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.410581][T16850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.424930][T16850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.498660][T16850] syz_tun: left allmulticast mode [ 424.513295][ T8923] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.526781][ T8923] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.552755][ T8923] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.630118][ T8923] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.657456][T16872] loop2: detected capacity change from 0 to 1024 [ 424.664159][T16875] netlink: 656 bytes leftover after parsing attributes in process `syz.5.3370'. [ 424.678788][T16871] loop0: detected capacity change from 0 to 128 [ 424.704004][T16872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 424.728412][T16884] SELinux: policydb version 516537429 does not match my version range 15-35 [ 424.770673][T16872] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.794200][T16884] SELinux: failed to load policy [ 424.811221][T16872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3369: bg 0: block 112: padding at end of block bitmap is not set [ 424.886282][T16899] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.3369: Freeing blocks not in datazone - block = 0, count = 16 [ 424.983358][ T7043] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 425.013790][ T7043] EXT4-fs (loop2): This should not happen!! Data will be lost [ 425.013790][ T7043] [ 425.035452][ T7043] EXT4-fs (loop2): Total free blocks count 0 [ 425.051298][ T7043] EXT4-fs (loop2): Free/Dirty block details [ 425.079787][ T7043] EXT4-fs (loop2): free_blocks=16 [ 425.098513][ T7043] EXT4-fs (loop2): dirty_blocks=16 [ 425.113418][ T7043] EXT4-fs (loop2): Block reservation details [ 425.126042][ T7043] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 425.143112][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 425.236808][T16939] loop7: detected capacity change from 0 to 16384 [ 425.292323][T16939] loop7: detected capacity change from 16384 to 0 [ 425.314006][T16939] netlink: 'syz.5.3380': attribute type 6 has an invalid length. [ 425.400827][T16953] loop0: detected capacity change from 0 to 128 [ 425.565476][T16959] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 425.626599][T16962] SELinux: policydb version 516537429 does not match my version range 15-35 [ 425.644447][T16959] dummy0: entered allmulticast mode [ 425.664185][T16962] SELinux: failed to load policy [ 426.008837][T16972] lo speed is unknown, defaulting to 1000 [ 426.178987][T16988] lo speed is unknown, defaulting to 1000 [ 426.332870][T16992] netlink: 'syz.0.3396': attribute type 13 has an invalid length. [ 426.356281][T17000] SELinux: policydb version 516537429 does not match my version range 15-35 [ 426.384051][T17000] SELinux: failed to load policy [ 426.408990][T16998] loop0: detected capacity change from 0 to 512 [ 426.430241][ T28] audit: type=1400 audit(2000004382.120:8116): avc: denied { create } for pid=17004 comm="syz.9.3401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 426.490845][T16998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 427.327034][T17022] loop9: detected capacity change from 0 to 1024 [ 427.358677][T17022] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.428577][ T28] audit: type=1400 audit(2000004383.120:8117): avc: denied { bind } for pid=17025 comm="syz.1.3405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 427.506771][T16992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.532324][ T28] audit: type=1400 audit(2000004383.170:8118): avc: denied { lock } for pid=17025 comm="syz.1.3405" path="socket:[52506]" dev="sockfs" ino=52506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 427.579026][ T28] audit: type=1400 audit(2000004383.190:8119): avc: denied { nlmsg_read } for pid=17033 comm="syz.2.3407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 427.730001][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.920651][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.988640][T17054] SELinux: policydb version 516537429 does not match my version range 15-35 [ 427.990742][T17056] loop0: detected capacity change from 0 to 1024 [ 428.018094][T17054] SELinux: failed to load policy [ 428.034269][T17056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 428.068118][T17056] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 428.094397][T17056] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3414: bg 0: block 112: padding at end of block bitmap is not set [ 428.132574][T17056] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.3414: lblock 0 mapped to illegal pblock 0 (length 1) [ 428.220619][T17056] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3414: lblock 0 mapped to illegal pblock 0 (length 1) [ 428.254786][T17056] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.3414: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 428.317271][T17062] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3414: lblock 0 mapped to illegal pblock 0 (length 1) [ 428.345104][T17061] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3414: lblock 0 mapped to illegal pblock 0 (length 1) [ 428.365927][T17061] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.3414: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 428.609870][T17045] syz.9.3410 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 428.621339][T17045] CPU: 1 UID: 0 PID: 17045 Comm: syz.9.3410 Tainted: G W syzkaller #0 PREEMPT(full) [ 428.621378][T17045] Tainted: [W]=WARN [ 428.621387][T17045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 428.621404][T17045] Call Trace: [ 428.621430][T17045] [ 428.621439][T17045] __dump_stack+0x1d/0x30 [ 428.621466][T17045] dump_stack_lvl+0x95/0xd0 [ 428.621490][T17045] dump_stack+0x15/0x1b [ 428.621512][T17045] dump_header+0x80/0x240 [ 428.621542][T17045] oom_kill_process+0x295/0x350 [ 428.621639][T17045] out_of_memory+0x97d/0xb80 [ 428.621661][T17045] try_charge_memcg+0x62e/0xa10 [ 428.621709][T17045] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 428.621755][T17045] __swap_cache_prepare_and_add+0x386/0x530 [ 428.621861][T17045] swap_cache_alloc_folio+0xa2/0x120 [ 428.621980][T17045] swap_cluster_readahead+0x26e/0x3d0 [ 428.622027][T17045] swapin_readahead+0xde/0x840 [ 428.622170][T17045] ? _raw_spin_unlock+0x9/0x30 [ 428.622202][T17045] ? swap_put_entries_cluster+0x385/0x3a0 [ 428.622318][T17045] ? swap_put_entries_cluster+0x111/0x3a0 [ 428.622351][T17045] ? __rcu_read_unlock+0x4e/0x70 [ 428.622375][T17045] ? swap_cache_get_folio+0x26f/0x280 [ 428.622490][T17045] do_swap_page+0x30d/0x2220 [ 428.622527][T17045] ? css_rstat_updated+0xbb/0x280 [ 428.622553][T17045] ? __rcu_read_lock+0x36/0x50 [ 428.622605][T17045] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 428.622696][T17045] handle_mm_fault+0xb46/0x3020 [ 428.622767][T17045] ? vma_start_read+0x1c7/0x2c0 [ 428.622796][T17045] do_user_addr_fault+0x62f/0x1050 [ 428.622835][T17045] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 428.622908][T17045] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 428.622932][T17045] ? trace_page_fault_user+0x1f/0xe0 [ 428.623013][T17045] exc_page_fault+0x62/0xa0 [ 428.623056][T17045] asm_exc_page_fault+0x26/0x30 [ 428.623076][T17045] RIP: 0033:0x7f2649c0cfa0 [ 428.623093][T17045] Code: 6f 46 50 0f 29 44 24 50 f3 0f 6f 46 60 0f 29 44 24 60 f3 0f 6f 46 70 0f 29 44 24 70 e9 5d ff ff ff e8 04 1d 04 00 0f 1f 40 00 <8b> 07 f6 07 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 [ 428.623151][T17045] RSP: 002b:00007ffe283d3e18 EFLAGS: 00010246 [ 428.623170][T17045] RAX: 0000000000000000 RBX: 00005555778d4500 RCX: 0000000000000000 [ 428.623182][T17045] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: 00005555778d4808 [ 428.623264][T17045] RBP: 00007f2649ec7da0 R08: 00007ffe283d3e70 R09: 0000000000000000 [ 428.623277][T17045] R10: 0000000000000000 R11: 00005555778d4808 R12: 0000000000068a2d [ 428.623290][T17045] R13: 00007f2649ec5fac R14: 000000000006872a R15: 00007ffe283d3fa0 [ 428.623311][T17045] [ 428.882978][T17045] memory: usage 307200kB, limit 307200kB, failcnt 2005 [ 428.890996][T17045] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 428.906614][T17045] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 428.923626][T17045] Memory cgroup stats for /syz9: [ 428.923894][T17045] cache 0 [ 428.942011][T17045] rss 0 [ 428.952098][T17045] shmem 0 [ 428.957587][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 428.966626][T17045] mapped_file 0 [ 428.971907][T17045] dirty 0 [ 428.982260][T17045] writeback 4096 [ 428.985909][T17045] workingset_refault_anon 823 [ 428.990617][T17045] workingset_refault_file 67 [ 429.005749][T17045] swap 188416 [ 429.031949][T17045] swapcached 7847936 [ 429.038137][T17045] pgpgin 138391 [ 429.041634][T17045] pgpgout 138388 [ 429.055076][T17045] pgfault 121310 [ 429.058703][T17045] pgmajfault 194 [ 429.068806][T17045] inactive_anon 4096 [ 429.072967][T17045] active_anon 4096 [ 429.076710][T17045] inactive_file 0 [ 429.089944][T17045] active_file 4096 [ 429.111393][T17045] unevictable 0 [ 429.119498][T17078] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3421'. [ 429.132054][T17045] hierarchical_memory_limit 314572800 [ 429.142875][T17045] hierarchical_memsw_limit 9223372036854771712 [ 429.157991][T17045] total_cache 0 [ 429.168175][T17045] total_rss 0 [ 429.177124][T17045] total_shmem 0 [ 429.191988][T17045] total_mapped_file 0 [ 429.198335][T17045] total_dirty 0 [ 429.204727][T17045] total_writeback 4096 [ 429.235990][T17045] total_workingset_refault_anon 823 [ 429.245700][T17045] total_workingset_refault_file 67 [ 429.257524][T17045] total_swap 188416 [ 429.264359][T17045] total_swapcached 7847936 [ 429.275805][T17045] total_pgpgin 138391 [ 429.285830][T17045] total_pgpgout 138388 [ 429.301177][T17045] total_pgfault 121310 [ 429.308066][T17045] total_pgmajfault 194 [ 429.315466][T17045] total_inactive_anon 4096 [ 429.319978][T17045] total_active_anon 4096 [ 429.334674][T17045] total_inactive_file 0 [ 429.342165][T17091] lo speed is unknown, defaulting to 1000 [ 429.348090][T17045] total_active_file 4096 [ 429.362254][T17045] total_unevictable 0 [ 429.366330][T17045] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.3410,pid=17045,uid=0 [ 429.412239][T17045] Memory cgroup out of memory: Killed process 17045 (syz.9.3410) total-vm:94032kB, anon-rss:1224kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 429.546923][T17094] netlink: 'syz.0.3425': attribute type 13 has an invalid length. [ 429.635519][T17094] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.729204][T17091] loop0: detected capacity change from 0 to 512 [ 429.794754][T17091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.914423][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.940398][T17083] loop1: detected capacity change from 0 to 65536 [ 429.959371][T17083] msdos: Unknown parameter '!