last executing test programs: 6m17.675817268s ago: executing program 32 (id=129): openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendto(r2, 0x0, 0x0, 0x20000080, &(0x7f0000000340)=@llc={0x1a, 0x311, 0x80, 0x8, 0x9, 0x2, @random="182a7a58767d"}, 0x80) write(r1, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fd", 0x1d) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7be}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x0, 0x1}, {0x20}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) r5 = socket(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x3, @loopback, 0x40004}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000200)) sendfile(r5, r6, 0x0, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32], 0x20}}, 0x0) 5m57.964202219s ago: executing program 4 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x8, &(0x7f00000000c0)=ANY=[], 0xfe, 0x567, &(0x7f0000000b00)="$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") linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400) 5m55.630683825s ago: executing program 4 (id=231): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e25, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000001e80), 0x0, 0x33, 0x0) socket$netlink(0x10, 0x3, 0xb) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000040)=""/11, 0xb}], 0x1, 0xfffffffd, 0x2b7) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x101, 0x2) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 5m55.237380795s ago: executing program 4 (id=234): r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000040)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) (async) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f0000000100)="d5c0", 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x93}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x6, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xa, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x6, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xa, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r4, 0x25, 0x0, @void}, 0x10) write$9p(r1, &(0x7f0000000280)="888b1d4abc2f19abf994814d5bcf90a5004bb896186f17d4dd88dbc8638723732f112a1ce71cd607b46f238fb28712f0dd0b740144ccd1de35c1f535a5d3f2fa8d7a36164fe3965d491b", 0x4a) (async) write$9p(r1, &(0x7f0000000280)="888b1d4abc2f19abf994814d5bcf90a5004bb896186f17d4dd88dbc8638723732f112a1ce71cd607b46f238fb28712f0dd0b740144ccd1de35c1f535a5d3f2fa8d7a36164fe3965d491b", 0x4a) syz_emit_ethernet(0x7e, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "d4116f", 0x48, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "c814e501911288132eb3d141816167133100d01c1ec5ddf4", "0770f8855a455e40fe813559534ef7e719e93a63cb0ea6c275669cccc33933bf"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "d4116f", 0x48, 0x11, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "c814e501911288132eb3d141816167133100d01c1ec5ddf4", "0770f8855a455e40fe813559534ef7e719e93a63cb0ea6c275669cccc33933bf"}}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) write$P9_RATTACH(r1, &(0x7f0000000180)={0x14, 0x69, 0x1, {0x10, 0x4, 0x5}}, 0x14) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000010004a0400000000000001007a000000", @ANYRES32=0x0, @ANYBLOB="00000200800300002c0012800b00010062726964676500001c00028005002a000100000008001a000000000005002b000f000000"], 0x4c}}, 0x0) 5m54.861615406s ago: executing program 4 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = timerfd_create(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000150000e08d4cea9e7a04eea82e847518a300090000000008000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000100), 0x0}, 0x20) r3 = syz_io_uring_setup(0xf02, &(0x7f0000002100)={0x0, 0x191e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) r7 = fspick(r1, &(0x7f0000000040)='./file0\x00', 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x909046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88a0a0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000140)='$@\'\x00', &(0x7f0000000400)="dcdba4749ef3a0aed506837f39dadd364086a36cbdff66ee9058500d3bfcd40c7069091b7b3f902a9ffb35dd25f0ea3f9696e4286beac9bf5863e2711061d32da34140f2323e088b975f6a72ae18d914153b14b5b807987aa0e68c2c8e1ecc710f3310a3c3310fa222191e4fd5f21ba8a356c9aee6ffab7de81ae74143ed068d73d6f3fd664c8786095a2a38574385e4ca9911575201bf2c90ea510b48618404a31f319072afa18f3b7ab9d568d4efb00c0aefb8025cb006de65c1d10e94", 0xbe) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r3, 0xf, 0x7929, 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 5m54.452352157s ago: executing program 4 (id=236): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) accept$inet(r2, 0x0, 0x0) (fail_nth: 4) close_range(r0, 0xffffffffffffffff, 0x0) 5m54.192329202s ago: executing program 4 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 5m54.008930531s ago: executing program 33 (id=238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000340)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 5m42.707743009s ago: executing program 6 (id=240): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f00000000c0)) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$setperm(0x5, r2, 0x802) keyctl$get_security(0x11, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000500)={[{@jqfmt_vfsold}, {@data_err_ignore}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0xfd}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x6, 0x473, &(0x7f0000001200)="$eJzs3MtvG8UfAPCv7Th9/+JfKY+WFkILouKRNOmDHrgUgcQBJCQ4FHEKSVqVug1qgkSrCloO5YgqcUcckfgLuFAuCDghcUICiSNCqlAvLZyM1t5NXcdO7MSxA/58JCcznlnNfHd37PGs1wEMrNHkTy5ie0T8EhEjtey9FUZr/+7cujz9163L07moVF7/M1etd/vW5emsarbdtlqmUlmm3WtvRUyVy7MX0vz4wrl3x+cvXnr2zLmp07OnZ89PHj9+5PC+4WOTR7sSZxLX7T0fzO3d/fKb11+dPnn97e+/TPq7PS2vj6NbRmt7t6knut1Yn+2oS+eG+tgROlKIiORwFavjfyQKsWWxbCRe+qivnQPWVaWSr2xqXXylAvyHJRN1YBBlb/TJ59/s0aOpx4Zw80QsrmPcSR+1kqHIp3WK6Wek9TAaESev/P1Z8oh1WocAAKh340REPNNs/pePB+rq/S+9hlKKiP9HxM6IuC8idkXE/RHVug9GxEMdtt94hWTp/KcysqrA2pTM/55Pr23dO//LZn9RKqS5HdX4i7lTZ8qzh9J9cjCKm5L8xDJtfPPiT5+0Kquf/yWPpP1sLpj244+hhgW6mamFqbXEXO/m1Yg9Q83izy3OeZP58e6I2LPKNs489cXeVmWlFeNfRhcm5ZXPI56sHf8r0RB/Jtfy+uTEc8cmj45vjvLsofHsrFjqhx+vvdaq/ZWP//q6eaMSWxvO/4bdWsptjpi/eOls9XrtfIcN/Bxx7dePW36mWe35P5x7o5oeTp97f2ph4cJExHDulaXPT97dNstn9ZPz/+CB5uN/Z7pNcvwfjojkJN4XEY9ExKNp3x+LiP0RcWCZXfDdC4+/03n8y6zKd1ES/0zT17/F87+UpO4e/84ThbPfftV5/Imt6fE/Us0dTLdp5/Wv3Q6udf8BAADAv0G++h34XH5sMZ3Pj43VvsO/K7bmy3PzC0+fmnvv/Eztu/KlKOazla6RuvXQiXQtL8tPNuQPp+vGnxa2VPNj03PlmX4HDwNuW4vxn/i9UPv/W197CKwr92vB4DL+YXAZ/zC4jH8YXMY/DK5m4//DPvQD6L0V3v+39KofQO+Z/8PgMv5hcK00/vf35l5koLda3hufX9Mt/xJ9Snw9vLbfamg/EfkNEvIGTRTaqHM1HYW1Z4rRtPJQ2z9mcU8ie1NfufKmpkV9fFECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoon8CAAD///T43is=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000000000400000000000000", @ANYRES16=r4, @ANYBLOB, @ANYRESOCT=r5], 0x50) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000400)={'lo\x00', 0x2b4b}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00'], 0x48) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000240)="63eced8e465c1c76e716c0be4b07", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50) 5m40.618057852s ago: executing program 6 (id=291): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$eJzs28Frm2UcB/Bfm3bdOttUndMNxAe9TJCw9uBFDxbpQBZRtlXYBOGdTTX0NSl9QyEiVk9e/UMEEbyIIN70YC/+B4q3XjxOEF9polsjiVt0NCKfzyUPeX7f5PfwJIE3PO/B8x+/s7VZ1DazTkxPTcX0dkS6lSLFdPzpg3j6uW++ffzq9RuXV+v1tSspXVq9tvxsSmnxia9ef++TJ7/unH7t88Uv52J/6Y2Dn1d+2j+7f+7gt2tvN4vULFKr3UlZutlud7KbeSNtNIutWkqv5o2saKRmq2jsDMxv5u3t7W7KWhsL89s7jaJIWaubthrd1Gmnzk43ZW9lzVaq1WppYT44avqeqmZuj16OW2VZRpTlbJyIsizLUzEfp+OBWIjFqMZSPBgPxcNxJh6Js/FoPBaf/fBp9zABAAAAAAAAAAAAAAAAAAAA3D/j3v9/rlc16a4BAAAAAAAAAAAAAAAAAADg/+Xq9RuXV+v1tSspnYzIP9pd313vP/bnVzejGXk04mJU49fo3f3f1x9feqm+djH1LMWH+d4f+b3d9cpgfjmq8czw/HI/nwbzczF/NL8S1TgzLD8bK0PzJ7+48NSRfO2Fanz/ZrQjj404zN55//eXU3rxlfpf8ud7daNVjmN7AAAA4L6opduGXr/XaqPm+/kx/h8YuL4+zJ6fmejSiYii++5WlueNHYOhgwv/jTZ6gxN3q6nEvb/gbESM18YvZVn+m1V892P/I/eP4jMx2S0Y/U2Zi4i7xCsjm5+KiONdzqkYeKbcG1U86V8mjsOdTZ90JwAAAAAAAAAAAIxj5FHBub87RVgZ68jhpNcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8zg4cCwAAAAAI87dOo2MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICvAgAA//8AfMuR") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) r4 = syz_io_uring_setup(0x6d58, &(0x7f0000000180)={0x0, 0xfbfb, 0x10, 0x0, 0x174}, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340)) io_uring_enter(r4, 0x5404, 0x8f54, 0x83, &(0x7f0000000380)={[0x8]}, 0x8) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 5m40.372114115s ago: executing program 6 (id=295): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @remote}}}}}}, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b9fd1bf1b9e7835e5bc3c3d9ab54cc2d16ef0d42a7fb75eb3f1a9dd19067bdf499e02fd4457541d3311e", @ANYBLOB="fb7fa670bdee", @ANYBLOB="0096d7bee69605fbbd656c7b6f1d42351e3c7d1ce6d6d95720566ec6565f64e99afdacb99666f2851764cc7d7cf72e975ff5bd40b7b97cd4709b78223a69764ad2242a3351a3095f5661d303b8038e92317c75b9ff537674f2c3d457f5fd0aac50398c45eea3a6ce78397f46ae3274b8d9f61c1e0a6adff0ac5ddfe1d93e759ec783a182cb43f642583023a2b47a23c049bfacd1bae4bb02d405476ebed12c58a058afe270779ffe991a17d407b1021d29c6c0c4af7248fa79563558f30070f33626f2ecc28747b0839f6fe13fef7e1fdff15da09c52f1ff330c6525811ab6aa5fd160eb13e3e0d5", @ANYRES64=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r1, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="e308bcef0cf706767687d83f1bf4cbfe71a6e02e6e756303dc1ed91a0e4795097a8d3560e966334d80f2c4c776e0d50c75146f24c8c94536ff2cd2a2c452a255296fbbf00cdbdc8d63afb212"], &(0x7f00000001c0)='syzkaller\x00', 0x5536, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$sock(0xffffffffffffffff, 0x0, 0x1) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x308c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x3}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xfff3fffffffffffc, 0xffffffffffffffff, 0x1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c200000c3b587191f1278100410088caa5f3e9f449b54d5e69b3c6b9b2697724"], &(0x7f0000000480)={0x0, 0x3, [0x7ee, 0xda, 0x365, 0x261]}) poll(&(0x7f0000000100)=[{r6, 0x84}], 0x1, 0x3ff) syz_emit_ethernet(0xae, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "fee9fffffff5000000000000"}, {0x1, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r7, 0x8910, 0x0) ioctl$sock_netdev_private(r7, 0x8914, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9, 0x1, 0x0, 0x0, 0x0, 0x7, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x72, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, r5, 0x8) sendto$inet(r6, &(0x7f0000000140)='^', 0x1, 0x2080, &(0x7f0000004ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) listen(r6, 0x8) 5m38.140449105s ago: executing program 6 (id=304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c88c}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf2509000000080003", @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x154) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x20000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xffffffffffffffff, r5, 0xe, &(0x7f0000000040)="111539bef9277ae42a88e7f064c8253d670fade4cd9f0fe2bc10fcd17536ebf7e79e82e10c563ab55eb5ef43fef9bd33fe5782d09836dc4a906cbeaee95803114b79e7ef2df5c6926b8051846d48cbf64e69914b6d56a346eefbc91f0b7271f229ec370829580b79126c3870ed1cfb3ef099c8885e7203c90697feaec53534116dc277e6b239361ab65978e2040ae06750c0cef433956cb10e2c7bf3b9d3574d2f5182dbe605e77fbe8ea77d95609270d38060d1e7acd11533cb56d364e15e6c53edd27d50dd69a05de7a0f862fd453037bc847dc0db997b0519fed3b91c35") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r7, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r6], 0x13) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000140)) 5m38.006035412s ago: executing program 34 (id=304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c88c}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf2509000000080003", @ANYRES32=r2, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x154) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x20000000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xffffffffffffffff, r5, 0xe, &(0x7f0000000040)="111539bef9277ae42a88e7f064c8253d670fade4cd9f0fe2bc10fcd17536ebf7e79e82e10c563ab55eb5ef43fef9bd33fe5782d09836dc4a906cbeaee95803114b79e7ef2df5c6926b8051846d48cbf64e69914b6d56a346eefbc91f0b7271f229ec370829580b79126c3870ed1cfb3ef099c8885e7203c90697feaec53534116dc277e6b239361ab65978e2040ae06750c0cef433956cb10e2c7bf3b9d3574d2f5182dbe605e77fbe8ea77d95609270d38060d1e7acd11533cb56d364e15e6c53edd27d50dd69a05de7a0f862fd453037bc847dc0db997b0519fed3b91c35") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r7, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r6], 0x13) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000140)) 5m37.301732951s ago: executing program 5 (id=313): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000180)=0x80) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m36.971986068s ago: executing program 5 (id=314): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd29, 0x25dfdbfb, {0x2, 0x90, 0x0, 0xcd, 0xfe, 0x1, 0x0, 0x6, 0x2000}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4000) r1 = mq_open(&(0x7f0000000140)='+/\xfc@,]!`', 0x80, 0x0, &(0x7f0000000180)={0xad5, 0x4, 0x1, 0xfffffffffffffff9}) mq_timedsend(r1, &(0x7f00000001c0)="8fe78e783808e3706deddcaa0b19c4a9b2f0692567d1728208f60ed51dffc0e157dbce96c4f59474c31d1d1171d35e42e360db61d8ecbf34341412ea712e1174cff20e2fc75804e81244260998374ba5b317f268", 0x54, 0x4, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) mq_getsetattr(r1, &(0x7f0000000280)={0x0, 0x7f, 0x8, 0x8}, &(0x7f00000002c0)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) fremovexattr(r0, &(0x7f0000000340)=@known='trusted.overlay.nlink\x00') ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000380)) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f00000003c0)={0x0, 0x7}) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000400)={0x2, 0x2, 0xfffffffffffffffc, 0x9, 0xe, 0xfffffff9}) (async) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000440)=0x32b, 0x4) (async) write$tun(r0, &(0x7f0000000480)={@void, @void, @ipv4=@tipc={{0xa, 0x4, 0x1, 0x6, 0x4a, 0x68, 0x0, 0x4, 0x6, 0x0, @remote, @local, {[@noop, @timestamp={0x44, 0x10, 0x7c, 0x0, 0xe, [0x101, 0xd, 0x3e8]}]}}, @payload_conn={{{0x22, 0x0, 0x0, 0x1, 0x1, 0x6, 0x2, 0x2, 0x53, 0x0, 0x0, 0x5, 0x4, 0x0, 0x5, 0xbd4, 0x1, 0x4e20, 0x4e22}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x4a) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000900)={r4, "b06c255fce4fb17ad32ce1601f648b22"}) (async) r5 = pidfd_getfd(r0, r2, 0x0) sendmsg$inet6(r5, &(0x7f0000002000)={&(0x7f0000001900)={0xa, 0x4e24, 0x3ff, @local, 0x2b6}, 0x1c, &(0x7f0000001f40)=[{&(0x7f0000001940)="b287ee8d1dc47878f69c27ab8d27cf8117e61dc488c437fb58d245e083", 0x1d}, {&(0x7f0000001980)="6ac9c4b9ac59ebb2d48d01869e5d934b780826027f1e640dcc0bc14fea1c627b94c5a28fe6cb3d4f9b73bef1899353b4e5415911e5aa69f8e62f40d2b77f4b6716e228b819351fb73f84fefdf3eaaf5c5fc5fd03627f0ad924f1dcc393973dc75fd9947318e96241ea54ca823fb5e016e59cf823a03a538a893419f2a7d9c498a4c993a5164d20adc3f07bd63842d55493f645bc0e48df111a352e8e5a", 0x9d}, {&(0x7f0000001a40)="8a58d7e3f114439e506c632b1ce02ac8dc7edf18842a6c3b12d5ff94a2b7c0013421d1cf5d027390161d5e4b7f0d851e2bd18a4a5b18af9e1f9a2d0abceb87d02bc005ae9c1e8ece7254cd13666479d17406559cc7cc99425ee34c1d6177c8589cb8bfa67f27eb43aa632b45add751f1ef8bb6f109544e48eed4260fe96ceb5663a8e0aabcbe", 0x86}, {&(0x7f0000001b00)}, {&(0x7f0000001b40)="111d84d015d4b5747018a7e2cce858b1183351206f03a181f21e86a6a3ecb2bbae38f9b6990fdae4d36d13c3f30eece7b4a8162a9aaa77db33b983283f931785d52c366d24f6ee1db46da4dcefbb3c80dded39e090162f4285210f561a07392548ad560905233a5fad9353c4df5af2e3c7974393268a00eef86a1941064f508dc43e155f2c21c7b52c6f55e5776886b13bc044bfcbf148fc6b4ed24a7935e71463a6e8c777bb26ad1cac8380ab11f4c834146c474fd6f461fb5bbe15da9fc58ca43d8dcd63e7a981baefc94619ac08ffc4d2", 0xd2}, {&(0x7f0000001c40)="c3b8cf70f3adfa61c36e6eec1c107603a11bf79d3ea4384cdf5d79a7a68766f2aede79efdc389c24b165b12296e90d9f2a3cffbe9bcaf3fd700043d88a3b37580362d339e8919d7ff493e5d8e7b569078cc829452919de78e9cd351cd6d6647f5dc9873ebf20e851f4948b4447f38e32c0adf7fa97c74f3300e202a137a7cb32c685d4e8f2bc3f50aeacc51431a21f22ea2714ecee19f5865adaf0a493146d", 0x9f}, {&(0x7f0000001d00)="5494cd4b9349dd58e6ce77f3a358248e636d02443e32e213e32501067439c094df9f8fb1403a41eac6671bd72a5bc315e936bed95b7f93278eee283e8c900a613cfa3c59477126e82d0b0a69003d949303aadb6cd94b092e20b397c418253bcb9a95fe8d1ab27dd824e0ef9b66577fdb3cf9dd2fbfd061571126ad1e4497d47179f910cebb56aa2bdd872dc4b3377cf93a919f7b573752bb219da96615cda5d9d91e4c693d48cb8466a8525baf3dada0299fd22bef80cb11f55da03f5121c7334851306dc442a32e7a0c6ec7c6ef354ed2db8d080ebc77047ef730", 0xdb}, {&(0x7f0000001e00)="126b69b5b835a6df68d3f41f2608bca0e83bf5ed90d58928a85fc4f966521123c36b1a337295bde2381588299d4aad7cc712afc2a7913e", 0x37}, {&(0x7f0000001e40)="0c8ee4a18e4ed0ffc21df02a83d14a68e90f5c6e2a6a27de494d436ba0fb76c2c8b3a1fc68408b069b0a4615f463b8b96f3c443144b0cb690ed04d0138a16409afc54e9d8f8b3d828b6dc31c72299b96f25fc8f6f039edf0f809ebe30483382e13e524ae6658a07b478bcb27a8f5b776bbb70e749500bd818d257c9179cc4a735ff1f47413892cddf49550b556f7fcdf605f2b76cafd762693c8e79383e950ca4939322bfb72f67c101d4dcd8db2ef3afe126d1643f33dbed086f669b9a3a01dd52094d4ba", 