&†@»´‡ÝÁ[1XÖJ½¯°$—Î>€Ýà¸ð !éî÷9{Ú«Çu' [ 430.249157][T17118] netlink: 220 bytes leftover after parsing attributes in process `syz.5.3433'. [ 430.473645][T17121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.482301][T17121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.635651][T17146] lo speed is unknown, defaulting to 1000 [ 430.725199][T17149] netlink: 'syz.2.3438': attribute type 13 has an invalid length. [ 430.784527][T17149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 430.804672][T17151] loop2: detected capacity change from 0 to 512 [ 430.843820][T17151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.947537][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.287979][T17133] syz.0.3437 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 431.373566][T17133] CPU: 0 UID: 0 PID: 17133 Comm: syz.0.3437 Tainted: G W syzkaller #0 PREEMPT(full) [ 431.373608][T17133] Tainted: [W]=WARN [ 431.373615][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.373670][T17133] Call Trace: [ 431.373677][T17133] [ 431.373685][T17133] __dump_stack+0x1d/0x30 [ 431.373712][T17133] dump_stack_lvl+0x95/0xd0 [ 431.373744][T17133] dump_stack+0x15/0x1b [ 431.373777][T17133] dump_header+0x80/0x240 [ 431.373870][T17133] oom_kill_process+0x295/0x350 [ 431.373895][T17133] out_of_memory+0x97d/0xb80 [ 431.373918][T17133] try_charge_memcg+0x62e/0xa10 [ 431.373962][T17133] obj_cgroup_charge_pages+0x23/0xc0 [ 431.374147][T17133] __memcg_kmem_charge_page+0x9e/0x170 [ 431.374188][T17133] __alloc_frozen_pages_noprof+0x18a/0x360 [ 431.374226][T17133] alloc_pages_mpol+0xb3/0x260 [ 431.374262][T17133] alloc_pages_noprof+0x8f/0x130 [ 431.374301][T17133] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 431.374347][T17133] __kvmalloc_node_noprof+0x3d4/0x650 [ 431.374382][T17133] ? ip_set_alloc+0x24/0x30 [ 431.374429][T17133] ? ip_set_alloc+0x24/0x30 [ 431.374457][T17133] ? __kmalloc_cache_noprof+0x18a/0x410 [ 431.374482][T17133] ip_set_alloc+0x24/0x30 [ 431.374513][T17133] hash_netiface_create+0x282/0x740 [ 431.374552][T17133] ? __pfx_hash_netiface_create+0x10/0x10 [ 431.374659][T17133] ip_set_create+0x3cf/0x970 [ 431.374708][T17133] ? __nla_parse+0x40/0x60 [ 431.374740][T17133] nfnetlink_rcv_msg+0x509/0x5d0 [ 431.374780][T17133] netlink_rcv_skb+0x123/0x220 [ 431.374914][T17133] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 431.374978][T17133] nfnetlink_rcv+0x167/0x1720 [ 431.375004][T17133] ? __kfree_skb+0x109/0x150 [ 431.375033][T17133] ? nlmon_xmit+0x4f/0x60 [ 431.375075][T17133] ? consume_skb+0x4b/0x160 [ 431.375109][T17133] ? nlmon_xmit+0x4f/0x60 [ 431.375156][T17133] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 431.375196][T17133] ? __dev_queue_xmit+0x136c/0x1f20 [ 431.375247][T17133] ? __dev_queue_xmit+0x148/0x1f20 [ 431.375317][T17133] ? ref_tracker_free+0x37d/0x3e0 [ 431.375409][T17133] ? __netlink_deliver_tap+0x4dc/0x500 [ 431.375441][T17133] netlink_unicast+0x5c0/0x690 [ 431.375477][T17133] netlink_sendmsg+0x5c8/0x6f0 [ 431.375522][T17133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.375603][T17133] ____sys_sendmsg+0x563/0x5b0 [ 431.375638][T17133] ___sys_sendmsg+0x195/0x1e0 [ 431.375751][T17133] __x64_sys_sendmsg+0xd4/0x160 [ 431.375815][T17133] x64_sys_call+0x194c/0x3020 [ 431.375929][T17133] do_syscall_64+0x12c/0x370 [ 431.375957][T17133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.376025][T17133] RIP: 0033:0x7f14fcdec799 [ 431.376042][T17133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.376061][T17133] RSP: 002b:00007f14fb847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.376133][T17133] RAX: ffffffffffffffda RBX: 00007f14fd065fa0 RCX: 00007f14fcdec799 [ 431.376152][T17133] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 431.376175][T17133] RBP: 00007f14fce82c99 R08: 0000000000000000 R09: 0000000000000000 [ 431.376232][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.376244][T17133] R13: 00007f14fd066038 R14: 00007f14fd065fa0 R15: 00007ffe03cb5098 [ 431.376266][T17133] [ 431.378723][T17133] memory: usage 307176kB, limit 307200kB, failcnt 4091 [ 431.762402][T17133] memory+swap: usage 232628kB, limit 9007199254740988kB, failcnt 0 [ 431.782305][T17133] kmem: usage 231672kB, limit 9007199254740988kB, failcnt 0 [ 431.789643][T17133] Memory cgroup stats for /syz0: [ 431.789932][T17133] cache 4096 [ 431.812377][T17133] rss 110592 [ 431.815625][T17133] shmem 0 [ 431.818584][T17133] mapped_file 4096 [ 431.832289][T17133] dirty 4096 [ 431.835571][T17133] writeback 0 [ 431.838892][T17133] workingset_refault_anon 432 [ 431.852243][T17133] workingset_refault_file 13695 [ 431.862308][T17133] swap 73728 [ 431.865542][T17133] swapcached 97427456 [ 431.872248][T17133] pgpgin 510656 [ 431.879686][T17133] pgpgout 510624 [ 431.889798][T17133] pgfault 411775 [ 431.893501][T17133] pgmajfault 302 [ 431.897195][T17133] inactive_anon 0 [ 431.911027][T17133] active_anon 114688 [ 431.915036][T17133] inactive_file 0 [ 431.918693][T17133] active_file 16384 [ 431.928598][T17133] unevictable 0 [ 431.935383][T17133] hierarchical_memory_limit 314572800 [ 431.947333][T17133] hierarchical_memsw_limit 9223372036854771712 [ 431.959072][T17133] total_cache 4096 [ 431.967194][T17133] total_rss 110592 [ 431.975397][T17133] total_shmem 0 [ 431.982247][T17133] total_mapped_file 4096 [ 431.992230][T17133] total_dirty 4096 [ 432.000585][T17133] total_writeback 0 [ 432.011005][T17133] total_workingset_refault_anon 432 [ 432.024480][T17133] total_workingset_refault_file 13695 [ 432.035398][T17133] total_swap 73728 [ 432.042571][T17133] total_swapcached 97427456 [ 432.051490][T17133] total_pgpgin 510656 [ 432.062554][T17133] total_pgpgout 510624 [ 432.071028][T17133] total_pgfault 411775 [ 432.079765][T17133] total_pgmajfault 302 [ 432.088367][T17133] total_inactive_anon 0 [ 432.098028][T17133] total_active_anon 114688 [ 432.106744][T17133] total_inactive_file 0 [ 432.117021][T17133] total_active_file 16384 [ 432.125763][T17133] total_unevictable 0 [ 432.134321][T17133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.3437,pid=17132,uid=0 [ 432.167382][T17133] Memory cgroup out of memory: Killed process 17133 (syz.0.3437) total-vm:94032kB, anon-rss:1332kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 433.523107][T17194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.322113][T17197] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3452'. [ 434.518511][T17210] netlink: 656 bytes leftover after parsing attributes in process `syz.2.3456'. [ 434.542834][T17212] loop0: detected capacity change from 0 to 128 [ 434.567342][T17214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3455'. [ 434.608832][T17212] FAT-fs (loop0): IO charset cp855 not found [ 434.624980][T17206] loop1: detected capacity change from 0 to 512 [ 434.651332][T17212] loop0: detected capacity change from 0 to 2048 [ 434.685343][T17206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.748372][T17206] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.766286][T17212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.823338][T17206] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3455: corrupted xattr block 33: invalid ea_ino [ 435.018102][T17212] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #12: block 2: comm syz.0.3457: lblock 0 mapped to illegal pblock 2 (length 1) [ 435.046811][T17228] loop9: detected capacity change from 0 to 1024 [ 435.092404][T17206] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 435.111989][T17228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 435.137119][T17206] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.3455: corrupted xattr block 33: invalid ea_ino [ 435.153112][T17206] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 435.162467][T17228] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.162670][ T28] audit: type=1400 audit(2000004390.860:8120): avc: denied { unlink } for pid=17205 comm="syz.1.3455" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 435.243561][T17206] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 435.266459][T17228] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3460: bg 0: block 112: padding at end of block bitmap is not set [ 435.302150][ T28] audit: type=1326 audit(2000004390.980:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.326573][T17206] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2970: inode #15: comm syz.1.3455: corrupted xattr block 33: invalid ea_ino [ 435.340181][ T28] audit: type=1326 audit(2000004390.980:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.341683][T17228] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.3460: lblock 0 mapped to illegal pblock 0 (length 1) [ 435.364819][ T28] audit: type=1326 audit(2000004390.980:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.405069][ T28] audit: type=1326 audit(2000004390.980:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.462265][T17206] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 435.542935][ T28] audit: type=1326 audit(2000004390.980:8125): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.604713][T17228] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.3460: lblock 0 mapped to illegal pblock 0 (length 1) [ 435.622750][ T28] audit: type=1326 audit(2000004390.980:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.624687][T17228] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.3460: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 435.662315][ T28] audit: type=1326 audit(2000004390.980:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 435.698325][T17206] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 435.793219][T17239] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.881125][T17241] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.3460: lblock 0 mapped to illegal pblock 0 (length 1) [ 436.078432][T17237] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.3460: lblock 0 mapped to illegal pblock 0 (length 1) [ 436.213883][T17237] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.3460: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 436.638955][ T28] audit: type=1326 audit(2000004390.980:8128): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 436.663367][ T28] audit: type=1326 audit(2000004390.980:8129): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17231 comm="syz.5.3461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6b666c799 code=0x7ffc0000 [ 436.688780][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 437.427679][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.437851][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.672900][T17254] SELinux: policydb version 516537429 does not match my version range 15-35 [ 437.694268][T17254] SELinux: failed to load policy [ 437.713989][T17255] SELinux: policydb version 516537429 does not match my version range 15-35 [ 437.722958][T17255] SELinux: failed to load policy [ 438.382545][T17257] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22032 sclass=netlink_route_socket pid=17257 comm=syz.2.3468 [ 438.462820][T17265] lo speed is unknown, defaulting to 1000 [ 438.572956][T17271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3475'. [ 438.949583][T17277] 8021q: adding VLAN 0 to HW filter on device bond6 [ 439.103343][T17273] netlink: 'syz.0.3472': attribute type 13 has an invalid length. [ 439.251916][T17275] loop0: detected capacity change from 0 to 512 [ 439.293999][T17273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.546447][T17275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.746060][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.785030][T17287] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3478'. [ 440.002973][T17303] SELinux: policydb version 516537429 does not match my version range 15-35 [ 440.026743][T17303] SELinux: failed to load policy [ 440.323110][T17317] lo speed is unknown, defaulting to 1000 [ 440.461976][T17323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.773929][T17328] netlink: 'syz.5.3488': attribute type 13 has an invalid length. [ 440.810967][T17328] tunl0: left promiscuous mode [ 440.823264][T17328] tunl0: left allmulticast mode [ 440.851063][T17328] gre0: left promiscuous mode [ 440.896521][T17328] gre0: left allmulticast mode [ 440.946194][T17328] gretap0: left allmulticast mode [ 441.153489][T17328] erspan0: left promiscuous mode [ 441.158489][T17328] erspan0: left allmulticast mode [ 441.177090][T17328] ip_vti0: left promiscuous mode [ 441.184262][T17328] ip_vti0: left allmulticast mode [ 441.191386][T17328] ip6_vti0: left promiscuous mode [ 441.197075][T17328] ip6_vti0: left allmulticast mode [ 441.205700][T17328] sit0: left promiscuous mode [ 441.210879][T17328] sit0: left allmulticast mode [ 441.219170][T17328] ip6tnl0: left promiscuous mode [ 441.224770][T17328] ip6tnl0: left allmulticast mode [ 441.231858][T17328] ip6gre0: left promiscuous mode [ 441.238093][T17328] ip6gre0: left allmulticast mode [ 441.250259][T17328] syz_tun: left promiscuous mode [ 441.255794][T17328] syz_tun: left allmulticast mode [ 441.268347][T17328] ip6gretap0: left promiscuous mode [ 441.274135][T17328] ip6gretap0: left allmulticast mode [ 441.305004][T17328] bridge0: left allmulticast mode [ 441.358934][T17328] vcan0: left promiscuous mode [ 441.383328][T17328] vcan0: left allmulticast mode [ 441.413988][T17328] 8021q: adding VLAN 0 to HW filter on device .` [ 441.436674][T17328] dummy0: left allmulticast mode [ 441.957035][T17328] nlmon0: left promiscuous mode [ 441.962311][T17328] nlmon0: left allmulticast mode [ 442.001265][T17328] caif0: left promiscuous mode [ 442.008249][T17328] caif0: left allmulticast mode [ 442.013199][T17328] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.118297][T17346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3491'. [ 442.175669][T17354] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3494'. [ 442.268436][T17361] SELinux: failed to load policy [ 443.027869][T17383] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3499'. [ 443.037516][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3499'. [ 443.128244][T17385] syzkaller0: entered promiscuous mode [ 443.141142][T17385] syzkaller0: entered allmulticast mode [ 443.518597][T17394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.767896][T17399] lo speed is unknown, defaulting to 1000 [ 444.004751][T17407] loop1: detected capacity change from 0 to 1024 [ 444.042399][T17407] EXT4-fs: inline encryption not supported [ 444.087340][T17407] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 444.250035][T17416] netlink: 'syz.0.3506': attribute type 13 has an invalid length. [ 444.432576][T17419] loop0: detected capacity change from 0 to 512 [ 444.469795][T17419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.901015][T17416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.955829][T17407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3507'. [ 444.965851][T17407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3507'. [ 445.015396][T17425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'. [ 445.031382][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.034049][T17427] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3512'. [ 445.052297][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 445.052315][ T28] audit: type=1400 audit(2000004400.720:8142): avc: denied { setcurrent } for pid=17426 comm="syz.9.3512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 445.195725][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3512'. [ 445.270927][T17442] SELinux: failed to load policy [ 445.310379][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3519'. [ 445.319472][T17453] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3519'. [ 445.331852][T17456] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3516'. [ 446.126874][T17471] lo speed is unknown, defaulting to 1000 [ 446.294875][T17475] 8021q: adding VLAN 0 to HW filter on device bond7 [ 446.443712][T17471] netlink: 'syz.0.3524': attribute type 13 has an invalid length. [ 446.461272][T17471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 446.499755][T17471] loop0: detected capacity change from 0 to 512 [ 446.541688][T17471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.189616][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.214453][ T28] audit: type=1400 audit(2000004402.910:8143): avc: denied { getopt } for pid=17486 comm="syz.5.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 447.306934][ T28] audit: type=1400 audit(2000004402.910:8144): avc: denied { setopt } for pid=17486 comm="syz.5.3528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 447.347259][T17494] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3530'. [ 447.378589][T17494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3530'. [ 447.680570][T17510] SELinux: policydb version 516537429 does not match my version range 15-35 [ 447.719251][T17510] SELinux: failed to load policy [ 447.729676][T17515] FAULT_INJECTION: forcing a failure. [ 447.729676][T17515] name failslab, interval 1, probability 0, space 0, times 0 [ 447.773629][T17515] CPU: 1 UID: 0 PID: 17515 Comm: syz.2.3534 Tainted: G W syzkaller #0 PREEMPT(full) [ 447.773669][T17515] Tainted: [W]=WARN [ 447.773689][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.773747][T17515] Call Trace: [ 447.773755][T17515] [ 447.773764][T17515] __dump_stack+0x1d/0x30 [ 447.773798][T17515] dump_stack_lvl+0x95/0xd0 [ 447.773823][T17515] dump_stack+0x15/0x1b [ 447.773844][T17515] should_fail_ex+0x263/0x280 [ 447.773924][T17515] should_failslab+0x8c/0xb0 [ 447.773944][T17515] __kmalloc_cache_node_noprof+0x6b/0x480 [ 447.773974][T17515] ? __get_vm_area_node+0x106/0x1d0 [ 447.774041][T17515] __get_vm_area_node+0x106/0x1d0 [ 447.774091][T17515] __vmalloc_node_range_noprof+0x291/0x12b0 [ 447.774140][T17515] ? sel_write_load+0x156/0x380 [ 447.774174][T17515] ? __rcu_read_unlock+0x4e/0x70 [ 447.774218][T17515] ? avc_has_perm_noaudit+0xab/0x130 [ 447.774254][T17515] ? sel_write_load+0x156/0x380 [ 447.774279][T17515] vmalloc_noprof+0x82/0xb0 [ 447.774337][T17515] ? sel_write_load+0x156/0x380 [ 447.774360][T17515] sel_write_load+0x156/0x380 [ 447.774394][T17515] ? __pfx_sel_write_load+0x10/0x10 [ 447.774423][T17515] vfs_write+0x269/0x9f0 [ 447.774492][T17515] ? __rcu_read_unlock+0x4e/0x70 [ 447.774517][T17515] ? __fget_files+0x184/0x1c0 [ 447.774540][T17515] ? mutex_lock+0x57/0x90 [ 447.774581][T17515] ksys_write+0xdc/0x1a0 [ 447.774602][T17515] __x64_sys_write+0x40/0x50 [ 447.774625][T17515] x64_sys_call+0x27e1/0x3020 [ 447.774720][T17515] do_syscall_64+0x12c/0x370 [ 447.774818][T17515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.774846][T17515] RIP: 0033:0x7fd820a6c799 [ 447.774918][T17515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.774992][T17515] RSP: 002b:00007fd81f49e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.775014][T17515] RAX: ffffffffffffffda RBX: 00007fd820ce6090 RCX: 00007fd820a6c799 [ 447.775032][T17515] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000004 [ 447.775049][T17515] RBP: 00007fd81f49e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.775065][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.775097][T17515] R13: 00007fd820ce6128 R14: 00007fd820ce6090 R15: 00007fff9d6a3878 [ 447.775184][T17515] [ 447.777354][T17515] syz.2.3534: vmalloc error: size 56, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 448.051127][T17515] CPU: 0 UID: 0 PID: 17515 Comm: syz.2.3534 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.051161][T17515] Tainted: [W]=WARN [ 448.051173][T17515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.051185][T17515] Call Trace: [ 448.051192][T17515] [ 448.051199][T17515] __dump_stack+0x1d/0x30 [ 448.051230][T17515] dump_stack_lvl+0x95/0xd0 [ 448.051259][T17515] dump_stack+0x15/0x1b [ 448.051315][T17515] warn_alloc+0x145/0x1c0 [ 448.051348][T17515] __vmalloc_node_range_noprof+0x2b6/0x12b0 [ 448.051392][T17515] ? __rcu_read_unlock+0x4e/0x70 [ 448.051419][T17515] ? avc_has_perm_noaudit+0xab/0x130 [ 448.051455][T17515] ? sel_write_load+0x156/0x380 [ 448.051485][T17515] vmalloc_noprof+0x82/0xb0 [ 448.051577][T17515] ? sel_write_load+0x156/0x380 [ 448.051652][T17515] sel_write_load+0x156/0x380 [ 448.051677][T17515] ? __pfx_sel_write_load+0x10/0x10 [ 448.051709][T17515] vfs_write+0x269/0x9f0 [ 448.051798][T17515] ? __rcu_read_unlock+0x4e/0x70 [ 448.051887][T17515] ? __fget_files+0x184/0x1c0 [ 448.051919][T17515] ? mutex_lock+0x57/0x90 [ 448.051967][T17515] ksys_write+0xdc/0x1a0 [ 448.051986][T17515] __x64_sys_write+0x40/0x50 [ 448.052008][T17515] x64_sys_call+0x27e1/0x3020 [ 448.052035][T17515] do_syscall_64+0x12c/0x370 [ 448.052055][T17515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.052088][T17515] RIP: 0033:0x7fd820a6c799 [ 448.052104][T17515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.052122][T17515] RSP: 002b:00007fd81f49e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 448.052141][T17515] RAX: ffffffffffffffda RBX: 00007fd820ce6090 RCX: 00007fd820a6c799 [ 448.052155][T17515] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000004 [ 448.052198][T17515] RBP: 00007fd81f49e090 R08: 0000000000000000 R09: 0000000000000000 [ 448.052214][T17515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.052229][T17515] R13: 00007fd820ce6128 R14: 00007fd820ce6090 R15: 00007fff9d6a3878 [ 448.052253][T17515] [ 448.054904][T17518] lo speed is unknown, defaulting to 1000 [ 448.194879][T17520] loop1: detected capacity change from 0 to 1024 [ 448.232439][T17515] Mem-Info: [ 448.336194][T17524] netlink: 'syz.9.3539': attribute type 21 has an invalid length. [ 448.344369][T17515] active_anon:28401 inactive_anon:7 isolated_anon:0 [ 448.344369][T17515] active_file:14360 inactive_file:3245 isolated_file:0 [ 448.344369][T17515] unevictable:0 dirty:0 writeback:0 [ 448.344369][T17515] slab_reclaimable:4157 slab_unreclaimable:89321 [ 448.344369][T17515] mapped:34571 shmem:17512 pagetables:3854 [ 448.344369][T17515] sec_pagetables:0 bounce:0 [ 448.344369][T17515] kernel_misc_reclaimable:0 [ 448.344369][T17515] free:1772166 free_pcp:15581 free_cma:0 [ 448.404416][T17520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 448.422510][T17515] Node 0 active_anon:113604kB inactive_anon:28kB active_file:57440kB inactive_file:12980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142344kB dirty:0kB writeback:0kB shmem:70048kB kernel_stack:4976kB pagetables:15532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.457524][T17529] loop9: detected capacity change from 0 to 1024 [ 448.465916][T17520] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.505042][T17515] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.535334][T17520] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3538: bg 0: block 112: padding at end of block bitmap is not set [ 448.562092][T17529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 448.572805][T17515] lowmem_reserve[]: [ 448.581457][T17518] netlink: 'syz.5.3537': attribute type 13 has an invalid length. [ 448.593427][T17520] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: comm syz.1.3538: lblock 0 mapped to illegal pblock 0 (length 1) [ 448.612309][T17515] 0 2879 7857 7857 [ 448.616368][T17529] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.630930][T17518] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 448.649136][T17515] Node 0 DMA32 free:2944664kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948188kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 448.653449][T17520] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #15: comm syz.1.3538: lblock 0 mapped to illegal pblock 0 (length 1) [ 448.682052][T17515] lowmem_reserve[]: 0 0 4978 4978 [ 448.700600][T17515] Node 0 Normal free:4130584kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:114108kB inactive_anon:28kB active_file:57740kB inactive_file:13076kB unevictable:0kB writepending:40kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:55580kB local_pcp:39036kB free_cma:0kB [ 448.736626][T17537] loop0: detected capacity change from 0 to 1024 [ 448.737754][T17529] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3540: bg 0: block 112: padding at end of block bitmap is not set [ 448.743638][T17520] EXT4-fs error (device loop1): ext4_ext_remove_space:2954: inode #15: comm syz.1.3538: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 448.780845][T17515] lowmem_reserve[]: 0 0 0 0 [ 448.786612][T17515] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 448.789271][T17538] FAULT_INJECTION: forcing a failure. [ 448.789271][T17538] name failslab, interval 1, probability 0, space 0, times 0 [ 448.800177][T17515] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944664kB [ 448.825118][T17529] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.3540: lblock 0 mapped to illegal pblock 0 (length 1) [ 448.831171][T17537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 448.844278][T17515] Node 0 Normal: 3052*4kB (UM) 2562*8kB (UME) 2556*16kB (UME) 1969*32kB (UME) 1578*64kB (UME) 1073*128kB (UME) 804*256kB (UME) 731*512kB (UME) 641*1024kB (UME) 516*2048kB (UME) 357*4096kB (UM) = 4130464kB [ 448.872663][T17538] CPU: 1 UID: 0 PID: 17538 Comm: syz.1.3538 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.872767][T17538] Tainted: [W]=WARN [ 448.872788][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.872950][T17538] Call Trace: [ 448.872979][T17538] [ 448.873002][T17538] __dump_stack+0x1d/0x30 [ 448.873094][T17538] dump_stack_lvl+0x95/0xd0 [ 448.873175][T17538] dump_stack+0x15/0x1b [ 448.873281][T17538] should_fail_ex+0x263/0x280 [ 448.873336][T17538] ? alloc_pipe_info+0xad/0x340 [ 448.873397][T17538] should_failslab+0x8c/0xb0 [ 448.873532][T17538] __kmalloc_cache_noprof+0x5f/0x410 [ 448.873762][T17538] alloc_pipe_info+0xad/0x340 [ 448.873825][T17538] splice_direct_to_actor+0x591/0x670 [ 448.873854][T17538] ? kstrtouint_from_user+0xa8/0xf0 [ 448.873876][T17538] ? __pfx_direct_splice_actor+0x10/0x10 [ 448.873977][T17538] ? avc_policy_seqno+0x15/0x30 [ 448.874060][T17538] ? selinux_file_permission+0x1f2/0x690 [ 448.874106][T17538] do_splice_direct+0x119/0x1a0 [ 448.874170][T17538] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 448.874292][T17538] do_sendfile+0x382/0x650 [ 448.874376][T17538] __x64_sys_sendfile64+0x105/0x150 [ 448.874407][T17538] x64_sys_call+0x2dc4/0x3020 [ 448.874441][T17538] do_syscall_64+0x12c/0x370 [ 448.874562][T17538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.874642][T17538] RIP: 0033:0x7f41af9bc799 [ 448.874703][T17538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.874765][T17538] RSP: 002b:00007f41ae3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 448.874829][T17538] RAX: ffffffffffffffda RBX: 00007f41afc36180 RCX: 00007f41af9bc799 [ 448.874911][T17538] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 448.874951][T17538] RBP: 00007f41ae3cd090 R08: 0000000000000000 R09: 0000000000000000 [ 448.874993][T17538] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 448.875036][T17538] R13: 00007f41afc36218 R14: 00007f41afc36180 R15: 00007ffd699abba8 [ 448.875098][T17538] [ 448.912620][T17537] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.917250][T17529] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.3540: lblock 0 mapped to illegal pblock 0 (length 1) [ 448.923596][T17515] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 448.929029][T17529] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.3540: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 448.946007][T17537] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3541: bg 0: block 112: padding at end of block bitmap is not set [ 448.952606][T17515] 35489 total pagecache pages [ 449.001262][T17537] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.3541: lblock 0 mapped to illegal pblock 0 (length 1) [ 449.006691][T17515] 9 pages in swap cache [ 449.012955][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 449.030818][T17515] Free swap = 47580kB [ 449.080732][T17529] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.3540: lblock 0 mapped to illegal pblock 0 (length 1) [ 449.082841][T17515] Total swap = 124996kB [ 449.134103][T17537] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3541: lblock 0 mapped to illegal pblock 0 (length 1) [ 449.150746][T17515] 2097051 pages RAM [ 449.196611][T17537] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.3541: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 449.240241][T17543] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3541: lblock 0 mapped to illegal pblock 0 (length 1) [ 449.266047][T17545] loop1: detected capacity change from 0 to 512 [ 449.272935][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 449.283977][T17515] 0 pages HighMem/MovableOnly [ 449.288776][T17515] 81604 pages reserved [ 449.293642][T17545] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 449.325374][ T28] audit: type=1400 audit(2000004405.020:8145): avc: denied { accept } for pid=17544 comm="syz.1.3542" path=2F36352FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 449.373362][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 449.945867][T17574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.794264][T17582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 452.999828][T17591] SELinux: policydb version 516537429 does not match my version range 15-35 [ 453.085839][T17591] SELinux: failed to load policy [ 453.091126][T17593] SELinux: policydb version 516537429 does not match my version range 15-35 [ 453.122278][T17593] SELinux: failed to load policy [ 453.203970][T17602] loop9: detected capacity change from 0 to 1024 [ 453.258775][T17602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.326251][T17610] __nla_validate_parse: 5 callbacks suppressed [ 453.326272][T17610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3561'. [ 453.392324][T17602] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.453052][T17602] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3559: bg 0: block 112: padding at end of block bitmap is not set [ 453.484945][T17614] loop2: detected capacity change from 0 to 1024 [ 453.549658][T17617] FAULT_INJECTION: forcing a failure. [ 453.549658][T17617] name failslab, interval 1, probability 0, space 0, times 0 [ 453.563926][T17614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 453.607812][T17614] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 453.634219][T17617] CPU: 1 UID: 0 PID: 17617 Comm: syz.9.3559 Tainted: G W syzkaller #0 PREEMPT(full) [ 453.634264][T17617] Tainted: [W]=WARN [ 453.634271][T17617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 453.634310][T17617] Call Trace: [ 453.634319][T17617] [ 453.634326][T17617] __dump_stack+0x1d/0x30 [ 453.634360][T17617] dump_stack_lvl+0x95/0xd0 [ 453.634447][T17617] dump_stack+0x15/0x1b [ 453.634477][T17617] should_fail_ex+0x263/0x280 [ 453.634505][T17617] should_failslab+0x8c/0xb0 [ 453.634534][T17617] __kmalloc_noprof+0xb8/0x4e0 [ 453.634565][T17617] ? alloc_pipe_info+0x1c8/0x340 [ 453.634629][T17617] alloc_pipe_info+0x1c8/0x340 [ 453.634656][T17617] splice_direct_to_actor+0x591/0x670 [ 453.634685][T17617] ? kstrtouint_from_user+0xa8/0xf0 [ 453.634716][T17617] ? __pfx_direct_splice_actor+0x10/0x10 [ 453.634780][T17617] ? avc_policy_seqno+0x15/0x30 [ 453.634814][T17617] ? selinux_file_permission+0x1f2/0x690 [ 453.634847][T17617] do_splice_direct+0x119/0x1a0 [ 453.634876][T17617] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 453.634946][T17617] do_sendfile+0x382/0x650 [ 453.634996][T17617] __x64_sys_sendfile64+0x105/0x150 [ 453.635030][T17617] x64_sys_call+0x2dc4/0x3020 [ 453.635066][T17617] do_syscall_64+0x12c/0x370 [ 453.635101][T17617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.635140][T17617] RIP: 0033:0x7f2649c4c799 [ 453.635158][T17617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.635181][T17617] RSP: 002b:00007f2648686028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 453.635233][T17617] RAX: ffffffffffffffda RBX: 00007f2649ec6090 RCX: 00007f2649c4c799 [ 453.635257][T17617] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 453.635271][T17617] RBP: 00007f2648686090 R08: 0000000000000000 R09: 0000000000000000 [ 453.635288][T17617] R10: 000000000e3aa6ea R11: 0000000000000246 R12: 0000000000000001 [ 453.635305][T17617] R13: 00007f2649ec6128 R14: 00007f2649ec6090 R15: 00007ffe283d3d38 [ 453.635340][T17617] [ 453.942990][T17614] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3563: bg 0: block 112: padding at end of block bitmap is not set [ 454.014432][T17614] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm syz.2.3563: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.076770][T17614] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.3563: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.122144][T17614] EXT4-fs error (device loop2): ext4_ext_remove_space:2954: inode #15: comm syz.2.3563: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 454.169695][T17619] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #15: comm syz.2.3563: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.231417][ T180] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 454.246014][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 454.255569][ T180] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 454.442224][ T180] EXT4-fs (loop9): This should not happen!! Data will be lost [ 454.442224][ T180] [ 454.474723][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 457.814242][T17630] 8021q: adding VLAN 0 to HW filter on device bond4 [ 457.833825][T17631] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 458.254741][T17656] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3573'. [ 458.281974][T17652] loop9: detected capacity change from 0 to 1024 [ 458.350964][T17652] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 458.382298][T17652] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.432885][T17652] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.3564: bg 0: block 112: padding at end of block bitmap is not set [ 458.507208][T17652] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #15: comm syz.9.3564: lblock 0 mapped to illegal pblock 0 (length 1) [ 458.521253][T17673] SELinux: failed to load policy [ 458.528199][T17652] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #15: comm syz.9.3564: lblock 0 mapped to illegal pblock 0 (length 1) [ 458.529319][T17675] SELinux: policydb version 516537429 does not match my version range 15-35 [ 458.543139][T17673] netlink: 656 bytes leftover after parsing attributes in process `syz.2.3576'. [ 458.592043][T17678] lo speed is unknown, defaulting to 1000 [ 458.621721][T17652] EXT4-fs error (device loop9): ext4_ext_remove_space:2954: inode #15: comm syz.9.3564: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 458.635185][T17675] SELinux: failed to load policy [ 458.776757][ T3537] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 458.794229][ T3537] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.822394][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 458.906320][T17678] netlink: 'syz.2.3578': attribute type 13 has an invalid length. [ 458.919931][T17678] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 459.046774][T17678] loop2: detected capacity change from 0 to 512 [ 459.078141][T17678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.349065][T17696] 8021q: adding VLAN 0 to HW filter on device bond8 [ 459.635574][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.238179][T17710] loop0: detected capacity change from 0 to 1024 [ 462.256560][T17710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 462.362331][T17710] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.221372][T17715] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 463.707882][T17707] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.052455][T17710] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.3584: lblock 0 mapped to illegal pblock 0 (length 1) [ 464.131263][T17708] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.216053][T17710] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3584: lblock 0 mapped to illegal pblock 0 (length 1) [ 464.251098][T17721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3585'. [ 464.285048][T17721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3585'. [ 464.295084][T17710] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.3584: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 464.316963][T17723] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3584: lblock 0 mapped to illegal pblock 0 (length 1) [ 464.341565][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 464.483887][T17731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61038 sclass=netlink_route_socket pid=17731 comm=syz.2.3588 [ 464.584936][T17737] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3591'. [ 464.697293][T17742] loop2: detected capacity change from 0 to 512 [ 464.762701][T17742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.800050][T17742] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 464.817791][T17742] syzkaller1: entered promiscuous mode [ 464.823478][T17742] syzkaller1: entered allmulticast mode [ 464.831643][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 464.841149][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3594'. [ 464.912008][T17745] lo speed is unknown, defaulting to 1000 [ 464.935143][T17762] loop9: detected capacity change from 0 to 1024 [ 465.066164][T17768] SET target dimension over the limit! [ 465.085480][T17770] netlink: 220 bytes leftover after parsing attributes in process `syz.9.3602'. [ 465.178967][T17745] chnl_net:caif_netlink_parms(): no params data found [ 465.212541][ T7039] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.233845][ T7039] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.250886][T17768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3601'. [ 465.292495][T17768] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3601'. [ 465.318099][ T7039] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.336979][ T7039] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.391548][T17745] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.402147][T17745] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.409457][T17745] bridge_slave_0: entered allmulticast mode [ 465.416182][T17745] bridge_slave_0: entered promiscuous mode [ 465.424070][T17777] loop9: detected capacity change from 0 to 8192 [ 465.433013][ T7039] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.464941][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.475235][ T7039] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.508156][T17745] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.528834][T17745] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.547524][T17745] bridge_slave_1: entered allmulticast mode [ 465.555118][T17745] bridge_slave_1: entered promiscuous mode [ 465.563796][ T7039] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 465.574914][ T7039] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.599283][T17745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.631373][T17745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.692691][T17745] team0: Port device team_slave_0 added [ 465.728842][T17745] team0: Port device team_slave_1 added [ 465.782705][ T7039] bridge_slave_1: left allmulticast mode [ 465.794041][ T7039] bridge_slave_1: left promiscuous mode [ 465.812828][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.859554][ T7039] bridge_slave_0: left allmulticast mode [ 465.865855][ T7039] bridge_slave_0: left promiscuous mode [ 465.871753][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.887388][ T7039] veth0_to_team: left allmulticast mode [ 465.898895][ T7039] veth0_to_team: left promiscuous mode [ 465.911323][ T7039] Ÿë: port 1(veth0_to_team) entered disabled state [ 466.512249][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 467.040672][T17809] loop9: detected capacity change from 0 to 128 [ 467.050216][T17809] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 467.082443][T17809] FAT-fs (loop9): Filesystem has been set read-only [ 467.135289][ T7039] batman_adv: batadv0: Removing interface: macvlan4 [ 467.426439][ T7039] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.455758][ T7039] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.483271][ T7039] .