0xc5}], 0x9}, 0x0) (async) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000002040)={0x0}, &(0x7f0000002080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000020c0)={r6, 0x1, 0x30}, &(0x7f0000002100)=0xc) sendmsg$rds(0xffffffffffffffff, &(0x7f0000003bc0)={&(0x7f0000002140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000002180)=""/192, 0xc0}, {&(0x7f0000002240)=""/130, 0x82}, {&(0x7f0000002300)=""/79, 0x4f}, {&(0x7f0000002380)=""/249, 0xf9}], 0x4, &(0x7f0000003a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0xf6, 0x9}, &(0x7f00000024c0)=0x8, &(0x7f0000002500)=0x9, 0x2, 0x6c80, 0x80000001, 0x5, 0x50, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x800}, &(0x7f0000002540)=0x8001, &(0x7f0000002580)=0x2, 0x0, 0x1, 0x5, 0xfbf47f0, 0x0, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x3, 0x6}, &(0x7f00000025c0)=0x1, &(0x7f0000002600)=0x2, 0x0, 0x300, 0xe, 0x10ad, 0x18, 0x7}}, @rdma_args={0x48, 0x114, 0x1, {{0x8, 0x5}, {&(0x7f0000002640)=""/125, 0x7d}, &(0x7f00000039c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f00000036c0)=""/8, 0x8}, {&(0x7f0000003700)=""/43, 0x2b}, {&(0x7f0000003740)=""/127, 0x7f}, {&(0x7f00000037c0)=""/199, 0xc7}, {&(0x7f00000038c0)=""/246, 0xf6}], 0x6, 0x10, 0x7}}], 0x150, 0x44040080}, 0x40) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000003c00)={'icmp\x00'}, &(0x7f0000003c40)=0x1e) (async) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000003c80), 0x420000) fstatfs(r7, &(0x7f0000003cc0)=""/86) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003dc0)={{r3, 0xffffffffffffffff}, &(0x7f0000003d40), &(0x7f0000003d80)}, 0x20) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000003e00)=0x19, 0x4) (async) ioctl$int_in(r9, 0x5452, &(0x7f0000003e40)=0x4) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000003e80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) quotactl_fd$Q_QUOTAOFF(r8, 0xffffffff80000301, r10, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000003f80)={'syztnl0\x00', &(0x7f0000003f00)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x3d, 0xa89, 0x14, @dev={0xfe, 0x80, '\x00', 0x38}, @local, 0x4, 0x700, 0x10, 0x4}}) 5m36.620257247s ago: executing program 5 (id=315): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x1) 5m36.01412975s ago: executing program 5 (id=320): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x80000011}) r4 = syz_io_uring_setup(0x6d58, &(0x7f0000000180)={0x0, 0xfbfb, 0x10, 0x0, 0x174}, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340)) io_uring_enter(r4, 0x5404, 0x8f54, 0x83, &(0x7f0000000380)={[0x8]}, 0x8) mknodat$loop(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 5m35.496555947s ago: executing program 5 (id=328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) 5m35.066337761s ago: executing program 5 (id=333): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000180)=0x80) r2 = getpid() syz_pidfd_open(r2, 0x0) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m35.042850172s ago: executing program 35 (id=333): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) r1 = accept(r0, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @empty}}, &(0x7f0000000180)=0x80) r2 = getpid() syz_pidfd_open(r2, 0x0) bind$802154_raw(r1, &(0x7f0000000080)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r3, 0x1, 0x22, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4m58.040700373s ago: executing program 7 (id=523): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x6}, 0x10, 0x0, 0x800000, 0x6, 0x3, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r0, 0x0) 4m55.654226792s ago: executing program 7 (id=536): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x100000004, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000003c0)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000340), 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000340)=""/9, 0x9, 0xc9110160, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r4, &(0x7f0000000980)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/189, 0xbd}, {&(0x7f00000006c0)=""/168, 0xa8}, {&(0x7f0000000780)=""/48, 0x30}, {&(0x7f00000007c0)=""/180, 0xb4}], 0x6, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000380)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000200)={0x10001, r6, 0x35, {0xaab9, 0x1}, 0x5}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) 4m55.407064835s ago: executing program 7 (id=538): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x21, 0xff9, 0x9}, 0x28) syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000600)='./file0\x00', 0x40000, 0x30) sendmsg$SMC_PNETID_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x9df36cc7d1878f77, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4890) 4m54.236278728s ago: executing program 7 (id=544): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x900}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x8, 0x3, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x44000, 0x0) 4m54.067868597s ago: executing program 7 (id=545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}]}, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xffffffd0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m53.873753028s ago: executing program 7 (id=546): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000701010000000000000000010000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40400c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m53.839397229s ago: executing program 36 (id=546): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x800, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000040), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000701010000000000000000010000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x40400c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m17.469012542s ago: executing program 2 (id=2085): ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) mkdirat(0xffffffffffffff9c, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x2, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x2d, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000440)={0x2d, 0x0, 0x7fff}, 0xc) bind$xdp(r5, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x22}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) writev(0xffffffffffffffff, &(0x7f0000000880)=[{0x0}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) r9 = dup(r7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r7, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) 1m16.444991657s ago: executing program 2 (id=2102): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x99f}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000580)=0xe8) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r4}, 0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="480100001900100028bd7000fc0e000000000000000020000880adf44ecc02dcb58e6315d2af0f13ed978e1d734e0b352f00"/59, @ANYRES32=r1, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x200000d0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$kcm(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000008c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0817cafb5e275a7f41000700bec1921add8ba37cf204aa0c97813ededa003500020000005a8b00b5ce9f0d6e4471a81af46953b56e897ef6"], 0x40}, 0x1, 0x0, 0x0, 0x48894}, 0x400c000) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 1m16.100808395s ago: executing program 2 (id=2104): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (fail_nth: 7) 1m15.716889106s ago: executing program 2 (id=2107): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x4, @thr={&(0x7f0000001840)="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", &(0x7f0000002840)="12c3222e3eecf39b2abc5d15482911e5841392c145c088b32b8bab3bcf37f7815b6e045bce618cf04a50a27152bdfc04c1e17c9d34920885333c98596e1c6de1daf5b689ef24acfa72202bd21bb32de13a43681a6123e306d86eca64f953e02b49f2cc8e87f3376ba17e5b094765a2be56fe831d788e185610739d5aca0f1afe0cef5e66574ba6b2543c36c4368b895f6ac730"}}, &(0x7f0000000400)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000440), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000340)='./file0\x00', 0x155400, 0x8) mprotect(&(0x7f00001ea000/0x3000)=nil, 0x3000, 0x7) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x0, 0x42, 0x0, 0x1}, 0x28) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020005ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4(r6, 0x0, 0x0, 0x80000) syz_pidfd_open(r2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000240)={0x80000011}) 1m15.348284446s ago: executing program 2 (id=2116): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) memfd_create(&(0x7f00000000c0)='\x02A\xbb\xcc\xeb\x14\x10\xef\xa7\x16\xd7m\x14oG1\xff\xf9\x028\xc6\xc8\xd9\xd5c\xb1E \x06\xa0\xc9\xcf\x17ag\xf7iX\xf2O\x04k\x9c!\x13\xd8y\xd4\xdc\xbf\xc8\x8cWO\xc37\xf7\x83\x90\xce\xefd\x18\x95%\xa1\xa3\x15b\x9cF4>\xbb\x11d\xd9\x9f\x10]\xdc\xe3\x03\xa4\xeb\xb0', 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000000000400000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1m15.179601114s ago: executing program 2 (id=2123): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x8, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x20}}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) getsockopt(r5, 0x8001, 0x9, &(0x7f0000000240)=""/84, &(0x7f00000002c0)=0x54) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1255c96, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x890) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) 1m15.046584842s ago: executing program 37 (id=2123): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x8, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x20}}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000080), 0x12) getsockopt(r5, 0x8001, 0x9, &(0x7f0000000240)=""/84, &(0x7f00000002c0)=0x54) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1255c96, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x4b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000050}, 0x890) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) 12.108947389s ago: executing program 3 (id=2638): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8, 0x1000000}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 11.991677275s ago: executing program 3 (id=2640): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000004c0)='./file0\x00', 0x4804, &(0x7f0000000000)=ANY=[], 0x0, 0x550, &(0x7f0000000d80)="$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") (fail_nth: 24) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 11.90632334s ago: executing program 3 (id=2641): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4040080) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa12ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x939b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x5}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000780)=ANY=[], 0xfce) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.posix_acl_access\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x860c1}, 0x40844) 11.71479691s ago: executing program 3 (id=2642): r0 = socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000c00)={[{@nojournal_checksum}, {@noblock_validity}, {@discard}, {@errors_remount}, {@data_writeback, 0x0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@nodiscard}, {@nogrpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@jqfmt_vfsv1}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@journal_checksum}, {@abort}, {@dax_never}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}], [{@audit}, {@fowner_lt}], 0x2c}, 0xa, 0x532, &(0x7f0000000480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0xfffffffffffffffc, &(0x7f0000000480)="18607651149d7b10b4024fbbdc08899b8f589df2db8ebcd920a2b5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b250a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000080)={0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0xa, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000)=r0, 0x4) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 10.714483903s ago: executing program 3 (id=2645): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000100039042abd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e22000005000900290000000800140005000000080003000a0101006c031680100001800c000400f5ffffff0d0000"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') openat$cgroup_int(r9, &(0x7f0000000000)='memory.oom.group\x00', 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x9}]}}}]}, 0x40}}, 0x40080c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000040000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES8=r2, @ANYRES32=r10, @ANYRES64=r11, @ANYRESHEX=r11, @ANYRESHEX=0x0, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)={0x113c, r13, 0x1, 0x70bd29, 0x2, {}, [@TIPC_NLA_NODE={0x10b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x18, 0x3, "c4694c42a0b571ba9d9aa4e912f4d4fb09158348"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "0596f79e08469c385fcbe445c90564a815db59dec7c60064245e2bdb983e21a5b7fa588fe7a0cf24cfcb5e4c654b1cbb6a38555ffb15b83f3d89bdcd28c5ccc2ee085516588d32c00e6f969b123a85b66cbe4740fc1c664a19379b6565f5024a7d5623edc326d9b383acf0bd43ffd259250dbd9a5d33cc1e2d8957a3453c585ae7a609f83bdd2a53832eb6f11af1e7fbb287aa9fd63723c23f69d37768ae540760c885523727be775ec4aeb7f8f993f21ae73a291c686f84fba6cb69e0f28c910343cc7d30c4cc6fe7c9cdd065cca5dcb9db289c885e585e0aced023d5fe63b5e8584438d8503f7f684a97a7f8bd1c3919f8957b97e290ddf8075a803a0cbad76a844171c2cb665ad41e20efe066c781dadd5baa8a35fdb4c8872ca8376ab4be6fcc12fea00b9e21b400549b157986595a2f70614c3f9a1009aa8f35a2b6bdfca6f7fefc8fb0899a10b2f4386e4525e6ce46899e63eda6fd81dacc6ecf8628a212807b8020a4f0d038d81e061e9ee82bdb4e7d19667e4f8a347b851af2f8ba89b5663fe4f207af61885ebcd9197befee768923b930421c9ed6b48c1d3700ca63d6d872df42f6fda19115310a0ee0f9831f9db42fe952111be77bdccf7d51252cc05d2398335cd5e5b87b9a34f5a771c8574535bfc7cc9f03f0408f71e8408795ba05aea62ae96a08b65e1515014238ba18b17e720ba6caf2e3050a7196edfbe24ee39efdcbbfc3e31ea571f26e2b2a31b75334937c2c6db57f9b4e34e54b3cddca8c5b499184a9efad030d400db41515941a87d33559ff555a812194ad2a3df0a69dcf26d207dd34b5f3bc84099dc0d380ef3fb75edecb0e665f285624ec762b7cc5e492e4ff2605c966209573332f3d7e6b5f42472009142f64b4b64540439f2534dd65b936a21f5593c7ea660eb325c10bc63afaab46eceb452ce59ee53dddf6cba07c4663032b0e6c509e57bdb737211e196ffca84116d92d7b96ff112a77d9438a7856c20694c7d83820cf4fab4a397df780cbff7a026f0f1edf714d02596e613d709df2202332a732aa62cf3c3a1d64a584de4dacaa718ad57ec4564a99839d04b599c91d29b692bd036a2ae016c9880cba653a43bf89e90e51e4fabc2d7583d06558489c547f4c6cb4018a28f6b9f229e4a7eae3b4bd7e27e33e706afd6dd9525f2474d968a0f2281a52ca6357e93b18670962e5d53b0f74f690c4752a58c1600282c438a02c864f09bceb6e5108d8706ec8e2b4ee8cf50e570028f19e099169ff4de542bd1583ffca2fcc9a9ece96952aa55446acc9e4c86aa1230b5a1dc00755ea8445579fe07e9a2ac3cc0b24806a0469ec618406dada1f257f5fc9b79d9f3913ec797aeff7339a35e83c06c5575cf1f6a64c3b0f4df22a198ad860b17862e9887a6103602be8385a603c79e3921a6db2ba90f6d7bec569aa2d3212129044e77bdbee3dbfa394e45ebed9693638cded08abe404a492613a549056a073ec213f173a20fc3b231e04f956c21372aa439831f74c8c940ebd54f48820e2fc679953cd12f29912d3932826772b82aeec4b5e05ef66bc6eab63bf074dacb13a8838e426cd46037aad02e221bbf52d7d8c55dc2eef7ab73b7abb3455f9c938dd642102f371d162f29a351b0c153d86b890649e584d3b9d3e3618adf46dbd403c9ebc68328288fca08568d20761f78b495c776633b592abb6c736a286a1ee48d108124f038ff22aea266f4e5255bdde3417e0e6591c01a8dea4ae79da7988613aa3bc162799c5a2cfd7385839cdaf9a6c77b35d95cf674c498c11871e973e3244830e60d1b5e59f63275d1c26616454312bff4090bdf1c86a3a3994f58936b3acc1b023af0f40acddddb23089ffda901e6a6ced3f923c8f0b5a038f51fcaf3174af1ae18b521b7e34c6b8202430c33d47a1ec77a07abc6423e851587e7010ae20b2a2e52722181d4f2baecee9e763753a47429d1e6a8dd0ec89ffe7dcdee86bb14ef1ad25ca44f904a72fbcbe7df0822a0649c8ecd6258fe0197d748c7712aa5f0bf0891331b6dc8f67506a7757c4a67b5505c6cb1757c40c147cf9967d8b504daa5ef92b6c56be3205d1f38df4f2f7204177da32b87e7e20f87e707644f3c76f9e162dcc9cda162cde6ede45741856f8d0cd616a6e468f869741d97c4427cd5a74cc9de1da26072dc7263b4beaa362b3af87784d3239eb793e47829c862a1cf1d064132c0937e1c09dd56f7d328ffb0a09b2a7cafc4a4ff9cf07cbba61608b098154f467a0959dbbf4925def8d7592c38e1dcd9b1b49f23cf930634d5743d6ce8c8968538fb77c07b8ccb01758d947e7eea0aa910c27bdb0b065035e4088d6625b875ad83f66c8f30a8df93d9ff15b15f4e723a57157d908c2fb2445df60eceac35a17dbdf7038637441a3ecb8f9c197ab69f5787aee2487f22758b72309ff2eb4392c93111bd2710ef69db48cab09dca2878de9a6249139ed3a26ed572dd05c42446b4c031b701956148b86b3caac58d33d6f7b0739194d448b624b02b454f5b53800e3f36ae615ef6a493b74d07129d2da00537386dcce6369addd3a33756bc5ff8b07405d2412e98c99d75a645f33d1b6be302eb115856e17afe90594ca9fc71fd9408f9e1927312841986afccc03bcdee9c3cfedde29cc7cb1f52dc0ba16d2efef8380baac1a991656c5b2ab7402cecc1925455721b7414dc23a4d0b8608971250bad1b9049a62e1ef0339d1a640cf48c6ec15cf7222f799dff5ecd1660a30d57276c0ef8ca0c1e22055091ca88ed73bfa9197439320b5cdc014fd671a743990911891973d4f36c011401a9944467152589620e1075c70f5d37c9df75c57ce4fac582e9f293868aaf9a4ddda57d6a50b30427293fb8997cba102995e29b7485d50a131e4c8819eae02ba10a930a9fb7b03173bb777fa91e901c7c6c41d1b88cc056da932b9e2a057f7a2cf3254b7e3a0314485bf7e1c915902decb21d3fd4aff825b0a44ddf3f34c5c24015c8c9a6d288948871f25b1690aa586c0375640d059c0c4ead61ba55008c79c998f73699e4a3d22bc6c34eb611cb2ddf0ce9d4467e1f9225c2617bf8cb0cbf5ca491590ba3edc4c0521b2d4a22e9c5163c4da2894c4b06781b28b66b455896c6a7f94f528fd718dbfb32c85d024307798dfeb34183f8f8a48134a4ced66e518ed444e0814e3219e3f4e47eeb53a1f51c9f1fca0cecb2a97fde8d512e96933736df80d513ff2f51eb007a8eb348df0d804cac41b31bde60fb2abf670cb3bb759fc5af5d4213ed5ca90566bbaa8f76626c30fd8e4e2270e15330e2986f12f9d8d72d0a1c0a316b6ab923b6ca71dc7444ecf9f8f96fb4eec355ff5d8d4311cdfb6a87879a73aba7b8a942392217e55985fd9555241d36d0c7cb36d34141cb24519563161291bd0ad344ac7a57e0efde502cf0efa396829527d7fe07f1d77fbf40d414f026ffb261127d472ab86d63c99d08994e9dcaf947f6beb1f48e4fce3c7074d30c896067e88805560dc57e3664bb62d259667e51781f1486ccdc69b27eae2220de1b9013165d4e26aca8c9ab0a03224744de51a649ef25744e9aad0a43d58227031cbe994b840676f0accacc85f1f44d4033d27b168b50e3ca76acd54e2f9f5ad599b572b4e7d5346cbab3d8c4fb5c017cf2e65b2566661cea5a27bb93781c0085649363abe2ff63b6a9a7bc5ab3b84ce28700f4f6ee44bbb74d451166b2228277635a22b905fc85a7f6fa0d31f7814d230c2048a5bad6e5ca430d08110a8080afe4dbcd68548342a68c6fe1d790cde744deaf5203e576603a946d505a0b53424c5ded99a6dd73cfdfd11777ad9bf2e154c4d6f7e811b6cb2659fd333609a2d152f560539dd068b10d0b1efa269883fa37098f0c742725770052c60ab02e446a18f34b122393d5e7d572fe34e04dab1c052489afa54c2fbfa29573d65a56b7c39040824f6b1a3130a188bd96df5a01dfc98c68f9afc3af2f2d6bf213535ca9fd8ca2b3b983f28683bc1778ffecc7bd8e0e171dbe6b696919e93b91122a43df90e1fe312875096b5a9bc5bdc9a0b0172bca8241561d2bb17cb4d5403ae381933911f6762046e1eebf4a6a86241ee70eced42a7f2883b430abfcb4aaa582c1bd30aa75100da55eb03da174d2737a8d3b8e0eee075cbecb8565db05af69baaebdd7f34f000abccd092d2aac70d1a546f55c4bbc02cc6cfcdcd15d22f2e57308238a8bd8707ea09153ffed4e4f56b933af07f5702c312b69074c025ed6434bcc0baa1cd8b699efb8d39fdef142a46add2f241daf85e03a0b91ede9bcf2bd75b4529b42f4e6eab222934a7800093d7352f006616b49ca4629cc25cee156fa07442d0e5939f45171a529ace4ab9256ceb63ef3540af43bc8a889436015d9f79e1ee88b999e2a241bb98015c2a2d6ab255c8b146f43a48b07aa8da9e548dff19f22d71a48891b9cea1392a2198fa1d63ce7cee36cf4718cbba7c5a935e74fd443ae31d45899ad340068f89d66a08d6fa0ded32a2390d045640b7baa97c93065fb969dc0e2a251b33fae2f3c1f72c1fa1d72fba05ef44406f8f188b06a7fcdd793c7c96cbf95decbd2697284d8473024dd04554686ac11163977872e42fa56605139c44eecd14d9495aeabadd86230add419a34078bc3aca7f56191e343c51acafbe2f6b81fb492ccdbddb71cef124905978a5b76019eccf0c78edb9a465334f37263452fbc1ced7aaaeead930eddb7d828b4e6417d8366888972c2a0fbaa64285132047e6af1d27cfae805eb66e4aca35392afdb0234dcf703b6922bb368920f1dd202b64f1931fa548eb2f22a2dfaf5ba0f2a096b172bb608932b00e1ba2f532d6e55b8620adf57f322b71c0bed72c9bf13c4ffb6648089d7972d1c907c2b7b3707fc52864b9454edf5607604592d11602b2584334086eeef12ae4116fbdb57bb0ac1da6c5249ae8d7b0c31af093eccea286ad973ebe527003057f3972fcb2f68a350fcb96b9c674f9b52893157dc0ed9cc7c32cf42dfc502b1486b377cbfb4c91f1a69f88c6f787788343caa51df6e3a50a6b1784c7a6199a9f2894c1d6a7a87cf3318fd0989d605068daf7f3bbec72d62e39c32802ea30a1faed38072127399e255b3cde6226115c26fb2b525f112fa4473de76c8f5733619c7a0ba91bc07e97c46de2971e0ff20385e132b463fc83f1d38196aecbd949616eaa00899ce6e378bf5bea8b02f4608a36276ba06271bb61ca49567a5c769df8759b97aaa6653b848cd5ee159a53c22d8f35849fa2f8144e84ef18dcffc0ffcc794b4040472203fd2d0ad15ec0e27281a33463b335eaad4a9419021851e032be80e6ba6ad4d79af086ef373462cecb78a07c2fc6e29d81d9b468909bdc2dc1e0944cf1c37b79577b5daa758eb76daa8f5734097561e96e483240aad38fbff91038edb3987ca1bebd01c9f0f6509a1f9c1f677fc4f6a3ac0dc379eda0f6c214e77ebbc54e541d2637150b0b00bca898ec5fc34f78a50540eceeae077798e17c3a7a6b377cff0ecf4f0fc92930994d150ed35b6b30496539244f3487df661a78dfbd3a4666039b12b844df5355866678244aaf97ebf72f6221ecc72420e38b9b9cb435d201e2f784dba9b0e873922c252e573bf9e264dbae66723cf92be50a9f3b503a6c0dc0a4d53469f9d0abec9509dafbabee1fef92c3069db3cc541a216bb531b15006b868b182961a39b00dd1126e305195818770d8c74072557f4d00383e4a7973e27ea61e01aeecdd49d12afd27e8049284a4917c19d390ee7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "5cf6e7897a9d353ee57753b44455aa8f8bf48d0ad250b58ea7c87fd3de10d8f1097676"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "1a9ee0a420f290d1cc3ad7030000000000000037"}}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}]}, 0x113c}, 0x1, 0x0, 0x0, 0x850}, 0x42084) r14 = syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x381) ioctl$USBDEVFS_CLEAR_HALT(r14, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) 9.003276556s ago: executing program 3 (id=2652): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4040080) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa12ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x939b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x5}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000780)=ANY=[], 0xfce) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.posix_acl_access\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x860c1}, 0x40844) 7.875595616s ago: executing program 38 (id=2652): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4040080) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa12ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x939b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x5}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000780)=ANY=[], 0xfce) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.posix_acl_access\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="34010000190000082cbd7000fedbdf2580201000fc04c80500100000ee000880ef16262ad7b9770cd1d441f08946c7aedfd931de66e749c7c2ec9fccdd50762554db34c72cc0a2b06649afcf3e5633bef7aa2a9ff75c42c4c2a77de16fe811546f7a78601c1d2babf398e60d1c68598aa41513d1f1ca9f3ba52eaa1a6bbe57fa8b71f900cce8145b37b693e37d4622afcd9933891ed0c81f5f4a2055e1fc3f909fb442aade5fe9e272691ebc06d4d0616539312b3a9824018597211ed07911a743e248aa32432ca5a79222456768cd44d8e86614ac9853d8e7782b986efd9cbebeb7b7098fff099735eaf87f725e2e2000d555ab6211c7ae8dff754b32ea3ff874b4830f0372f73b537d0000080002000a01010208000700ac14142906001c004e24000008001e000104000005001b0011000000"], 0x134}, 0x1, 0x0, 0x0, 0x860c1}, 0x40844) 6.607404504s ago: executing program 1 (id=2662): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, 0x0, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8571, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) sendmsg$TIPC_NL_LINK_GET(r3, 0x0, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x0, 0xfffffffc, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffdfc}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 5.635081087s ago: executing program 1 (id=2664): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x45, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b4241544940000000000000000000000040033a42c9550f5810011e0f0544b00aab05450dc72ff6e8f62d070e87f2c73d153bf01de50151803c47471", 0x0, 0xa0080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x82) 5.519305373s ago: executing program 1 (id=2666): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x70b, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040800) clock_gettime(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1200}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000340)="5b7d93a9156cc40a03bf5e6a646b7a1650f06d3d533281597cc4e4303e862478783e7b97d90f10e71221ef0fbf21a021099f5e277cc9dc1c96189f2c073f8f3d76cdcbd5b0db695394dc5f9290b90ede8846f4c62e417320a07bca734fdfefd489ad681bac8ad26d4378e17d11bf69553e30707158643cac3f43b41963fc1de22b9cf872aeaac12d7f79be3dfd7e6140d996695d4c1f48937edeea54907055f3aca67ce7bd9e17923c2b9d24191478b3f8248693358608aca41ecdb0c7ee91d22f41925b99785aed449a0bc5f371d971", 0xd0, 0x24004044, &(0x7f0000000440)={0x11, 0x11, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x4000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffffffe, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000240)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8007}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0x40}, {0xc}}}]}]}, 0x6c}}, 0x800) sendmsg$kcm(r4, 0x0, 0x8080) 5.293133055s ago: executing program 9 (id=2669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/166}, 0x20) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) syz_open_dev$rtc(&(0x7f0000000040), 0xe9c, 0x2000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x480c1}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) 5.173320072s ago: executing program 9 (id=2670): bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000300800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000004001000000000000002b000000f3"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xfff3, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 5.048049889s ago: executing program 9 (id=2671): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x48) r1 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x24}}, 0x1e0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r0}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000040)=0x80000203, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) socket(0x23, 0x1, 0x44) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00679a3601ff050000000000000066f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)}, 0x5}], 0x1, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 4.485320219s ago: executing program 9 (id=2679): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000100850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') getdents(r2, 0xffffffffffffffff, 0x7a) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1, 0x803, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, 0x0, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010320000000000000000c0000000800040001"], 0x1c}}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x1, 0x84) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10b800, 0x0) 4.315694468s ago: executing program 1 (id=2680): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x3eb3, &(0x7f0000000040)={0x0, 0xe955, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 3) 3.967679597s ago: executing program 1 (id=2681): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000000000000400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="b2803e3756c3ef5cba5e1e48fc138ee0043f40a593d5350d9a46728116ab426ecf619a977325b6d05e9e4fc3a70d619c54f5016bc26bc1ea15486f932b61c3a0c82b0733f38eaddc0785d27fc8f95d3c9c6593fa0c4081ffb3e2a321413ac6ed374d200aafb4597d0c994795b1fc3460e563998e3df499e3078500435a0cca97e3b1e2bc07857aabf734ddc577d16cb686420675ea94b2ab8dab90430b0d91cbd5fdf212070e4d6050dbfdc1066ce8e17cd4f8491bf488956bd73f65ae", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a017cd9227ba842d8afcf85dd943016bbe0e469d4b978f63d211688af7349421780f7e23a3638eb1e3063c247efab7362e94e620a7abe6a0d09a4a949c94d7e952214bd7dd1e6cc214b2b3650b59a4109e4b2b77aecd2e3c12120fd319ade2d172c0b823ea460a43c9e5bb8cda11561e1371f3fc2d7f9c17c40c6ca5279893"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 776.606448ms ago: executing program 8 (id=2690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x20, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) 696.295083ms ago: executing program 8 (id=2691): r0 = syz_clone(0x980, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)="fb060b3a370ce16a3a11a58f3b83694c86cfcbd173ca1fcfcac7948488000000002ec40c61") ioprio_set$pid(0x1, r0, 0x4004) r1 = epoll_create1(0x80000) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r1, 0x8, r2) 695.744043ms ago: executing program 8 (id=2692): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x94) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r4, r2, 0x11, 0x0, r4}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x5, 0x8000, 0x1, 0x80, r1}, 0x50) set_mempolicy(0x8000, &(0x7f00000008c0)=0x2, 0x0) 624.252157ms ago: executing program 9 (id=2693): r0 = socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0xfe, 0x51b, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WufHtqtqD1BOCKFKiB5B2obEG0Wx4yh2ShP2sD1zRaISJzjyB3DuiTsXBDcu5YDEjwjUICExaMbj1Ju1s9FmY2fjz0cazXvzHH+/L9bMi1/seQGMrWsR8SAiJiPivYiYK44nxRZvd7bscZ8e3F89PLi/mkSavvuPJG/PjkXPz2SuFs9ZiYgffCfix8mjcVt7+5sr9Xptp6gvtBvbC629/ZsbjZX12nptK/vh24tv3Xpz+an19ZXGZFH68ie/f/CNn2ZpzRZHevvxJJJOl/sdj4jyUZzMRER87yzBLpArRX8mR50IT6QUES9GxKv5+T8XV/JXEwC4zNJ0LtK53joAcNmV8jmwpFQt5gJmo1SqVjtzeC/FTKnebLVv3Gvubq11/kyYj3Lp3ka9tljMFc5HOcnqS3n5s/pypz7Vrd+KiBci4udT03m9utqsr43yDx8AGGNXj43//57qjP8AwCVXGXUCAMDQGf8BYPwY/wFg/Bj/AWD8dMb/6VGnAQAM0Ynv/90PCAAuJfP/ADBWvv/OO9mWHhb3v157f293s/n+zbVaa7Pa2F2trjZ3tqvrzeZ6fs+exuOer95sbi+9EbsfzH9zu9VeaO3t3200d7fad/P7et+tlfNH9b1VNgAwJC+88vGfkmxEvjOdb9GzlkN5pJkB56006gSAkbky6gSAkTnTp3sqPhsEz7IzvMc3PQCXRJ8leh9S6fcFoTRN007pf+k55QWcn+tfMP8P46pn/t+ngGHMmP+H8WUGH8ZXmianXfM/TvtAAOBiM8cPDPj//4vF/jfFPwd+tHb8ER+dZ1YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXXX/60Wa4HPRqlUrUY8FxHzUU7ubdRrixHxfET8cao8ldWXRpwzAHBWpb8mxfpf1+den32o6eWrR8XJiPjJL9/9xQcr7fbOHyImk39OdY+3PyqOLw8/ewDgZNl7/e44ne973sh/enB/tbsNM6e/fTsiKp34hweTcXgUfyIm8n0lyhEx86+kqHckPXMXZ/Hgw4j4fL/+JzGbz4F0Vj49Hj+L/dxQ45ceil/K2zr77HfxuaeQC4ybj7Prz9v9zr9SXMv3/c//Sn6FOrvi+pc91ephfg38LH73+ndlwPXv2mljvPG773ZK04+2fRjxxYmIbuzDnutPN34yIP7rp4z/5y+9/OqgtvRXEdfjTt/4vbEW2o3thdbe/s2Nxsp6bb22tbx8e+n24lu33lxeyOeoFwaPBn+/c+P5QW1Z/2eif/8rj+n/V0/Z/1//970ffuWE+F9/rV/8Urx0QvxsTPzaKeOvzPy2Mqgti782oP+Pe/1vnDL+J3/Zf2TZcABgdFp7+5sr9Xpt51kvzJY7Hboo+SicRyF7hS9AGn0L3xpWrMno3/Sz1zqnwLGmNH2iWIOuGE9j1g24CI5O+oj4z6iTAQAAAAAAAAAAAAAA+hrGN5ZG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAur/8HAAD//5enzt4=") r1 = open(0x0, 0x66842, 0x21) pwritev2(r1, 0x0, 0x0, 0x5a00, 0x0, 0x3) bind$tipc(r0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 602.048028ms ago: executing program 9 (id=2694): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val}]}, 0xfa, 0x4cc, &(0x7f00000016c0)="$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") r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r1, &(0x7f0000000fc0)=""/224, 0xe0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x1000, &(0x7f00000003c0)={[{@clone_children}, {@xattr}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05457d2921000000fd090000850000004100000000bfc891040e6cc1cc5604c64d79b8cdc66015327f91092645152d33024a9d3c48fb614bef17d13af34b2de38669dc7b7fa48f20070b013d614ef4396298a0fa17c7b047e32398a51f4b26affdc46e331108cfb4904504479c57daa01cf0eb3a54bef7144852947d278c1f998f2d5d15ca53d19514a5da960bae26e465dbd9408678db41d371f324f101dd3e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r9}, 0x38) 547.926881ms ago: executing program 8 (id=2695): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x8000, 0x8000, 0x126, 0xfffffffa, {{0xd, 0x4, 0x1, 0x20, 0x34, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0x1, [0x8]}, @noop, @timestamp={0x44, 0x10, 0x6f, 0x0, 0x0, [0x3, 0x7, 0xffff4108]}]}}}}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x2, 0x80040) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 276.203905ms ago: executing program 0 (id=2697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) 216.128249ms ago: executing program 0 (id=2698): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0xfffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8fffffdb702000008000000b703000000000028850000003c00000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9}, 0x94) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x106, 0x8, @local}}}, 0x118) 215.563029ms ago: executing program 0 (id=2699): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_names\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x20, 0x7, 0x8001, 0x10, {{0xb, 0x4, 0x2, 0x16, 0x2c, 0x64, 0x0, 0x16, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x2c}, {[@end, @noop, @timestamp_prespec={0x44, 0x14, 0x51, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast1, 0x9}]}]}}}}}) (async, rerun: 32) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) (rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)=@delsa={0x244, 0x11, 0x100, 0x70bd29, 0x25dfdbfb, {@in=@loopback, 0x4d2, 0x0, 0x33}, [@sec_ctx={0x77, 0x8, {0x73, 0x8, 0x0, 0x6, 0x6b, "3a31eafd8e5675c63ec999642e5e003c1ed900470757fb496c6df22a543ad4af946bf7621fd00ae1a54cade716aaf38fa20e1e5ddc331d45b27180068c21112f055c386b24e808fdccc8e812b69761ed3be5736dcf9b8b59f957521e9e22210adcb4f5eacaa73968304dde"}}, @extra_flags={0x8, 0x18, 0x9}, @replay_thresh={0x8, 0xb, 0xfffffffa}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0xa, 0x4e23, 0x3, 0xa, 0xa0, 0x0, 0x6c, r1, r2}, {0x400, 0x80000001, 0xe1, 0xfffffffffffffffc, 0x3ff, 0x1000, 0x1, 0x8001}, {0x4, 0x8, 0x3, 0x1}, 0x80000000, 0x6e6bb5, 0x1, 0x0, 0x1, 0x3}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @proto={0x5, 0x19, 0x32}, @algo_auth_trunc={0x9f, 0x14, {{'sha3-224\x00'}, 0x298, 0x60, "c7f307d23aec35bd1d2492b43407e9b3ddf6d50f3c29b7eb8569ed6b92fb257b503d2f97b0ea423d10b7aa81b04b3abf8a389e8d8c0fdb91e09738fe474894d53d4d7767264a0063e942898e5d486361072f42"}}, @srcaddr={0x14, 0xd, @in6=@local}, @lifetime_val={0x24, 0x9, {0x8, 0x100, 0x6, 