` (unregistering): Released all slaves [ 467.507007][ T7039] bond1 (unregistering): (slave dummy0): Releasing active interface [ 467.535846][ T7039] bond1 (unregistering): Released all slaves [ 467.559919][ T7039] bond0 (unregistering): Released all slaves [ 467.589677][ T7039] bond2 (unregistering): Released all slaves [ 467.619537][ T7039] bond3 (unregistering): Released all slaves [ 467.658424][ T7039] bond4 (unregistering): Released all slaves [ 467.687130][T17745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.708896][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.777575][T17745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.804179][T17745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.821596][T17745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.891036][T17745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.967695][T17745] hsr_slave_0: entered promiscuous mode [ 467.983508][T17745] hsr_slave_1: entered promiscuous mode [ 467.989810][T17745] debugfs: 'hsr0' already exists in 'hsr' [ 467.995628][T17745] Cannot create hsr debugfs directory [ 468.001636][T17804] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 468.087160][ T7039] hsr_slave_0: left promiscuous mode [ 468.118274][T17820] loop1: detected capacity change from 0 to 512 [ 468.141051][T17820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.153860][T17820] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 468.165231][ T7039] hsr_slave_1: left promiscuous mode [ 468.170922][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.179070][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.197140][ T7039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.204973][ T7039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.238155][ T7039] veth1_macvtap: left promiscuous mode [ 468.248406][ T7039] veth0_macvtap: left promiscuous mode [ 468.258299][ T7039] veth1_vlan: left promiscuous mode [ 468.265734][ T7039] veth0_vlan: left promiscuous mode [ 468.325726][T17845] netlink: 'syz.9.3613': attribute type 6 has an invalid length. [ 468.358873][T17848] SELinux: policydb version 516537429 does not match my version range 15-35 [ 468.392255][T17848] SELinux: failed to load policy [ 468.432833][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'. [ 468.441895][T17854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3611'. [ 468.486469][T17846] syzkaller1: entered promiscuous mode [ 468.492038][T17846] syzkaller1: entered allmulticast mode [ 468.508467][T17852] lo speed is unknown, defaulting to 1000 [ 468.635433][T17855] netlink: 'syz.2.3616': attribute type 13 has an invalid length. [ 468.678521][T17855] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 468.733771][T17855] loop2: detected capacity change from 0 to 512 [ 468.755853][T17855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.782002][ T7039] IPVS: stop unused estimator thread 0... [ 468.901593][T17745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.911734][T17745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.922680][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.932864][T17745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.981540][T17745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 469.160281][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.676475][T17915] 8021q: adding VLAN 0 to HW filter on device bond7 [ 469.777767][T17745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.975189][T17745] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.028588][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.035706][ T8925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.071491][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.078710][ T8925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.287270][T17745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.582434][T17971] lo speed is unknown, defaulting to 1000 [ 470.592421][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 470.672389][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 470.732008][T17745] veth0_vlan: entered promiscuous mode [ 470.758717][T17745] veth1_vlan: entered promiscuous mode [ 470.823168][T17745] veth0_macvtap: entered promiscuous mode [ 470.846731][T17745] veth1_macvtap: entered promiscuous mode [ 470.857778][T17745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.880685][T17745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.920309][ T180] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.939541][ T180] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.949248][ T180] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.958957][ T180] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.990280][T18001] __nla_validate_parse: 4 callbacks suppressed [ 470.990397][T18001] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3628'. [ 471.010534][T17998] netlink: 'syz.0.3627': attribute type 6 has an invalid length. [ 471.092530][T18012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18012 comm=syz.0.3630 [ 471.133998][T18012] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1010 sclass=netlink_tcpdiag_socket pid=18012 comm=syz.0.3630 [ 471.172600][T18012] netlink: 'syz.0.3630': attribute type 1 has an invalid length. [ 471.216502][T18012] 8021q: adding VLAN 0 to HW filter on device bond8 [ 471.726747][T18012] bond8: (slave dummy0): making interface the new active one [ 471.787625][T18012] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 471.875252][T18037] 8021q: adding VLAN 0 to HW filter on device bond9 [ 472.654843][T18059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3635'. [ 472.693235][T18059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3635'. [ 472.733664][ T7039] Bluetooth: hci0: Frame reassembly failed (-84) [ 473.060045][T18006] syz.2.3629 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 473.108890][T18006] CPU: 0 UID: 0 PID: 18006 Comm: syz.2.3629 Tainted: G W syzkaller #0 PREEMPT(full) [ 473.108923][T18006] Tainted: [W]=WARN [ 473.108937][T18006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.108963][T18006] Call Trace: [ 473.108972][T18006] [ 473.108983][T18006] __dump_stack+0x1d/0x30 [ 473.109040][T18006] dump_stack_lvl+0x95/0xd0 [ 473.109065][T18006] dump_stack+0x15/0x1b [ 473.109095][T18006] dump_header+0x80/0x240 [ 473.109126][T18006] oom_kill_process+0x295/0x350 [ 473.109156][T18006] out_of_memory+0x97d/0xb80 [ 473.109248][T18006] try_charge_memcg+0x62e/0xa10 [ 473.109298][T18006] obj_cgroup_charge_pages+0x23/0xc0 [ 473.109331][T18006] __memcg_kmem_charge_page+0x9e/0x170 [ 473.109462][T18006] __alloc_frozen_pages_noprof+0x18a/0x360 [ 473.109505][T18006] alloc_pages_mpol+0xb3/0x260 [ 473.109575][T18006] alloc_pages_noprof+0x8f/0x130 [ 473.109648][T18006] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 473.109691][T18006] __kvmalloc_node_noprof+0x3d4/0x650 [ 473.109798][T18006] ? ip_set_alloc+0x24/0x30 [ 473.109824][T18006] ? ip_set_alloc+0x24/0x30 [ 473.109922][T18006] ? __kmalloc_cache_noprof+0x18a/0x410 [ 473.109964][T18006] ip_set_alloc+0x24/0x30 [ 473.110058][T18006] hash_netiface_create+0x282/0x740 [ 473.110086][T18006] ? __pfx_hash_netiface_create+0x10/0x10 [ 473.110121][T18006] ip_set_create+0x3cf/0x970 [ 473.110170][T18006] ? __nla_parse+0x40/0x60 [ 473.110201][T18006] nfnetlink_rcv_msg+0x509/0x5d0 [ 473.110334][T18006] netlink_rcv_skb+0x123/0x220 [ 473.110408][T18006] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 473.110446][T18006] nfnetlink_rcv+0x167/0x1720 [ 473.110470][T18006] ? __kfree_skb+0x109/0x150 [ 473.110496][T18006] ? nlmon_xmit+0x4f/0x60 [ 473.110633][T18006] ? consume_skb+0x4b/0x160 [ 473.110706][T18006] ? nlmon_xmit+0x4f/0x60 [ 473.110740][T18006] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 473.110781][T18006] ? __dev_queue_xmit+0x136c/0x1f20 [ 473.110822][T18006] ? __dev_queue_xmit+0x148/0x1f20 [ 473.110888][T18006] ? ref_tracker_free+0x37d/0x3e0 [ 473.110917][T18006] ? __netlink_deliver_tap+0x4dc/0x500 [ 473.110956][T18006] netlink_unicast+0x5c0/0x690 [ 473.110983][T18006] netlink_sendmsg+0x5c8/0x6f0 [ 473.111043][T18006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.111081][T18006] ____sys_sendmsg+0x563/0x5b0 [ 473.111114][T18006] ___sys_sendmsg+0x195/0x1e0 [ 473.111205][T18006] __x64_sys_sendmsg+0xd4/0x160 [ 473.111249][T18006] x64_sys_call+0x194c/0x3020 [ 473.111286][T18006] do_syscall_64+0x12c/0x370 [ 473.111314][T18006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.111363][T18006] RIP: 0033:0x7fd820a6c799 [ 473.111385][T18006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.111441][T18006] RSP: 002b:00007fd81f4bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.111467][T18006] RAX: ffffffffffffffda RBX: 00007fd820ce5fa0 RCX: 00007fd820a6c799 [ 473.111486][T18006] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 473.111503][T18006] RBP: 00007fd820b02c99 R08: 0000000000000000 R09: 0000000000000000 [ 473.111520][T18006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.111535][T18006] R13: 00007fd820ce6038 R14: 00007fd820ce5fa0 R15: 00007fff9d6a3878 [ 473.111567][T18006] [ 473.449910][T18006] memory: usage 307200kB, limit 307200kB, failcnt 3557 [ 473.460019][T18006] memory+swap: usage 384536kB, limit 9007199254740988kB, failcnt 0 [ 473.467979][T18006] kmem: usage 305428kB, limit 9007199254740988kB, failcnt 0 [ 473.475690][T18006] Memory cgroup stats for /syz2: [ 473.475957][T18006] cache 4096 [ 473.484296][T18006] rss 4096 [ 473.487401][T18006] shmem 0 [ 473.490370][T18006] mapped_file 4096 [ 473.494156][T18006] dirty 0 [ 473.497126][T18006] writeback 0 [ 473.500492][T18006] workingset_refault_anon 712 [ 473.505224][T18006] workingset_refault_file 8025 [ 473.509992][T18006] swap 79192064 [ 473.513504][T18006] swapcached 122974208 [ 473.517594][T18006] pgpgin 417806 [ 473.521077][T18006] pgpgout 417776 [ 473.524953][T18006] pgfault 389817 [ 473.533605][T18006] pgmajfault 534 [ 473.537188][T18006] inactive_anon 110592 [ 473.541281][T18006] active_anon 0 [ 