0x4}}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x2) (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x4) 212.458659ms ago: executing program 8 (id=2700): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044841}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7c, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000440)={0x20, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10e, &(0x7f0000000280)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@lazytime}]}, 0x4, 0x46f, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFt+IyviDxC1isbGH1sooBy8aDTxoImJFzzWthBkoYbWRAgRNAaPhsTEo/Fo4l/gSS9GPZl41bshIYaL6GnM7M6022W73ZYtK93PJ9nueztv+t533rzdN/N2AxhYo/mfJGJHRPweEbsa2aUFRhtPN29cnPrnxsWpJLLs7b+Serm/b1ycKouW+20vMmNpRPppEg+3qXfu/IXTk7XazLkiPz5/5v3xufMXnj91ZvLkzMmZsxPHjh05fOjFFyaO9iTOe/O27vtodv/e19+5+ubU8avv/vxtUsbfEkePjHba+FSW9bi6/trZlE6Gu9hhaB0bQ9fybsi7a6Q+/nfFUCx23q547ZO+Ng5YV1lhmc2XM2ADS6LfLQD6o/ygz69/y8edm3303/WXGxdAedw3i0djy3CkRZmRluvbXhqNiOOX//0qf8Tq70O4igYAVu37fP7z3C3zv62t5e6JzfW1oUqxlrI7Iu6LiD0RcX9EPBARD0bEQ+0q6bAg0LpIcuv8J7221ti6kc//XirWtpbO/8rZX1SGitzOevxH04jazMH6MYkYi5HNJ07VZg51qOOHV3/7fLltzfO//JHXX84Fi3ZcG968dJ/pyfnJ24m52fWPI/YNt4s/WVgJSCJib0TsW2Mdp575Zv9y21aOv4Nu1plWkH0d8XSj/y9HS/ylpPP65PiW/HwYz8+Cg23r+OXXK28tV/9txd8Def9va3v+L8RfSZrXa+dW898bo/vKH58te01TXdP5v/jCpuL5w8n5+XOHIjYlbzQa3fz6xOK+Zb4sn8c/dqD9+N9df84WDkR+Ej8SEY9GxGNFdI9HxBMRcaDDUfjplSff63SE2se/pcN/7J08/umW/q8sLdLS/4uJTdH6SvvE0Okfv1v6H7uJv5T3/5F6aqx4pf7+92XnuLpp12rPZgAAALhbpRGxI5K0upBO02q18R3+PbEtrc3OzT97YvaDs9ON3whUYiQt73Q17gePJOX9z0pTfqIlf7i4b/zF0NZ6vjo1W5vud/Aw4LY3j//yTme18fSnb5fAxteDdTTgLmX8w+Ay/mFwGf8wuNqM/1u+AA5sTO0+/y/1oR3Andcy/i37wQBx/Q+Da7jpR47AYGn+/PdGAANjbmus/CP5jZDIsiz7HzRj4yQi7bbwpX43deVEss6jYEe/A1x9ot/vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL3xXwAAAP//BL/saw==") r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10270000}, 0x0) 189.87187ms ago: executing program 0 (id=2701): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x8022, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_udp(0x2, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x2700}, 0x5}], 0x40001af, 0x12122, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0) 124.234404ms ago: executing program 0 (id=2702): socket$nl_route(0x10, 0x3, 0x0) getresgid(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000200)={0x0, 0x110000002000003, 0x1, 0x40000}) 59.359507ms ago: executing program 1 (id=2703): r0 = socket$inet6(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f0000000100)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) fcntl$setpipe(r5, 0x407, 0x5e) bind$802154_raw(r4, &(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xfffe}}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x0, 0x12, 0x60a, 0x0, 0x202, 0x240, 0x2e8, 0x2e8, 0x240, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x3200], [0x0, 0xffffffff], 'veth1_to_bond\x00', 'xfrm0\x00', {}, {}, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x118, 0x150, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x1, 0x8b, 0xd2, 0x4, 0x4, 0x4, 0xa216}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x2}, {0x4, 0x2, 0x2}, {0x1, 0x6, 0x1}, 0x5, 0x47}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00', {0xff}, {}, 0x0, 0x0, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) 44.440908ms ago: executing program 8 (id=2704): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001e0021", @ANYRESOCT, @ANYRES32], 0x30}}, 0x80c4) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) capset(0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x83, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b00"], 0x28}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') mount$tmpfs(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESDEC]) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000440)={0x0, 0x0}) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0xdd86, {[@fastopen={0x1e, 0xfffffffffffffd72}]}}}}}}}}, 0x0) capset(&(0x7f00000000c0)={0x19980330}, 0x0) connect(r1, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448df, &(0x7f0000000080)="99e981303bdddb8700a4d800c848d895a8bff6b25419670e13bb7cc7b7778fdc00a8eb70706cb39aafc0df74115e84676e9c72660b56bd7c544b21d9ddd4a43669f20c98297c31fa5cb2450122ecdcc0e0b4ea133d") 0s ago: executing program 0 (id=2705): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0xc00, 0x150}, 0x18) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="0700210000000000000000080000b39c6d560000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000400"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x58, &(0x7f0000000140)}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r3, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) munlockall() r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x24802, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe00}, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1b) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x80646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}, @IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000690}, 0x20048040) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2000012, 0xb, 0x0, &(0x7f0000000340)="63ec33c9e9b98600000000", 0x0, 0x1, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa5d}, 0x50) ppoll(&(0x7f0000000380)=[{r2, 0x20}, {r1, 0x120}, {r7, 0x90}, {r2, 0x4082}], 0x4, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000680)={[0xe602]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r9 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r9, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x10, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, 0x0, 0x0, 0x15, &(0x7f0000000400)={0x11, 0x1, r12, 0x1, 0x2, 0x6, @random="a08790789c36"}, 0x14) io_submit(0x0, 0x12d, &(0x7f00000035c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5, r1, 0x0, 0x0, 0x4}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, r1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}]) kernel console output (not intermixed with test programs): no=16 [ 359.524752][T11067] loop2: detected capacity change from 0 to 8192 [ 359.549332][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.636135][ T3327] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000b908) [ 359.644102][ T3327] FAT-fs (loop2): Filesystem has been set read-only [ 359.711067][ T28] audit: type=1400 audit(337.174:1488): avc: denied { write } for pid=11089 comm="syz.3.2117" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 359.853172][T11107] loop9: detected capacity change from 0 to 1024 [ 359.860030][T11107] EXT4-fs: Ignoring removed bh option [ 359.876894][T11107] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.889949][T11107] EXT4-fs (loop9): shut down requested (1) [ 359.935644][T11102] lo speed is unknown, defaulting to 1000 [ 359.960131][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 360.006152][T11107] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 360.015313][T11107] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 360.024116][T11107] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 360.032955][T11107] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 360.090859][ T5958] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.194565][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2126'. [ 360.272631][T11114] lo speed is unknown, defaulting to 1000 [ 360.306183][T11125] loop9: detected capacity change from 0 to 512 [ 360.330852][T11125] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.354139][T11125] bond0: entered allmulticast mode [ 360.363948][T11114] chnl_net:caif_netlink_parms(): no params data found [ 360.409474][T11114] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.416965][T11114] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.424269][T11114] bridge_slave_0: entered allmulticast mode [ 360.431509][T11114] bridge_slave_0: entered promiscuous mode [ 360.438661][T11114] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.445836][T11114] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.453436][T11114] bridge_slave_1: entered allmulticast mode [ 360.460498][T11114] bridge_slave_1: entered promiscuous mode [ 360.478529][T11114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.487253][T11154] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11154 comm=syz.8.2133 [ 360.501791][T11114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.522563][T11114] team0: Port device team_slave_0 added [ 360.531264][T11114] team0: Port device team_slave_1 added [ 360.550685][T11114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.557793][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.584024][T11114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.595836][T11114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.603725][T11114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.629884][T11114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.679386][T11161] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 360.687357][T11114] hsr_slave_0: entered promiscuous mode [ 360.693663][T11114] hsr_slave_1: entered promiscuous mode [ 360.699626][T11114] debugfs: 'hsr0' already exists in 'hsr' [ 360.705428][T11114] Cannot create hsr debugfs directory [ 361.087191][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 361.148117][ T28] audit: type=1400 audit(338.512:1489): avc: denied { append } for pid=11166 comm="syz.1.2138" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 361.319059][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2138'. [ 361.717944][T11114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.225141][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 362.659182][ T5958] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.670567][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.690193][T11161] team0: Port device ªªªªªª added [ 362.702606][T11114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.743751][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.756838][T11114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.780589][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.801780][T11200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.811977][T11114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.819385][T11200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.827360][T11202] loop9: detected capacity change from 0 to 512 [ 362.839316][T11202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 362.848408][T11114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.869108][T11202] EXT4-fs error (device loop9): ext4_orphan_get:1397: inode #15: comm syz.9.2145: iget: bad i_size value: 38620345925642 [ 362.910831][T11202] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 362.911014][T11202] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2145: couldn't read orphan inode 15 (err -117) [ 362.920296][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 362.920321][ C1] EXT4-fs (loop9): initial error at time 340: ext4_orphan_get:1397: inode 15 [ 362.920354][ C1] EXT4-fs (loop9): last error at time 340: ext4_orphan_get:1397: inode 15 [ 363.014752][T11114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.051179][T11114] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.072488][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.079609][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.087592][T11202] loop9: lost filesystem error report for type 5 error -117 [ 363.088455][T11202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.119618][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.126782][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.146042][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2145'. [ 363.247671][T11202] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.2145: bg 0: block 5: invalid block bitmap [ 363.285370][T11202] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1552 with error 28 [ 363.331747][T11114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.339518][T11202] EXT4-fs (loop9): This should not happen!! Data will be lost [ 363.339518][T11202] [ 363.349291][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 363.377065][T11240] bond13: entered allmulticast mode [ 363.381626][T11202] EXT4-fs (loop9): Total free blocks count 0 [ 363.404548][T11202] EXT4-fs (loop9): Free/Dirty block details [ 363.433873][T11202] EXT4-fs (loop9): free_blocks=0 [ 363.454168][T11202] EXT4-fs (loop9): dirty_blocks=1556 [ 363.469108][T11251] loop3: detected capacity change from 0 to 512 [ 363.477446][T11202] EXT4-fs (loop9): Block reservation details [ 363.495478][T11202] EXT4-fs (loop9): i_reserved_data_blocks=1556 [ 363.517507][T11251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.2150: missing EA_INODE flag [ 363.560152][T11251] loop3: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 363.561318][T11251] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2150: error while reading EA inode 12 err=-117 [ 363.570520][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 363.570550][ C1] EXT4-fs (loop3): initial error at time 340: ext4_xattr_inode_iget:441: inode 12 [ 363.570582][ C1] EXT4-fs (loop3): last error at time 340: ext4_xattr_inode_iget:441: inode 12 [ 363.617180][T11114] veth0_vlan: entered promiscuous mode [ 363.634802][T11114] veth1_vlan: entered promiscuous mode [ 363.654824][T11114] veth0_macvtap: entered promiscuous mode [ 363.659055][T11251] loop3: lost filesystem error report for type 5 error -117 [ 363.662649][ T5958] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 363.685875][ T5958] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.686126][T11114] veth1_macvtap: entered promiscuous mode [ 363.695011][T11251] EXT4-fs (loop3): 1 orphan inode deleted [ 363.707295][T11251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.767805][T11114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.798408][T11114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.825200][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.839756][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.897988][ T28] audit: type=1400 audit(341.059:1490): avc: denied { mount } for pid=11114 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 363.945080][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.974497][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.990254][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.018141][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 364.022823][ T28] audit: type=1400 audit(341.170:1491): avc: denied { read } for pid=11286 comm="syz.3.2154" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 364.043728][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2124'. [ 364.070713][T11282] ip6gretap1: entered allmulticast mode [ 364.076595][ T28] audit: type=1400 audit(341.197:1492): avc: denied { open } for pid=11286 comm="syz.3.2154" path="/dev/cpu/1/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 364.224994][T11305] loop3: detected capacity change from 0 to 736 [ 364.468697][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 364.568163][T11338] dummy0: entered promiscuous mode [ 364.584373][T11338] vlan2: entered promiscuous mode [ 364.773467][T11361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2170'. [ 364.862120][T11358] lo speed is unknown, defaulting to 1000 [ 364.882906][T11352] loop3: detected capacity change from 0 to 512 [ 364.902822][T11352] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 364.907844][T11375] loop9: detected capacity change from 0 to 512 [ 364.957845][T11375] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 364.993760][T11352] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 365.045905][T11352] Quota error (device loop3): write_blk: dquota write failed [ 365.067418][T11352] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 365.077568][T11352] Quota error (device loop3): write_blk: dquota write failed [ 365.084981][T11352] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 365.093700][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 365.101257][ C1] EXT4-fs (loop3): initial error at time 342: ext4_mb_generate_buddy:1317 [ 365.109794][ C1] EXT4-fs (loop3): last error at time 342: ext4_mb_generate_buddy:1317 [ 365.142454][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2173'. [ 365.151746][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2173'. [ 365.195601][T11352] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2167: Failed to acquire dquot type 1 [ 365.246196][T11352] loop3: lost filesystem error report for type 5 error -28 [ 365.301869][T11352] EXT4-fs (loop3): 1 truncate cleaned up [ 365.369100][T11352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.492925][T11404] loop0: detected capacity change from 0 to 1024 [ 365.595696][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 365.631255][T11404] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.653029][T11352] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 365.963477][ T28] audit: type=1326 audit(342.415:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.012302][ T28] audit: type=1326 audit(342.415:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.055680][T11359] Quota error (device loop3): write_blk: dquota write failed [ 366.084510][ T28] audit: type=1326 audit(342.415:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.157405][ T28] audit: type=1326 audit(342.415:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.183193][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.238432][ T28] audit: type=1326 audit(342.415:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.316195][ T28] audit: type=1326 audit(342.415:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.353191][T11432] loop0: detected capacity change from 0 to 512 [ 366.407487][ T28] audit: type=1326 audit(342.415:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.441447][T11432] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 366.485246][ T28] audit: type=1326 audit(342.415:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 366.722824][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 366.758829][T11432] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 366.798204][ T28] audit: type=1326 audit(342.415:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.9.2177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c2098c819 code=0x7ffc0000 [ 367.061146][T11359] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2167: Failed to acquire dquot type 1 [ 367.081241][T11432] loop0: detected capacity change from 0 to 512 [ 367.225672][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 367.234746][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2184'. [ 367.289333][T11463] netlink: 'syz.0.2186': attribute type 10 has an invalid length. [ 367.330847][T11463] bond0: (slave bond_slave_0): Releasing backup interface [ 367.392427][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.431233][T11477] loop0: detected capacity change from 0 to 256 [ 367.437874][T11477] vfat: Unknown parameter '0xffffffffffffffff' [ 367.482507][T11468] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2187'. [ 367.515483][T11479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11479 comm=syz.3.2189 [ 367.533027][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2191'. [ 367.641651][T11495] loop9: detected capacity change from 0 to 164 [ 367.664309][T11495] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 367.791044][T11508] team0: Device ªªªªªª failed to change mtu [ 367.849942][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 368.151024][T11557] dummy0: entered allmulticast mode [ 368.158529][T11556] dummy0: left allmulticast mode [ 368.258016][T11561] xt_CT: No such helper "snmp_trap" [ 368.589036][T11571] loop0: detected capacity change from 0 to 512 [ 368.743258][T11571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.780718][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.851087][T11575] syzkaller0: entered promiscuous mode [ 368.856608][T11575] syzkaller0: entered allmulticast mode [ 368.989114][T11582] macsec1: entered promiscuous mode [ 368.994359][T11582] macsec1: entered allmulticast mode [ 369.000894][T11584] FAULT_INJECTION: forcing a failure. [ 369.000894][T11584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.014034][T11584] CPU: 1 UID: 0 PID: 11584 Comm: syz.9.2209 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.014074][T11584] Tainted: [W]=WARN [ 369.014082][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.014095][T11584] Call Trace: [ 369.014102][T11584] [ 369.014152][T11584] __dump_stack+0x1d/0x30 [ 369.014183][T11584] dump_stack_lvl+0x95/0xd0 [ 369.014237][T11582] loop0: detected capacity change from 0 to 164 [ 369.014258][T11584] dump_stack+0x15/0x1b [ 369.014282][T11584] should_fail_ex+0x263/0x280 [ 369.014314][T11584] should_fail+0xb/0x20 [ 369.014342][T11584] should_fail_usercopy+0x1a/0x20 [ 369.014416][T11584] _copy_to_user+0x20/0xa0 [ 369.014514][T11584] simple_read_from_buffer+0xb5/0x130 [ 369.014605][T11584] proc_fail_nth_read+0x10e/0x150 [ 369.014639][T11584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.014701][T11584] vfs_read+0x1ab/0x7f0 [ 369.014732][T11584] ? __rcu_read_unlock+0x4e/0x70 [ 369.014758][T11584] ? __fget_files+0x184/0x1c0 [ 369.014860][T11584] ? mutex_lock+0x57/0x90 [ 369.014960][T11584] ksys_read+0xdc/0x1a0 [ 369.014992][T11584] __x64_sys_read+0x40/0x50 [ 369.015023][T11584] x64_sys_call+0x2886/0x3020 [ 369.015061][T11584] do_syscall_64+0x12c/0x3b0 [ 369.015166][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.015243][T11584] RIP: 0033:0x7f3c2094d04e [ 369.015261][T11584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.015280][T11584] RSP: 002b:00007f3c1f3defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.015347][T11584] RAX: ffffffffffffffda RBX: 00007f3c1f3df6c0 RCX: 00007f3c2094d04e [ 369.015362][T11584] RDX: 000000000000000f RSI: 00007f3c1f3df0a0 RDI: 0000000000000007 [ 369.015376][T11584] RBP: 00007f3c1f3df090 R08: 0000000000000000 R09: 0000000000000000 [ 369.015455][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.015492][T11584] R13: 00007f3c20c06038 R14: 00007f3c20c05fa0 R15: 00007ffc63e97728 [ 369.015513][T11584] [ 369.051692][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 369.290893][T11590] loop9: detected capacity change from 0 to 128 [ 369.417953][T11592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11592 comm=syz.1.2212 [ 369.436121][T11596] IPv6: addrconf: prefix option has invalid lifetime [ 369.446436][T11597] loop3: detected capacity change from 0 to 512 [ 369.459702][T11597] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 369.477975][T11597] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 369.494234][T11597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 369.504405][T11597] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2215: bad orphan inode 3 [ 369.514790][T11602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.514958][T11597] loop3: lost filesystem error report for type 5 error -117 [ 369.523895][T11602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.524091][T11597] EXT4-fs (loop3): Remounting filesystem read-only [ 369.531327][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 369.531348][ C1] EXT4-fs (loop3): initial error at time 346: ext4_orphan_get:1423 [ 369.531372][ C1] EXT4-fs (loop3): last error at time 346: ext4_orphan_get:1423 [ 369.568916][T11597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 369.823100][T11597] FAULT_INJECTION: forcing a failure. [ 369.823100][T11597] name failslab, interval 1, probability 0, space 0, times 0 [ 369.875395][T11597] CPU: 0 UID: 0 PID: 11597 Comm: syz.3.2215 Tainted: G W syzkaller #0 PREEMPT(full) [ 369.875483][T11597] Tainted: [W]=WARN [ 369.875492][T11597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 369.875507][T11597] Call Trace: [ 369.875516][T11597] [ 369.875527][T11597] __dump_stack+0x1d/0x30 [ 369.875560][T11597] dump_stack_lvl+0x95/0xd0 [ 369.875623][T11597] dump_stack+0x15/0x1b [ 369.875649][T11597] should_fail_ex+0x263/0x280 [ 369.875734][T11597] should_failslab+0x8c/0xb0 [ 369.875756][T11597] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 369.875782][T11597] ? __d_alloc+0x37/0x340 [ 369.875817][T11597] __d_alloc+0x37/0x340 [ 369.875849][T11597] d_alloc+0x2e/0x100 [ 369.875949][T11597] lookup_one_qstr_excl+0x95/0x240 [ 369.875985][T11597] filename_create+0x155/0x220 [ 369.876016][T11597] filename_mkdirat+0x81/0x300 [ 369.876088][T11597] __se_sys_mkdirat+0x32/0xf0 [ 369.876111][T11597] __x64_sys_mkdirat+0x43/0x50 [ 369.876204][T11597] x64_sys_call+0x2c4e/0x3020 [ 369.876235][T11597] do_syscall_64+0x12c/0x3b0 [ 369.876265][T11597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.876304][T11597] RIP: 0033:0x7f320204b687 [ 369.876365][T11597] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.876382][T11597] RSP: 002b:00007f3200aa6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 369.876403][T11597] RAX: ffffffffffffffda RBX: 00007f3200aa6ee0 RCX: 00007f320204b687 [ 369.876416][T11597] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 369.876433][T11597] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000 [ 369.876455][T11597] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0 [ 369.876469][T11597] R13: 00007f3200aa6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 369.876495][T11597] [ 370.108442][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 370.149054][T11616] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2214'. [ 370.158660][T11613] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.2214'. [ 370.190906][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 370.249991][T11618] team0: Device ªªªªªª failed to change mtu [ 370.424179][T11630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.441109][T11630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.680885][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 370.704020][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.711796][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.884623][T11630] bridge_slave_0: left allmulticast mode [ 370.890395][T11630] bridge_slave_0: left promiscuous mode [ 370.896711][T11630] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.947727][T11630] bridge_slave_1: left allmulticast mode [ 370.957565][T11630] bridge_slave_1: left promiscuous mode [ 370.965310][T11630] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.048217][T11630] bond0: (slave bond_slave_1): Releasing backup interface [ 371.060016][T11630] team0: Port device team_slave_0 removed [ 371.071863][T11630] team0: Port device team_slave_1 removed [ 371.084430][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.096879][T11630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.110203][T11630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.121704][T11630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.142275][T11630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 371.328901][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 371.400070][T11751] futex_wake_op: syz.3.2232 tries to shift op by 144; fix this program [ 372.264646][T11776] loop9: detected capacity change from 0 to 128 [ 372.322291][T11776] syz.9.2240: attempt to access beyond end of device [ 372.322291][T11776] loop9: rw=0, sector=121, nr_sectors = 920 limit=128 [ 372.445212][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 372.746616][T11786] loop0: detected capacity change from 0 to 736 [ 372.755941][T11783] loop3: detected capacity change from 0 to 512 [ 372.817455][T11786] Unable to read rock-ridge attributes [ 372.839124][T11783] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 372.889599][T11783] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 372.904797][T11783] __quota_error: 12 callbacks suppressed [ 372.904815][T11783] Quota error (device loop3): write_blk: dquota write failed [ 372.918308][T11783] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 372.927497][T11783] Quota error (device loop3): write_blk: dquota write failed [ 372.934909][T11783] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 372.944847][T11783] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2244: Failed to acquire dquot type 1 [ 372.956111][T11783] loop3: lost filesystem error report for type 5 error -28 [ 372.956374][T11783] EXT4-fs (loop3): 1 truncate cleaned up [ 372.969773][T11783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.983895][T11783] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 373.063932][T11783] Quota error (device loop3): write_blk: dquota write failed [ 373.071362][T11783] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 373.081276][T11783] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2244: Failed to acquire dquot type 1 [ 373.097960][T11796] lo speed is unknown, defaulting to 1000 [ 373.281732][T11801] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 373.485867][T11807] 9p: Bad value for 'wfdno' [ 373.538028][ T28] audit: type=1400 audit(349.945:1513): avc: denied { unmount } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 373.572272][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 373.959465][T11809] loop9: detected capacity change from 0 to 8192 [ 374.287634][T11809] loop9: p1 < > p2 p4 < p5 > [ 374.301714][T11809] loop9: partition table partially beyond EOD, truncated [ 374.308908][T11809] loop9: p1 start 134217728 is beyond EOD, truncated [ 374.315716][T11809] loop9: p2 size 591360 extends beyond EOD, truncated [ 374.324587][T11809] loop9: p5 size 591360 extends beyond EOD, truncated [ 374.345341][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.562083][T11827] netlink: 'syz.0.2261': attribute type 1 has an invalid length. [ 374.624292][T11829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2263'. [ 374.699424][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 374.774570][T11833] loop9: detected capacity change from 0 to 256 [ 374.852813][T11833] netlink: 'syz.9.2264': attribute type 21 has an invalid length. [ 374.884863][T11833] smc: net device bond0 applied user defined pnetid SYZ2 [ 374.905422][T11838] loop0: detected capacity change from 0 to 512 [ 375.023317][T11838] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 375.185811][ T4108] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 375.216181][ T4108] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 375.234858][T11838] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 375.252461][T11838] Quota error (device loop0): write_blk: dquota write failed [ 375.259865][T11838] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 375.304630][T11857] lo speed is unknown, defaulting to 1000 [ 375.311712][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 375.318225][ C1] EXT4-fs (loop0): initial error at time 351: ext4_mb_generate_buddy:1317 [ 375.326845][ C1] EXT4-fs (loop0): last error at time 351: ext4_mb_generate_buddy:1317 [ 375.344415][T11838] Quota error (device loop0): write_blk: dquota write failed [ 375.360132][T11838] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2266: Failed to acquire dquot type 1 [ 375.371479][T11838] loop0: lost filesystem error report for type 5 error -28 [ 375.372026][T11838] EXT4-fs (loop0): 1 truncate cleaned up [ 375.404063][T11838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.428856][T11838] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 375.470852][T11838] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2266: Failed to acquire dquot type 1 [ 375.545311][T11857] Q±6ã`Ò˜: entered allmulticast mode [ 375.550974][T11857] Q±6ã`Ò˜: left allmulticast mode [ 375.632303][T11872] netlink: 140 bytes leftover after parsing attributes in process `syz.9.2274'. [ 375.642128][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2274'. [ 375.651136][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2274'. [ 375.669510][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2275'. [ 375.848210][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 375.948779][T11883] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2276'. [ 375.998525][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.120447][T11896] loop9: detected capacity change from 0 to 764 [ 376.128711][T11896] Symlink component flag not implemented [ 376.152078][T11900] FAULT_INJECTION: forcing a failure. [ 376.152078][T11900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.169046][T11900] CPU: 0 UID: 0 PID: 11900 Comm: syz.0.2284 Tainted: G W syzkaller #0 PREEMPT(full) [ 376.169080][T11900] Tainted: [W]=WARN [ 376.169087][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 376.169099][T11900] Call Trace: [ 376.169107][T11900] [ 376.169118][T11900] __dump_stack+0x1d/0x30 [ 376.169152][T11900] dump_stack_lvl+0x95/0xd0 [ 376.169259][T11900] dump_stack+0x15/0x1b [ 376.169307][T11900] should_fail_ex+0x263/0x280 [ 376.169345][T11900] should_fail+0xb/0x20 [ 376.169430][T11900] should_fail_usercopy+0x1a/0x20 [ 376.169449][T11900] _copy_from_iter+0xcf/0xea0 [ 376.169481][T11900] ? should_failslab+0x8c/0xb0 [ 376.169506][T11900] ? __kvmalloc_node_noprof+0x33d/0x640 [ 376.169575][T11900] ? proc_sys_call_handler+0x247/0x4a0 [ 376.169678][T11900] proc_sys_call_handler+0x270/0x4a0 [ 376.169706][T11900] ? __pfx_proc_sys_write+0x10/0x10 [ 376.169729][T11900] proc_sys_write+0x22/0x30 [ 376.169752][T11900] vfs_write+0x5a6/0x9f0 [ 376.169839][T11900] ksys_write+0xdc/0x1a0 [ 376.169883][T11900] __x64_sys_write+0x40/0x50 [ 376.169926][T11900] x64_sys_call+0x27e1/0x3020 [ 376.169960][T11900] do_syscall_64+0x12c/0x3b0 [ 376.170022][T11900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.170043][T11900] RIP: 0033:0x7f237640c819 [ 376.170061][T11900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.170081][T11900] RSP: 002b:00007f2374e67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 376.170177][T11900] RAX: ffffffffffffffda RBX: 00007f2376685fa0 RCX: 00007f237640c819 [ 376.170195][T11900] RDX: 0000000000000012 RSI: 0000200000000140 RDI: 0000000000000003 [ 376.170212][T11900] RBP: 00007f2374e67090 R08: 0000000000000000 R09: 0000000000000000 [ 376.170228][T11900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.170287][T11900] R13: 00007f2376686038 R14: 00007f2376685fa0 R15: 00007ffc1f542c98 [ 376.170378][T11900] [ 376.426775][ T2727] Bluetooth: hci0: Frame reassembly failed (-84) [ 376.953761][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 377.511995][T11914] loop0: detected capacity change from 0 to 512 [ 378.080804][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 378.949063][ T3589] Bluetooth: hci0: command 0x1003 tx timeout [ 378.955242][ T7011] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 379.229610][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 380.345875][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 380.842466][T11916] loop3: detected capacity change from 0 to 1024 [ 380.849323][T11916] EXT4-fs: Ignoring removed bh option [ 380.870449][T11916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.893351][T11920] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2289'. [ 380.924109][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 380.924126][ T28] audit: type=1400 audit(356.754:1514): avc: denied { rename } for pid=11915 comm="syz.3.2288" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.987343][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.012975][ T28] audit: type=1400 audit(356.754:1515): avc: denied { unlink } for pid=11915 comm="syz.3.2288" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 381.472999][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 381.498449][T11932] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2292'. [ 381.765149][T11936] loop3: detected capacity change from 0 to 8192 [ 381.812836][T11936] loop3: p1 < > p2 p4 < p5 > [ 381.814288][T11948] loop0: detected capacity change from 0 to 164 [ 381.828194][T11936] loop3: partition table partially beyond EOD, truncated [ 381.839307][T11948] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2298'. [ 381.850220][T11936] loop3: p1 start 134217728 is beyond EOD, truncated [ 381.861940][ T28] audit: type=1400 audit(357.631:1516): avc: denied { bind } for pid=11949 comm="syz.1.