473.557533][T18006] inactive_file 12288 [ 473.561562][T18006] active_file 0 [ 473.589713][T18006] unevictable 0 [ 473.593342][T18006] hierarchical_memory_limit 314572800 [ 473.598813][T18006] hierarchical_memsw_limit 9223372036854771712 [ 473.605777][T18006] total_cache 4096 [ 473.609687][T18006] total_rss 4096 [ 473.613451][T18006] total_shmem 0 [ 473.617134][T18006] total_mapped_file 4096 [ 473.621448][T18006] total_dirty 0 [ 473.625299][T18006] total_writeback 0 [ 473.629796][T18006] total_workingset_refault_anon 712 [ 473.650696][T18006] total_workingset_refault_file 8025 [ 473.661819][T18006] total_swap 79192064 [ 473.676812][T18006] total_swapcached 122974208 [ 473.685957][T18006] total_pgpgin 417806 [ 473.695579][T18006] total_pgpgout 417776 [ 473.704202][T18006] total_pgfault 389817 [ 473.712079][T18006] total_pgmajfault 534 [ 473.733275][T18006] total_inactive_anon 110592 [ 473.738458][T18006] total_active_anon 0 [ 473.743004][T18006] total_inactive_file 12288 [ 473.747578][T18006] total_active_file 0 [ 473.751654][T18006] total_unevictable 0 [ 473.755846][T18006] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3629,pid=18005,uid=0 [ 473.772039][T18006] Memory cgroup out of memory: Killed process 18005 (syz.2.3629) total-vm:94032kB, anon-rss:1232kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 474.178960][T18092] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.265476][T18094] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 474.545596][T18094] batman_adv: batadv0: Adding interface: ip6gretap1 [ 474.582645][T18094] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.766631][T18094] batman_adv: batadv0: Interface activated: ip6gretap1 [ 474.771200][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 474.779616][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 475.556161][T18107] 8021q: adding VLAN 0 to HW filter on device bond6 [ 476.591390][ T3422] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 476.638115][ T3422] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 476.648189][T18177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3653'. [ 476.697810][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3653'. [ 476.708693][ T7039] Bluetooth: hci0: Frame reassembly failed (-84) [ 477.138909][T18190] 8021q: adding VLAN 0 to HW filter on device bond10 [ 477.726726][T18196] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3645'. [ 477.870255][T18203] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3647'. [ 478.587912][T18212] SELinux: failed to load policy [ 478.596925][T18212] loop2: detected capacity change from 0 to 512 [ 478.642506][T18212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.669622][T18212] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 478.704768][T18212] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.3649: corrupted inode contents [ 478.716997][T18212] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #2: comm syz.2.3649: mark_inode_dirty error [ 478.728908][T18212] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #2: comm syz.2.3649: corrupted inode contents [ 478.742815][T18212] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3649: mark_inode_dirty error [ 478.754156][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 478.760241][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 478.791579][T18212] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.3649: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 478.791579][T18212] [ 478.883758][ T28] audit: type=1400 audit(2000004434.580:8146): avc: denied { read } for pid=18209 comm="syz.2.3649" name="file0" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 478.940006][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.022637][T18240] lo speed is unknown, defaulting to 1000 [ 479.147036][T18245] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3661'. [ 479.174750][T18240] netlink: 'syz.1.3658': attribute type 13 has an invalid length. [ 479.196611][T18240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 479.289296][T18241] loop1: detected capacity change from 0 to 512 [ 479.324960][T18241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.513270][T18255] SELinux: policydb magic number 0x10000 does not match expected magic number 0xf97cff8c [ 479.559623][T18255] SELinux: failed to load policy [ 479.945155][T18226] syz.6.3655 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 479.959782][T18226] CPU: 0 UID: 0 PID: 18226 Comm: syz.6.3655 Tainted: G W syzkaller #0 PREEMPT(full) [ 479.959816][T18226] Tainted: [W]=WARN [ 479.959823][T18226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.959880][T18226] Call Trace: [ 479.959890][T18226] [ 479.959901][T18226] __dump_stack+0x1d/0x30 [ 479.959932][T18226] dump_stack_lvl+0x95/0xd0 [ 479.959977][T18226] dump_stack+0x15/0x1b [ 479.960001][T18226] dump_header+0x80/0x240 [ 479.960051][T18226] oom_kill_process+0x295/0x350 [ 479.960083][T18226] out_of_memory+0x97d/0xb80 [ 479.960126][T18226] try_charge_memcg+0x62e/0xa10 [ 479.960167][T18226] obj_cgroup_charge_pages+0x23/0xc0 [ 479.960195][T18226] __memcg_kmem_charge_page+0x9e/0x170 [ 479.960233][T18226] __alloc_frozen_pages_noprof+0x18a/0x360 [ 479.960288][T18226] alloc_pages_mpol+0xb3/0x260 [ 479.960318][T18226] alloc_pages_noprof+0x8f/0x130 [ 479.960355][T18226] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 479.960407][T18226] __kvmalloc_node_noprof+0x3d4/0x650 [ 479.960437][T18226] ? ip_set_alloc+0x24/0x30 [ 479.960462][T18226] ? ip_set_alloc+0x24/0x30 [ 479.960566][T18226] ? __kmalloc_cache_noprof+0x18a/0x410 [ 479.960601][T18226] ip_set_alloc+0x24/0x30 [ 479.960633][T18226] hash_netiface_create+0x282/0x740 [ 479.960669][T18226] ? __pfx_hash_netiface_create+0x10/0x10 [ 479.960779][T18226] ip_set_create+0x3cf/0x970 [ 479.960825][T18226] ? __nla_parse+0x40/0x60 [ 479.960852][T18226] nfnetlink_rcv_msg+0x509/0x5d0 [ 479.960963][T18226] netlink_rcv_skb+0x123/0x220 [ 479.960990][T18226] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 479.961027][T18226] nfnetlink_rcv+0x167/0x1720 [ 479.961060][T18226] ? __kfree_skb+0x109/0x150 [ 479.961125][T18226] ? nlmon_xmit+0x4f/0x60 [ 479.961162][T18226] ? consume_skb+0x4b/0x160 [ 479.961195][T18226] ? nlmon_xmit+0x4f/0x60 [ 479.961299][T18226] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 479.961370][T18226] ? __dev_queue_xmit+0x136c/0x1f20 [ 479.961405][T18226] ? __dev_queue_xmit+0x148/0x1f20 [ 479.961444][T18226] ? ref_tracker_free+0x37d/0x3e0 [ 479.961490][T18226] ? __netlink_deliver_tap+0x4dc/0x500 [ 479.961578][T18226] netlink_unicast+0x5c0/0x690 [ 479.961616][T18226] netlink_sendmsg+0x5c8/0x6f0 [ 479.961766][T18226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.961806][T18226] ____sys_sendmsg+0x563/0x5b0 [ 479.961885][T18226] ___sys_sendmsg+0x195/0x1e0 [ 479.961954][T18226] __x64_sys_sendmsg+0xd4/0x160 [ 479.961996][T18226] x64_sys_call+0x194c/0x3020 [ 479.962023][T18226] do_syscall_64+0x12c/0x370 [ 479.962125][T18226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.962155][T18226] RIP: 0033:0x7f258528c799 [ 479.962176][T18226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.962259][T18226] RSP: 002b:00007f2583ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.962296][T18226] RAX: ffffffffffffffda RBX: 00007f2585505fa0 RCX: 00007f258528c799 [ 479.962313][T18226] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 479.962326][T18226] RBP: 00007f2585322c99 R08: 0000000000000000 R09: 0000000000000000 [ 479.962341][T18226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.962358][T18226] R13: 00007f2585506038 R14: 00007f2585505fa0 R15: 00007ffd14318348 [ 479.962450][T18226] [ 480.429150][T18226] memory: usage 307012kB, limit 307200kB, failcnt 140 [ 480.436196][T18226] memory+swap: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 480.449155][T18257] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 480.449782][T18260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3665'. [ 480.454569][T18226] kmem: usage 306908kB, limit 9007199254740988kB, failcnt 0 [ 480.482301][T18226] Memory cgroup stats for /syz6: [ 480.482516][T18226] cache 0 [ 480.490597][T18226] rss 4096 [ 480.494131][T18226] shmem 0 [ 480.497103][T18226] mapped_file 0 [ 480.500621][T18226] dirty 0 [ 480.503980][T18226] writeback 0 [ 480.507365][T18226] workingset_refault_anon 110 [ 480.522438][T18226] workingset_refault_file 0 [ 480.527040][T18226] swap 73728 [ 480.530293][T18226] swapcached 7077888 [ 480.537321][T18226] pgpgin 46891 [ 480.540732][T18226] pgpgout 46865 [ 480.553792][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 480.562916][T18226] pgfault 41664 [ 480.566447][T18226] pgmajfault 37 [ 480.569924][T18226] inactive_anon 102400 [ 480.579026][T18265] ip6t_rpfilter: unknown options [ 480.586306][T18265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3666'. [ 480.595620][T18226] active_anon 4096 [ 480.599557][T18226] inactive_file 0 [ 480.632850][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.674686][T18226] active_file 0 [ 480.681447][T18226] unevictable 0 [ 480.701280][T18226] hierarchical_memory_limit 314572800 [ 480.717561][T18226] hierarchical_memsw_limit 9223372036854771712 [ 480.774700][T18226] total_cache 0 [ 480.814628][T18226] total_rss 4096 [ 480.818251][T18226] total_shmem 0 [ 480.852473][T18226] total_mapped_file 0 [ 480.856584][T18226] total_dirty 0 [ 480.860875][T18273] SELinux: policydb version 516537429 does not match my version range 15-35 [ 480.892474][T18226] total_writeback 0 [ 480.896327][T18226] total_workingset_refault_anon 110 [ 480.941224][T18270] loop9: detected capacity change from 0 to 512 [ 480.950919][T18226] total_workingset_refault_file 0 [ 480.968652][T18226] total_swap 73728 [ 480.985393][T18273] SELinux: failed to load policy [ 481.008407][T18226] total_swapcached 7077888 [ 481.035710][T18226] total_pgpgin 46891 [ 481.057341][T18226] total_pgpgout 46865 [ 481.067347][T18226] total_pgfault 41664 [ 481.075812][T18226] total_pgmajfault 37 [ 481.086370][T18226] total_inactive_anon 102400 [ 481.104461][T18226] total_active_anon 4096 [ 481.114369][T18226] total_inactive_file 0 [ 481.122557][T18226] total_active_file 0 [ 481.134454][T18270] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.153505][T18226] total_unevictable 