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 381.864828][T11936] loop3: p2 size 67072 extends beyond EOD, truncated [ 381.919072][T11936] loop3: p5 size 67072 extends beyond EOD, truncated [ 381.942046][ T28] audit: type=1400 audit(357.695:1517): avc: denied { write } for pid=11949 comm="syz.1.2299" path="socket:[33300]" dev="sockfs" ino=33300 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 382.011026][ T28] audit: type=1400 audit(357.769:1518): avc: denied { read } for pid=11949 comm="syz.1.2299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 382.193587][ T28] audit: type=1400 audit(357.935:1519): avc: denied { map } for pid=11959 comm="syz.0.2300" path="socket:[33307]" dev="sockfs" ino=33307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 382.589283][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 382.619962][T11969] macvtap1: entered promiscuous mode [ 382.626823][T11969] ip6gretap0: entered promiscuous mode [ 382.632504][T11969] macvtap1: entered allmulticast mode [ 382.638429][T11969] ip6gretap0: entered allmulticast mode [ 382.645649][T11969] ip6gretap0: left allmulticast mode [ 382.654466][T11969] ip6gretap0: left promiscuous mode [ 382.868622][T11983] loop3: detected capacity change from 0 to 256 [ 383.090249][T11990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2310'. [ 383.237174][T11995] loop0: detected capacity change from 0 to 512 [ 383.268585][T11995] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 383.297060][T11995] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 383.385313][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 383.391798][ C0] EXT4-fs (loop0): initial error at time 358: ext4_mb_generate_buddy:1317 [ 383.399076][T11995] Quota error (device loop0): write_blk: dquota write failed [ 383.400343][ C0] EXT4-fs (loop0): last error at time 358: ext4_mb_generate_buddy:1317 [ 383.407722][T11995] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 383.407759][T11995] Quota error (device loop0): write_blk: dquota write failed [ 383.416201][ C0] [ 383.425221][T11995] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 383.454601][T11995] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2311: Failed to acquire dquot type 1 [ 383.466264][T11995] loop0: lost filesystem error report for type 5 error -28 [ 383.466525][T11995] EXT4-fs (loop0): 1 truncate cleaned up [ 383.481088][T11995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.546779][T12013] loop9: detected capacity change from 0 to 256 [ 383.562244][T11995] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 383.591157][T11995] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2311: Failed to acquire dquot type 1 [ 383.727245][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 384.124052][T12026] loop3: detected capacity change from 0 to 164 [ 384.217313][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.353030][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2323'. [ 384.598809][T12044] loop9: detected capacity change from 0 to 1024 [ 384.623476][T12044] EXT4-fs: dax option not supported [ 384.647114][T12045] loop0: detected capacity change from 0 to 764 [ 384.672733][T12045] Symlink component flag not implemented [ 384.843554][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 384.949492][T12051] loop3: detected capacity change from 0 to 128 [ 384.972533][T12051] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 384.996633][T12051] System zones: 1-3, 19-19, 35-36 [ 385.012748][T12051] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 385.570786][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2332'. [ 385.701712][T12066] lo speed is unknown, defaulting to 1000 [ 385.743734][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 385.794010][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2334'. [ 385.970722][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 386.129194][T12077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.231149][T12077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.069268][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.097813][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 387.331259][T12089] set_capacity_and_notify: 2 callbacks suppressed [ 387.331278][T12089] loop9: detected capacity change from 0 to 164 [ 387.430100][T12094] 9pnet_virtio: no channels available for device syz [ 387.701500][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 387.747284][T12100] SELinux: failed to load policy [ 388.235808][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 389.336902][T12108] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2345'. [ 389.442677][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 389.621554][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 389.621572][ T28] audit: type=1400 audit(364.782:1523): avc: denied { create } for pid=12107 comm="syz.1.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 389.667062][ T28] audit: type=1400 audit(364.818:1524): avc: denied { connect } for pid=12107 comm="syz.1.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 390.598505][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 390.888585][ T28] audit: type=1400 audit(365.953:1525): avc: denied { getattr } for pid=12149 comm="syz.3.2356" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=34222 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 390.927090][T12156] erspan0: entered promiscuous mode [ 390.950684][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2358'. [ 391.009703][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2359'. [ 391.020626][T12160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2359'. [ 391.038871][ T28] audit: type=1326 audit(366.092:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ad2c819 code=0x7ffc0000 [ 391.040766][T12162] FAULT_INJECTION: forcing a failure. [ 391.040766][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 391.061815][ T28] audit: type=1326 audit(366.092:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ad2c819 code=0x7ffc0000 [ 391.061950][ T28] audit: type=1326 audit(366.092:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ad2c819 code=0x7ffc0000 [ 391.111607][T12162] CPU: 0 UID: 0 PID: 12162 Comm: syz.1.2360 Tainted: G W syzkaller #0 PREEMPT(full) [ 391.111678][T12162] Tainted: [W]=WARN [ 391.111686][T12162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 391.111698][T12162] Call Trace: [ 391.111706][T12162] [ 391.111716][T12162] __dump_stack+0x1d/0x30 [ 391.111794][T12162] dump_stack_lvl+0x95/0xd0 [ 391.111866][T12162] dump_stack+0x15/0x1b [ 391.111890][T12162] should_fail_ex+0x263/0x280 [ 391.111922][T12162] ? create_io_worker+0x5c/0x360 [ 391.111976][T12162] should_failslab+0x8c/0xb0 [ 391.111998][T12162] __kmalloc_cache_noprof+0x5f/0x400 [ 391.112023][T12162] create_io_worker+0x5c/0x360 [ 391.112049][T12162] io_wq_enqueue+0x461/0x540 [ 391.112115][T12162] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 391.112142][T12162] io_queue_iowq+0x24e/0x320 [ 391.112186][T12162] ? io_queue_sqe_fallback+0xdd/0x140 [ 391.112213][T12162] io_queue_sqe_fallback+0xe5/0x140 [ 391.112300][T12162] io_submit_sqes+0xd39/0x1170 [ 391.112329][T12162] __se_sys_io_uring_enter+0x255/0xfb0 [ 391.112353][T12162] ? mutex_lock+0x57/0x90 [ 391.112419][T12162] ? mutex_unlock+0x4e/0x90 [ 391.112532][T12162] __x64_sys_io_uring_enter+0x78/0x90 [ 391.112565][T12162] x64_sys_call+0x1e16/0x3020 [ 391.112672][T12162] do_syscall_64+0x12c/0x3b0 [ 391.112699][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.112722][T12162] RIP: 0033:0x7f137ad2c819 [ 391.112751][T12162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.112770][T12162] RSP: 002b:00007f1379787028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 391.112793][T12162] RAX: ffffffffffffffda RBX: 00007f137afa5fa0 RCX: 00007f137ad2c819 [ 391.112808][T12162] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 391.112848][T12162] RBP: 00007f1379787090 R08: 0000000000000000 R09: 0000000000000000 [ 391.112862][T12162] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 391.112876][T12162] R13: 00007f137afa6038 R14: 00007f137afa5fa0 R15: 00007ffd0e1bbd68 [ 391.112937][T12162] [ 391.333321][ T28] audit: type=1326 audit(366.092:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f137ad2c819 code=0x7ffc0000 [ 391.356405][ T28] audit: type=1326 audit(366.092:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f137aced04e code=0x7ffc0000 [ 391.408767][ T28] audit: type=1326 audit(366.092:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f137aced04e code=0x7ffc0000 [ 391.461684][ T28] audit: type=1326 audit(366.092:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12161 comm="syz.1.2360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f137ad2c819 code=0x7ffc0000 [ 391.689745][T12179] loop9: detected capacity change from 0 to 764 [ 391.703879][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 391.803013][T12179] Symlink component flag not implemented [ 391.899736][T12183] loop0: detected capacity change from 0 to 512 [ 391.999434][T12183] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 392.045832][T12183] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 392.047487][T12189] loop3: detected capacity change from 0 to 512 [ 392.073137][T12183] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.2367: bad orphan inode 4 [ 392.302258][T12183] loop0: lost filesystem error report for type 5 error -117 [ 392.310771][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 392.313329][T12183] EXT4-fs (loop0): 1 orphan inode deleted [ 392.318110][ C0] EXT4-fs (loop0): initial error at time 367: ext4_orphan_get:1423 [ 392.338210][ C0] EXT4-fs (loop0): last error at time 367: ext4_orphan_get:1423 [ 392.370176][T12183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.388344][T12189] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 392.793627][T12189] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 392.865277][T12189] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2368: Failed to acquire dquot type 1 [ 392.876807][T12189] loop3: lost filesystem error report for type 5 error -28 [ 392.878050][T12189] EXT4-fs (loop3): 1 truncate cleaned up [ 392.891370][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 392.891467][ C1] EXT4-fs (loop3): initial error at time 367: ext4_mb_generate_buddy:1317 [ 392.891543][ C1] EXT4-fs (loop3): last error at time 367: ext4_acquire_dquot:7034 [ 392.894393][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 393.086147][T12189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.207888][T12191] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 393.382358][T12187] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 393.412563][T12187] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2368: Failed to acquire dquot type 1 [ 394.044834][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 394.782781][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.889626][T12207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12207 comm=syz.0.2371 [ 394.982188][T12208] loop0: detected capacity change from 0 to 256 [ 395.002498][T12208] FAT-fs (loop0): bogus number of FAT structure [ 395.010389][T12208] FAT-fs (loop0): Can't find a valid FAT filesystem [ 395.149517][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.164577][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 395.259839][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 395.278632][T12227] erspan0: entered promiscuous mode [ 395.287215][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 395.299522][T12227] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2379'. [ 395.777037][T12244] loop3: detected capacity change from 0 to 512 [ 395.808731][T12249] loop9: detected capacity change from 0 to 8192 [ 395.828649][T12244] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.877501][T12249] loop9: p1 p2 p3 p4 [ 395.883444][T12249] loop9: p1 size 67898881 extends beyond EOD, truncated [ 395.899270][T12249] loop9: p3 start 4294443008 is beyond EOD, truncated [ 395.906659][T12249] loop9: p4 size 262144 extends beyond EOD, truncated [ 395.914292][T12244] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 395.958112][T12244] __quota_error: 14 callbacks suppressed [ 395.958168][T12244] Quota error (device loop3): write_blk: dquota write failed [ 395.971785][T12244] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 395.980861][T12244] Quota error (device loop3): write_blk: dquota write failed [ 395.988342][T12244] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 395.998781][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 395.999105][ C0] EXT4-fs (loop3): initial error at time 370: ext4_mb_generate_buddy:1317 [ 395.999226][ C0] EXT4-fs (loop3): last error at time 370: ext4_mb_generate_buddy:1317 [ 396.039005][T12249] lo speed is unknown, defaulting to 1000 [ 396.090434][T12244] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2385: Failed to acquire dquot type 1 [ 396.101704][T12244] loop3: lost filesystem error report for type 5 error -28 [ 396.102102][T12262] FAULT_INJECTION: forcing a failure. [ 396.102102][T12262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.102296][T12244] EXT4-fs (loop3): 1 truncate cleaned up [ 396.131135][T12262] CPU: 0 UID: 0 PID: 12262 Comm: syz.0.2391 Tainted: G W syzkaller #0 PREEMPT(full) [ 396.131172][T12262] Tainted: [W]=WARN [ 396.131239][T12262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 396.131254][T12262] Call Trace: [ 396.131262][T12262] [ 396.131271][T12262] __dump_stack+0x1d/0x30 [ 396.131337][T12262] dump_stack_lvl+0x95/0xd0 [ 396.131366][T12262] dump_stack+0x15/0x1b [ 396.131399][T12262] should_fail_ex+0x263/0x280 [ 396.131433][T12262] should_fail+0xb/0x20 [ 396.131482][T12262] should_fail_usercopy+0x1a/0x20 [ 396.131507][T12262] _copy_from_user+0x1c/0xb0 [ 396.131531][T12262] memdup_user+0x5e/0xd0 [ 396.131640][T12262] strndup_user+0x68/0xb0 [ 396.131662][T12262] __se_sys_mount+0x4d/0x2e0 [ 396.131687][T12262] ? fput+0x8f/0xc0 [ 396.131714][T12262] ? ksys_write+0x194/0x1a0 [ 396.131760][T12262] __x64_sys_mount+0x67/0x80 [ 396.131784][T12262] x64_sys_call+0x2d61/0x3020 [ 396.131816][T12262] do_syscall_64+0x12c/0x3b0 [ 396.131845][T12262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.131884][T12262] RIP: 0033:0x7f237640c819 [ 396.131903][T12262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.131935][T12262] RSP: 002b:00007f2374e67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 396.131959][T12262] RAX: ffffffffffffffda RBX: 00007f2376685fa0 RCX: 00007f237640c819 [ 396.131975][T12262] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000000000000000 [ 396.131990][T12262] RBP: 00007f2374e67090 R08: 0000000000000000 R09: 0000000000000000 [ 396.132005][T12262] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001 [ 396.132018][T12262] R13: 00007f2376686038 R14: 00007f2376685fa0 R15: 00007ffc1f542c98 [ 396.132103][T12262] [ 396.132523][T12244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.249097][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 396.299327][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 396.338143][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 396.380589][ T3941] udevd[3941]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 396.409566][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2393'. [ 396.424797][T12272] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2395'. [ 396.437815][T12244] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 396.487806][T12244] Quota error (device loop3): write_blk: dquota write failed [ 396.495244][T12244] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 396.505194][T12244] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2385: Failed to acquire dquot type 1 [ 396.517665][T12272] bond0 (unregistering): Released all slaves [ 396.598348][T12277] bond8: (slave bond_slave_1): Device is not our slave [ 396.605427][T12277] bond8: option active_slave: invalid value (bond_slave_1) [ 396.615239][T12277] bond8 (unregistering): Released all slaves [ 396.816534][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.000738][ T28] audit: type=1400 audit(371.591:1541): avc: denied { lock } for pid=12295 comm="syz.9.2404" path="socket:[34971]" dev="sockfs" ino=34971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 397.030153][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2404'. [ 397.090767][T12080] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 397.099611][T12080] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 397.108759][T12080] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 397.117948][T12080] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 397.180359][T12300] loop0: detected capacity change from 0 to 164 [ 397.442971][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 398.187887][T12307] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2408'. [ 398.221583][T12309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'. [ 398.320351][T12313] GUP no longer grows the stack in syz.9.2411 (12313): 200000004000-20000000a000 (200000002000) [ 398.437155][T12313] CPU: 1 UID: 0 PID: 12313 Comm: syz.9.2411 Tainted: G W syzkaller #0 PREEMPT(full) [ 398.437193][T12313] Tainted: [W]=WARN [ 398.437200][T12313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 398.437212][T12313] Call Trace: [ 398.437220][T12313] [ 398.437229][T12313] __dump_stack+0x1d/0x30 [ 398.437261][T12313] dump_stack_lvl+0x95/0xd0 [ 398.437342][T12313] dump_stack+0x15/0x1b [ 398.437373][T12313] __get_user_pages+0x1b26/0x1f10 [ 398.437414][T12313] ? __rcu_read_unlock+0x4e/0x70 [ 398.437521][T12313] get_user_pages_remote+0x1d5/0x6b0 [ 398.437553][T12313] __access_remote_vm+0x154/0x4c0 [ 398.437602][T12313] access_remote_vm+0x32/0x40 [ 398.437637][T12313] proc_pid_cmdline_read+0x32b/0x6b0 [ 398.437699][T12313] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 398.437782][T12313] vfs_readv+0x432/0x6e0 [ 398.437812][T12313] __x64_sys_preadv+0xfd/0x1c0 [ 398.437837][T12313] x64_sys_call+0x2915/0x3020 [ 398.437907][T12313] do_syscall_64+0x12c/0x3b0 [ 398.437933][T12313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.437973][T12313] RIP: 0033:0x7f3c2098c819 [ 398.437993][T12313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.438016][T12313] RSP: 002b:00007f3c1f3df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 398.438076][T12313] RAX: ffffffffffffffda RBX: 00007f3c20c05fa0 RCX: 00007f3c2098c819 [ 398.438094][T12313] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000009 [ 398.438110][T12313] RBP: 00007f3c20a22c91 R08: 00000000fffffff9 R09: 0000000000000000 [ 398.438126][T12313] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 398.438142][T12313] R13: 00007f3c20c06038 R14: 00007f3c20c05fa0 R15: 00007ffc63e97728 [ 398.438165][T12313] [ 398.626610][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 398.655583][T12313] loop9: detected capacity change from 0 to 1024 [ 398.732372][T12320] loop9: detected capacity change from 0 to 512 [ 398.759384][T12320] journal_path: Non-blockdev passed as './file2' [ 398.768044][T12324] loop0: detected capacity change from 0 to 1024 [ 398.775021][T12320] EXT4-fs: error: could not find journal device path [ 398.785868][T12324] EXT4-fs: Ignoring removed bh option [ 398.821214][T12324] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.895980][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2417'. [ 399.752694][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.767176][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 399.808504][T12338] loop3: detected capacity change from 0 to 512 [ 399.818552][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2422'. [ 399.837882][T12338] EXT4-fs (loop3): fragment/cluster size (262144) != block size (1024) [ 399.849984][T12344] raw_sendmsg: syz.9.2423 forgot to set AF_INET. Fix it! [ 399.876327][T12346] cgroup: name respecified [ 399.880970][ T28] audit: type=1400 audit(374.258:1542): avc: denied { mounton } for pid=12343 comm="syz.9.2423" path="/syzcgroup/cpu/syz9/cgroup.procs" dev="cgroup" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 399.951426][T12354] FAULT_INJECTION: forcing a failure. [ 399.951426][T12354] name failslab, interval 1, probability 0, space 0, times 0 [ 399.958162][T12352] SELinux: policydb magic number 0x30303030 does not match expected magic number 0xf97cff8c [ 399.964090][T12354] CPU: 1 UID: 0 PID: 12354 Comm: syz.1.2426 Tainted: G W syzkaller #0 PREEMPT(full) [ 399.964129][T12354] Tainted: [W]=WARN [ 399.964138][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 399.964154][T12354] Call Trace: [ 399.964162][T12354] [ 399.964172][T12354] __dump_stack+0x1d/0x30 [ 399.964215][T12354] dump_stack_lvl+0x95/0xd0 [ 399.964240][T12354] dump_stack+0x15/0x1b [ 399.964302][T12354] should_fail_ex+0x263/0x280 [ 399.964335][T12354] should_failslab+0x8c/0xb0 [ 399.964357][T12354] __kmalloc_noprof+0xb8/0x4d0 [ 399.964379][T12354] ? flow_action_cookie_create+0x26/0x70 [ 399.964460][T12354] flow_action_cookie_create+0x26/0x70 [ 399.964489][T12354] tc_setup_action+0x104/0x440 [ 399.964522][T12354] tcf_action_offload_add_ex+0x261/0x3c0 [ 399.964603][T12354] tcf_action_init+0x368/0x700 [ 399.964706][T12354] tc_ctl_action+0x29b/0x830 [ 399.964741][T12354] ? __pfx_tc_ctl_action+0x10/0x10 [ 399.964763][T12354] rtnetlink_rcv_msg+0x6a7/0x720 [ 399.964856][T12354] ? avc_has_perm_noaudit+0xab/0x130 [ 399.964933][T12354] netlink_rcv_skb+0x123/0x220 [ 399.964964][T12354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 399.965056][T12354] rtnetlink_rcv+0x1c/0x30 [ 399.965096][T12354] netlink_unicast+0x5a8/0x680 [ 399.965125][T12354] netlink_sendmsg+0x5c8/0x6f0 [ 399.965258][T12354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.965290][T12354] ____sys_sendmsg+0x563/0x5b0 [ 399.965321][T12354] ___sys_sendmsg+0x195/0x1e0 [ 399.965436][T12354] __x64_sys_sendmsg+0xd4/0x160 [ 399.965480][T12354] x64_sys_call+0x194c/0x3020 [ 399.965509][T12354] do_syscall_64+0x12c/0x3b0 [ 399.965546][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.965570][T12354] RIP: 0033:0x7f137ad2c819 [ 399.965588][T12354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.965607][T12354] RSP: 002b:00007f1379787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.965687][T12354] RAX: ffffffffffffffda RBX: 00007f137afa5fa0 RCX: 00007f137ad2c819 [ 399.965709][T12354] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 399.965723][T12354] RBP: 00007f1379787090 R08: 0000000000000000 R09: 0000000000000000 [ 399.965805][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.965870][T12354] R13: 00007f137afa6038 R14: 00007f137afa5fa0 R15: 00007ffd0e1bbd68 [ 399.965890][T12354] [ 399.977499][T12338] loop3: detected capacity change from 0 to 512 [ 400.014938][T12352] SELinux: failed to load policy [ 400.035746][T12338] EXT4-fs: Ignoring removed oldalloc option [ 400.048651][T12355] loop9: detected capacity change from 0 to 512 [ 400.130567][T12338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 400.222440][T12360] FAULT_INJECTION: forcing a failure. [ 400.222440][T12360] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.231615][T12352] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 400.268028][T12352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 400.281367][T12360] CPU: 0 UID: 0 PID: 12360 Comm: syz.0.2428 Tainted: G W syzkaller #0 PREEMPT(full) [ 400.281418][T12360] Tainted: [W]=WARN [ 400.281426][T12360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 400.281439][T12360] Call Trace: [ 400.281446][T12360] [ 400.281453][T12360] __dump_stack+0x1d/0x30 [ 400.281488][T12360] dump_stack_lvl+0x95/0xd0 [ 400.281517][T12360] dump_stack+0x15/0x1b [ 400.281553][T12360] should_fail_ex+0x263/0x280 [ 400.281589][T12360] should_fail_alloc_page+0xf2/0x100 [ 400.281716][T12360] __alloc_frozen_pages_noprof+0x108/0x350 [ 400.281749][T12360] alloc_pages_mpol+0xb3/0x260 [ 400.281780][T12360] ? virtqueue_poll+0x96/0x1e0 [ 400.281811][T12360] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 400.281970][T12360] do_wp_page+0x70e/0x2040 [ 400.281999][T12360] ? _raw_spin_lock+0x52/0xa0 [ 400.282029][T12360] ? __rcu_read_lock+0x36/0x50 [ 400.282079][T12360] handle_mm_fault+0x8b9/0x2e70 [ 400.282111][T12360] ? vma_start_read+0x1c7/0x2c0 [ 400.282160][T12360] do_user_addr_fault+0x62f/0x1050 [ 400.282255][T12360] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 400.282289][T12360] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 400.282371][T12360] ? trace_page_fault_user+0x1f/0xa0 [ 400.282404][T12360] exc_page_fault+0x62/0xa0 [ 400.282427][T12360] asm_exc_page_fault+0x26/0x30 [ 400.282520][T12360] RIP: 0033:0x7f23762c3ae3 [ 400.282585][T12360] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 400.282606][T12360] RSP: 002b:00007f2374e66470 EFLAGS: 00010202 [ 400.282627][T12360] RAX: 0000000000022005 RBX: 00007f2374e66530 RCX: 00007f236ca47000 [ 400.282644][T12360] RDX: 00007f2374e666d0 RSI: 0000000000000001 RDI: 00007f2374e665d0 [ 400.282681][T12360] RBP: 0000000000000061 R08: 0000000000000008 R09: 00000000000000a2 [ 400.282694][T12360] R10: 00000000000000c0 R11: 00007f2374e66530 R12: 0000000000000001 [ 400.282707][T12360] R13: 00007f23764c2600 R14: 0000000000000010 R15: 00007f2374e665d0 [ 400.282725][T12360] [ 400.282764][T12360] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 400.290984][T12338] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2421: iget: bad i_size value: 38620345925642 [ 400.314864][T12360] EXT4-fs: Ignoring removed bh option [ 400.336570][T12352] vhci_hcd vhci_hcd.0: Device attached [ 400.354034][T12338] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 400.614649][T12360] Quota error (device loop0): v2_read_file_info: Number of blocks too big for quota file size (536877056 > 6144). [ 400.675285][T12360] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 400.710623][T12360] EXT4-fs (loop0): mount failed [ 400.753444][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 400.760650][ C0] EXT4-fs (loop3): initial error at time 375: ext4_orphan_get:1397: inode 15 [ 400.771175][ C0] EXT4-fs (loop3): last error at time 375: ext4_orphan_get:1397: inode 15 [ 400.831050][T12338] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2421: couldn't read orphan inode 15 (err -117) [ 400.854729][T12338] loop3: lost filesystem error report for type 5 error -117 [ 400.869590][T12338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.894270][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 400.916254][ T28] audit: type=1400 audit(375.190:1543): avc: denied { rmdir } for pid=12337 comm="syz.3.2421" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 400.960068][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2421'. [ 400.980553][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.990906][T12361] vhci_hcd: connection closed [ 400.991023][ T2727] vhci_hcd vhci_hcd.9: stop threads [ 401.029714][ T2727] vhci_hcd vhci_hcd.9: release socket [ 401.040376][ T2727] vhci_hcd vhci_hcd.9: disconnect device [ 401.712458][T12390] set_capacity_and_notify: 1 callbacks suppressed [ 401.712476][T12390] loop9: detected capacity change from 0 to 1024 [ 401.804098][T12399] wireguard0: entered promiscuous mode [ 401.812999][T12399] wireguard0: entered allmulticast mode [ 401.845321][T12404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2442'. [ 401.863513][T12404] loop3: detected capacity change from 0 to 1024 [ 401.864891][ T3537] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 401.870556][T12404] EXT4-fs: inline encryption not supported [ 401.883680][T12404] EXT4-fs: Ignoring removed nobh option [ 401.898000][T12390] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.916015][ T3537] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.007389][T12404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 402.016467][T12404] System zones: 0-1, 3-12 [ 402.026341][T12404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.039896][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2436'. [ 402.061077][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.099751][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 402.130406][T12421] 9p: Could not find request transport: fl [ 402.138330][ T28] audit: type=1400 audit(376.288:1544): avc: denied { connect } for pid=12423 comm="syz.1.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 402.186799][ T28] audit: type=1400 audit(376.288:1545): avc: denied { getopt } for pid=12423 comm="syz.1.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 402.214487][T12429] loop3: detected capacity change from 0 to 1024 [ 402.223954][T12429] EXT4-fs: test_dummy_encryption option not supported [ 402.235961][ T28] audit: type=1400 audit(376.352:1546): avc: denied { read } for pid=12416 comm="syz.8.2445" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.326999][ T28] audit: type=1400 audit(376.352:1547): avc: denied { open } for pid=12416 comm="syz.8.2445" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.350142][ T28] audit: type=1400 audit(376.352:1548): avc: denied { ioctl } for pid=12416 comm="syz.8.2445" path="/dev/ptp0" dev="devtmpfs" ino=247 ioctlcmd=0x3d09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 402.515840][T12442] veth1_to_bridge: entered allmulticast mode [ 402.531021][T12442] veth1_to_bridge: left allmulticast mode [ 402.641805][T12435] loop0: detected capacity change from 0 to 512 [ 402.648462][T12435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 402.742856][T12454] loop5: detected capacity change from 0 to 7 [ 402.909572][T12465] random: crng reseeded on system resumption [ 403.023485][T12467] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.095924][ T28] audit: type=1400 audit(377.173:1549): avc: denied { accept } for pid=12466 comm="syz.8.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 403.165454][T12471] netlink: 'syz.8.2461': attribute type 10 has an invalid length. [ 403.189914][T12471] team0: Device xfrm0 is of different type [ 403.224433][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 403.234791][T12471] delete_channel: no stack [ 403.239459][ T28] audit: type=1400 audit(377.349:1550): avc: denied { create } for pid=12470 comm="syz.8.