0 [ 481.168943][T18226] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3655,pid=18225,uid=0 [ 481.186246][T18291] loop1: detected capacity change from 0 to 512 [ 481.195419][T18270] ext4 filesystem being mounted at /289/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 481.224673][T18291] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 481.246635][T18226] Memory cgroup out of memory: Killed process 18226 (syz.6.3655) total-vm:93960kB, anon-rss:1252kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 481.271077][T18270] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.3669: corrupted inode contents [ 481.283501][T18291] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 481.303817][T18270] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.3669: mark_inode_dirty error [ 481.318368][T18291] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3675: Corrupt directory, running e2fsck is recommended [ 481.375094][T18270] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.3669: corrupted inode contents [ 481.405023][T18291] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 481.436055][T18299] SELinux: policydb version 516537429 does not match my version range 15-35 [ 481.445261][T18300] loop0: detected capacity change from 0 to 1024 [ 481.452534][T18291] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.3675: corrupted in-inode xattr: e_name out of bounds [ 481.466379][T18299] SELinux: failed to load policy [ 481.472150][T18270] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.3669: mark_inode_dirty error [ 481.504808][T18270] EXT4-fs warning (device loop9): ext4_es_cache_extent:1082: inode #2: comm syz.9.3669: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 481.504808][T18270] [ 481.529205][T18291] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 481.532210][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 481.547856][ C0] EXT4-fs (loop1): initial error at time 2000004437: ext4_iget_extra_inode:5025: inode 15 [ 481.557839][ C0] EXT4-fs (loop1): last error at time 2000004437: ext4_iget_extra_inode:5025: inode 15 [ 481.571381][T18291] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3675: couldn't read orphan inode 15 (err -117) [ 481.600070][T18291] loop1: lost filesystem error report for type 5 error -117 [ 481.600613][T18291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.622900][T18300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 481.656298][T18304] lo speed is unknown, defaulting to 1000 [ 481.702368][T18291] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 481.714698][T18291] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 481.725263][T18291] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3675: Corrupt directory, running e2fsck is recommended [ 481.725844][T18300] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.739225][T18291] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.3675: path /94/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 481.795297][T18291] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 8: comm syz.1.3675: path /94/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 481.838250][T18300] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3677: bg 0: block 112: padding at end of block bitmap is not set [ 481.862101][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.894350][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.975247][T18304] netlink: 'syz.2.3678': attribute type 13 has an invalid length. [ 481.986879][T18304] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 482.091338][T18308] loop2: detected capacity change from 0 to 512 [ 482.144204][T18308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.182675][T18300] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.3677: lblock 0 mapped to illegal pblock 0 (length 1) [ 482.417258][T18300] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3677: lblock 0 mapped to illegal pblock 0 (length 1) [ 482.489889][T18338] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3687'. [ 482.521252][T15340] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.716699][T18300] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.3677: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 482.786159][ T28] audit: type=1326 audit(2000004438.470:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18337 comm="syz.6.3687" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f258528c799 code=0x0 [ 482.893166][T18300] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3677: lblock 0 mapped to illegal pblock 0 (length 1) [ 482.923003][T18300] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3677: lblock 0 mapped to illegal pblock 0 (length 1) [ 482.985334][T18300] EXT4-fs error (device loop0): ext4_ext_remove_space:2954: inode #15: comm syz.0.3677: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 483.052432][T18300] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.3677: lblock 0 mapped to illegal pblock 0 (length 1) [ 483.186844][T13352] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 483.314806][T18394] SELinux: policydb version 516537429 does not match my version range 15-35 [ 483.328353][T18394] SELinux: failed to load policy [ 487.490482][T18416] lo speed is unknown, defaulting to 1000 [ 492.467830][T18482] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 492.587187][T18482] SELinux: failed to load policy [ 492.826315][T18485] 8021q: adding VLAN 0 to HW filter on device bond7 [ 494.443168][ T3543] Bluetooth: hci0: command 0x1003 tx timeout [ 494.502231][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 495.209750][T18492] 8021q: adding VLAN 0 to HW filter on device bond9 [ 495.501486][T18512] lo speed is unknown, defaulting to 1000 [ 495.522924][T18515] lo speed is unknown, defaulting to 1000 [ 495.727073][T18518] netlink: 'syz.6.3718': attribute type 13 has an invalid length. [ 495.755974][T18512] netlink: 'syz.9.3728': attribute type 13 has an invalid length. [ 495.789773][T18523] loop6: detected capacity change from 0 to 512 [ 495.814940][T18534] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3724'. [ 495.836346][T18523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.859730][T18517] loop9: detected capacity change from 0 to 512 [ 495.883547][T18517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.936536][T18535] netlink: 'syz.1.3723': attribute type 13 has an invalid length. [ 496.006318][T18545] loop1: detected capacity change from 0 to 512 [ 496.048531][T18545] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.096046][T18518] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.123002][T18553] loop2: detected capacity change from 0 to 256 [ 496.149822][T18553] FAT-fs (loop2): count of clusters too big (178174) [ 496.167073][T18512] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 496.172470][T18553] FAT-fs (loop2): Can't find a valid FAT filesystem [ 496.263912][T18535] syz_tun: left promiscuous mode [ 496.293834][T18535] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.303134][T18535] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.314695][T18535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.371489][T18532] lo speed is unknown, defaulting to 1000 [ 496.457926][T11297] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.523940][T17745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.878567][T18565] loop6: detected capacity change from 0 to 8192 [ 497.000281][T16141] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.071544][T18568] SELinux: policydb string SE nuxU¼ does not match my string SE Linux [ 497.106613][T18568] SELinux: failed to load policy [ 497.429212][T18581] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3738'. [ 497.500817][T18564] ================================================================== [ 497.509060][T18564] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 497.516210][T18564] [ 497.518569][T18564] write to 0xffff888152d5f6dc of 2 bytes by task 18565 on cpu 1: [ 497.526323][T18564] fat16_ent_put+0x28/0x60 [ 497.530870][T18564] fat_alloc_clusters+0x57b/0xc50 [ 497.535940][T18564] fat_get_block+0x258/0x5e0 [ 497.540560][T18564] __block_write_begin_int+0x400/0xf90 [ 497.546080][T18564] cont_write_begin+0x5fe/0x970 [ 497.550979][T18564] fat_write_begin+0x4f/0xe0 [ 497.555644][T18564] generic_perform_write+0x183/0x490 [ 497.560970][T18564] __generic_file_write_iter+0x9e/0x120 [ 497.566560][T18564] generic_file_write_iter+0x8d/0x310 [ 497.571975][T18564] vfs_write+0x5a6/0x9f0 [ 497.576268][T18564] ksys_write+0xdc/0x1a0 [ 497.580553][T18564] __x64_sys_write+0x40/0x50 [ 497.585180][T18564] x64_sys_call+0x27e1/0x3020 [ 497.589900][T18564] do_syscall_64+0x12c/0x370 [ 497.594522][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.600452][T18564] [ 497.602810][T18564] read to 0xffff888152d5f600 of 512 bytes by task 18564 on cpu 0: [ 497.610635][T18564] fat_mirror_bhs+0x1df/0x320 [ 497.615348][T18564] fat_alloc_clusters+0xb48/0xc50 [ 497.620395][T18564] fat_get_block+0x258/0x5e0 [ 497.625038][T18564] __block_write_begin_int+0x400/0xf90 [ 497.630542][T18564] cont_write_begin+0x5fe/0x970 [ 497.635448][T18564] fat_write_begin+0x4f/0xe0 [ 497.640080][T18564] generic_perform_write+0x183/0x490 [ 497.645409][T18564] __generic_file_write_iter+0x9e/0x120 [ 497.651000][T18564] generic_file_write_iter+0x8d/0x310 [ 497.656413][T18564] vfs_write+0x5a6/0x9f0 [ 497.660782][T18564] ksys_write+0xdc/0x1a0 [ 497.665050][T18564] __x64_sys_write+0x40/0x50 [ 497.669670][T18564] x64_sys_call+0x27e1/0x3020 [ 497.670386][T18566] 8021q: adding VLAN 0 to HW filter on device bond11 [ 497.674387][T18564] do_syscall_64+0x12c/0x370 [ 497.674418][T18564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.674445][T18564] [ 497.674451][T18564] Reported by Kernel Concurrency Sanitizer on: [ 497.674470][T18564] CPU: 0 UID: 0 PID: 18564 Comm: syz.6.3733 Tainted: G W syzkaller #0 PREEMPT(full) [ 497.674508][T18564] Tainted: [W]=WARN [ 497.674518][T18564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 497.674536][T18564] ================================================================== [ 498.592224][ T7151] Bluetooth: hci0: Opcode 0x1003 failed: -110