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 403.263560][T12471] delete_channel: no stack [ 403.313874][T12471] lo speed is unknown, defaulting to 1000 [ 403.575947][T12435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 403.615201][T12435] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.882070][T12435] EXT4-fs error (device loop0): ext4_init_orphan_info:583: comm syz.0.2451: inode #0: comm syz.0.2451: iget: illegal inode # [ 403.895153][T12435] loop0: lost filesystem error report for type 5 error -117 [ 403.927343][T12435] EXT4-fs (loop0): Remounting filesystem read-only [ 403.941181][T12435] EXT4-fs (loop0): get orphan inode failed [ 403.947213][T12435] EXT4-fs (loop0): mount failed [ 403.961027][ T4108] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 403.995895][T12484] bond8: entered allmulticast mode [ 404.002639][ T4108] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 404.140166][T12490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=12490 comm=syz.1.2467 [ 404.217667][T12499] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 404.227720][T12499] netlink: 'syz.3.2464': attribute type 1 has an invalid length. [ 404.279157][T12488] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 404.290228][T12488] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 404.374245][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 404.778798][T12525] loop3: detected capacity change from 0 to 512 [ 404.785889][T12525] EXT4-fs: Ignoring removed nobh option [ 404.795746][T12525] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 404.816416][T12525] EXT4-fs (loop3): 1 truncate cleaned up [ 404.822639][T12525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.837112][T12525] SELinux: policydb magic number 0x78ff8c does not match expected magic number 0xf97cff8c [ 404.847699][T12525] SELinux: failed to load policy [ 404.916158][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.960013][T12536] loop3: detected capacity change from 0 to 1024 [ 404.967646][T12536] EXT4-fs: Ignoring removed bh option [ 404.987265][T12542] netlink: 'syz.0.2482': attribute type 1 has an invalid length. [ 404.990010][T12536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.015942][T12536] EXT4-fs (loop3): shut down requested (1) [ 405.026998][T12536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 405.044478][T12536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 405.055838][T12536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 405.066401][T12536] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=16 [ 405.123737][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.210080][T12548] loop0: detected capacity change from 0 to 8192 [ 405.230834][T12548] loop0: p1 < > p2 p4 < p5 > [ 405.235840][T12548] loop0: partition table partially beyond EOD, truncated [ 405.252352][T12556] loop3: detected capacity change from 0 to 512 [ 405.254435][T12548] loop0: p1 start 134217728 is beyond EOD, truncated [ 405.267509][T12548] loop0: p2 size 591360 extends beyond EOD, truncated [ 405.281125][T12556] EXT4-fs (loop3): 1 truncate cleaned up [ 405.292167][T12548] loop0: p5 size 591360 extends beyond EOD, truncated [ 405.319732][T12556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.368708][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 405.421479][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 405.478636][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 405.494516][T12559] netlink: 'syz.9.2488': attribute type 5 has an invalid length. [ 405.502479][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2488'. [ 406.129409][T12591] loop0: detected capacity change from 0 to 512 [ 406.139241][T12591] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.182617][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.308194][T12591] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 406.336887][T12591] Quota error (device loop0): write_blk: dquota write failed [ 406.344307][T12591] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 406.367636][T12591] Quota error (device loop0): write_blk: dquota write failed [ 406.375070][T12591] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2496: Failed to acquire dquot type 1 [ 406.386637][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 406.386899][ C0] EXT4-fs (loop0): initial error at time 380: ext4_mb_generate_buddy:1317 [ 406.387008][ C0] EXT4-fs (loop0): last error at time 380: ext4_mb_generate_buddy:1317 [ 406.395638][T12602] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000004' [ 406.420488][T12602] dummy0: entered allmulticast mode [ 406.484904][T12591] loop0: lost filesystem error report for type 5 error -28 [ 406.490010][T12591] EXT4-fs (loop0): 1 truncate cleaned up [ 406.503301][T12591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.518252][T12588] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 406.535150][T12588] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2496: Failed to acquire dquot type 1 [ 406.616607][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 406.642027][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 406.925597][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.089542][T12620] EXT4-fs: test_dummy_encryption option not supported [ 407.195127][T12625] syzkaller0: entered promiscuous mode [ 407.209016][T12625] syzkaller0: entered allmulticast mode [ 407.235105][T12600] dummy0: left allmulticast mode [ 407.289302][T12632] set_capacity_and_notify: 2 callbacks suppressed [ 407.289322][T12632] loop3: detected capacity change from 0 to 512 [ 407.328650][T12632] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 407.343957][T12632] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 407.352896][T12632] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2511: bad orphan inode 4 [ 407.363082][T12632] loop3: lost filesystem error report for type 5 error -117 [ 407.363227][T12632] EXT4-fs (loop3): 1 orphan inode deleted [ 407.370580][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 407.370610][ C0] EXT4-fs (loop3): initial error at time 381: ext4_orphan_get:1423 [ 407.370631][ C0] EXT4-fs (loop3): last error at time 381: ext4_orphan_get:1423 [ 407.399289][T12632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.646328][T12643] FAULT_INJECTION: forcing a failure. [ 407.646328][T12643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.700992][T12643] CPU: 1 UID: 0 PID: 12643 Comm: syz.9.2513 Tainted: G W syzkaller #0 PREEMPT(full) [ 407.701032][T12643] Tainted: [W]=WARN [ 407.701041][T12643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.701054][T12643] Call Trace: [ 407.701062][T12643] [ 407.701071][T12643] __dump_stack+0x1d/0x30 [ 407.701161][T12643] dump_stack_lvl+0x95/0xd0 [ 407.701241][T12643] dump_stack+0x15/0x1b [ 407.701336][T12643] should_fail_ex+0x263/0x280 [ 407.701374][T12643] should_fail+0xb/0x20 [ 407.701406][T12643] should_fail_usercopy+0x1a/0x20 [ 407.701547][T12643] _copy_from_user+0x1c/0xb0 [ 407.701569][T12643] kstrtouint_from_user+0x69/0xf0 [ 407.701616][T12643] ? 0xffffffff81000000 [ 407.701678][T12643] ? selinux_file_permission+0x1e1/0x320 [ 407.701712][T12643] proc_fail_nth_write+0x50/0x160 [ 407.701804][T12643] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 407.701840][T12643] vfs_write+0x269/0x9f0 [ 407.701895][T12643] ? __rcu_read_unlock+0x4e/0x70 [ 407.701920][T12643] ? __fget_files+0x184/0x1c0 [ 407.701946][T12643] ? mutex_lock+0x57/0x90 [ 407.702003][T12643] ksys_write+0xdc/0x1a0 [ 407.702056][T12643] __x64_sys_write+0x40/0x50 [ 407.702093][T12643] x64_sys_call+0x27e1/0x3020 [ 407.702190][T12643] do_syscall_64+0x12c/0x3b0 [ 407.702251][T12643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.702277][T12643] RIP: 0033:0x7f3c2094d04e [ 407.702297][T12643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 407.702332][T12643] RSP: 002b:00007f3c1f3bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.702369][T12643] RAX: ffffffffffffffda RBX: 00007f3c1f3be6c0 RCX: 00007f3c2094d04e [ 407.702386][T12643] RDX: 0000000000000001 RSI: 00007f3c1f3be0a0 RDI: 0000000000000005 [ 407.702426][T12643] RBP: 00007f3c1f3be090 R08: 0000000000000000 R09: 0000000000000000 [ 407.702442][T12643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.702499][T12643] R13: 00007f3c20c06128 R14: 00007f3c20c06090 R15: 00007ffc63e97728 [ 407.702520][T12643] [ 407.917655][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 408.224823][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'. [ 408.294224][T12653] netlink: 'syz.0.2517': attribute type 10 has an invalid length. [ 408.334268][T12653] team0: Port device vlan0 added [ 408.416583][T12658] dummy0: entered allmulticast mode [ 408.549885][T12648] dummy0: left allmulticast mode [ 408.830815][T12669] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2522'. [ 409.033446][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 409.307988][T12673] lo speed is unknown, defaulting to 1000 [ 409.433616][T12677] bond5: entered allmulticast mode [ 409.441857][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 409.441874][ T28] audit: type=1400 audit(383.079:1551): avc: denied { lock } for pid=12678 comm="syz.0.2526" path="socket:[35666]" dev="sockfs" ino=35666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 409.729279][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.752093][T12690] loop3: detected capacity change from 0 to 128 [ 409.772660][T12690] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.809871][ T3320] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.863602][T12699] loop3: detected capacity change from 0 to 1024 [ 409.872669][T12699] EXT4-fs: Ignoring removed bh option [ 409.891493][T12699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.906092][T12699] EXT4-fs (loop3): shut down requested (1) [ 409.925441][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.010809][ T28] audit: type=1400 audit(383.605:1552): avc: denied { override_creds } for pid=12706 comm="syz.8.2534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 410.171374][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 410.964950][T12728] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 410.976914][T12728] netlink: 'syz.0.2539': attribute type 1 has an invalid length. [ 411.008142][T12728] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 411.042959][T12728] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 411.100918][T12733] loop3: detected capacity change from 0 to 1024 [ 411.147408][T12733] EXT4-fs: Ignoring removed bh option [ 411.249962][T12733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.287662][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 411.384480][T12733] EXT4-fs (loop3): shut down requested (1) [ 411.473318][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.541929][T12743] bond9: entered allmulticast mode [ 411.817274][T12756] loop3: detected capacity change from 0 to 512 [ 411.851288][T12756] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 411.935941][T12759] bond15: entered allmulticast mode [ 411.960025][T12756] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 411.975018][T12756] Quota error (device loop3): write_blk: dquota write failed [ 411.982501][T12756] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 411.991581][T12756] Quota error (device loop3): write_blk: dquota write failed [ 411.999036][T12756] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 412.010360][T12756] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2548: Failed to acquire dquot type 1 [ 412.021589][T12756] loop3: lost filesystem error report for type 5 error -28 [ 412.021954][T12756] EXT4-fs (loop3): 1 truncate cleaned up [ 412.035320][T12756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.097574][T12756] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 412.139441][T12765] loop0: detected capacity change from 0 to 164 [ 412.322722][T12756] Quota error (device loop3): write_blk: dquota write failed [ 412.330270][T12756] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 412.335588][T12767] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2550'. [ 412.340173][ T28] audit: type=1400 audit(385.745:1553): avc: denied { view } for pid=12766 comm="syz.8.2550" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 412.340231][T12756] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2548: Failed to acquire dquot type 1 [ 412.387972][T12767] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2550'. [ 412.422830][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 412.450738][ T28] audit: type=1400 audit(385.838:1554): avc: denied { setopt } for pid=12769 comm="syz.8.2551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.664167][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.937393][T12790] loop3: detected capacity change from 0 to 512 [ 413.015643][T12790] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 413.045968][T12790] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 413.101830][T12790] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2558: Failed to acquire dquot type 1 [ 413.119388][T12790] loop3: lost filesystem error report for type 5 error -28 [ 413.122180][T12790] EXT4-fs (loop3): 1 truncate cleaned up [ 413.135491][T12790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.162297][T12796] bond16: entered allmulticast mode [ 413.199151][T12790] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 413.233271][T12790] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2558: Failed to acquire dquot type 1 [ 413.552770][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 413.740745][T12800] veth1: Caught tx_queue_len zero misconfig [ 413.748956][T12800] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2561'. [ 413.888213][T12802] FAULT_INJECTION: forcing a failure. [ 413.888213][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 413.910489][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.1.2562 Tainted: G W syzkaller #0 PREEMPT(full) [ 413.910529][T12802] Tainted: [W]=WARN [ 413.910538][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 413.910551][T12802] Call Trace: [ 413.910558][T12802] [ 413.910629][T12802] __dump_stack+0x1d/0x30 [ 413.910689][T12802] dump_stack_lvl+0x95/0xd0 [ 413.910714][T12802] dump_stack+0x15/0x1b [ 413.910801][T12802] should_fail_ex+0x263/0x280 [ 413.910836][T12802] ? __tcf_chain_get+0x91/0x270 [ 413.910885][T12802] should_failslab+0x8c/0xb0 [ 413.910910][T12802] __kmalloc_cache_noprof+0x5f/0x400 [ 413.911000][T12802] __tcf_chain_get+0x91/0x270 [ 413.911030][T12802] tc_new_tfilter+0x60d/0x1200 [ 413.911072][T12802] ? __pfx_tc_new_tfilter+0x10/0x10 [ 413.911101][T12802] rtnetlink_rcv_msg+0x64b/0x720 [ 413.911224][T12802] ? avc_has_perm_noaudit+0xab/0x130 [ 413.911257][T12802] netlink_rcv_skb+0x123/0x220 [ 413.911285][T12802] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.911408][T12802] rtnetlink_rcv+0x1c/0x30 [ 413.911435][T12802] netlink_unicast+0x5a8/0x680 [ 413.911468][T12802] netlink_sendmsg+0x5c8/0x6f0 [ 413.911556][T12802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.911585][T12802] ____sys_sendmsg+0x563/0x5b0 [ 413.911616][T12802] ___sys_sendmsg+0x195/0x1e0 [ 413.911715][T12802] __x64_sys_sendmsg+0xd4/0x160 [ 413.911768][T12802] x64_sys_call+0x194c/0x3020 [ 413.911804][T12802] do_syscall_64+0x12c/0x3b0 [ 413.911906][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.912008][T12802] RIP: 0033:0x7f137ad2c819 [ 413.912024][T12802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.912042][T12802] RSP: 002b:00007f1379787028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.912063][T12802] RAX: ffffffffffffffda RBX: 00007f137afa5fa0 RCX: 00007f137ad2c819 [ 413.912078][T12802] RDX: 0000000000004080 RSI: 0000200000000380 RDI: 0000000000000004 [ 413.912110][T12802] RBP: 00007f1379787090 R08: 0000000000000000 R09: 0000000000000000 [ 413.912124][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.912137][T12802] R13: 00007f137afa6038 R14: 00007f137afa5fa0 R15: 00007ffd0e1bbd68 [ 413.912159][T12802] [ 414.217235][T12804] program syz.1.2563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.302993][T12811] loop0: detected capacity change from 0 to 512 [ 414.310501][T12811] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 414.335748][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.420366][T12811] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 414.435238][T12811] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2564: Failed to acquire dquot type 1 [ 414.446697][T12811] loop0: lost filesystem error report for type 5 error -28 [ 414.447055][T12811] EXT4-fs (loop0): 1 truncate cleaned up [ 414.460979][T12811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.481709][T12811] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 414.515689][T12811] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.2564: Failed to acquire dquot type 1 [ 414.690821][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 414.843711][T12829] lo speed is unknown, defaulting to 1000 [ 414.901282][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2584'. [ 415.001562][T12866] loop3: detected capacity change from 0 to 512 [ 415.018368][T12866] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.053301][T12866] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 415.070017][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 415.076510][ C0] EXT4-fs (loop3): initial error at time 388: ext4_mb_generate_buddy:1317 [ 415.085100][ C0] EXT4-fs (loop3): last error at time 388: ext4_mb_generate_buddy:1317 [ 415.099538][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.112423][T12866] __quota_error: 13 callbacks suppressed [ 415.112438][T12866] Quota error (device loop3): write_blk: dquota write failed [ 415.126943][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.136862][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.150457][T12866] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 415.161371][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.176402][T12866] Quota error (device loop3): write_blk: dquota write failed [ 415.184438][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.206720][T12866] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 415.218911][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.234241][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.249324][T12866] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.2587: Failed to acquire dquot type 1 [ 415.274858][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.303372][T12866] loop3: lost filesystem error report for type 5 error -28 [ 415.303654][T12866] EXT4-fs (loop3): 1 truncate cleaned up [ 415.318654][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.336502][ T3537] hid-generic 00B0:0006:0002.0011: unknown main item tag 0x0 [ 415.349366][T12866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.371329][ T3537] hid-generic 00B0:0006:0002.0011: hidraw0: HID v0.05 Device [syz0] on syz0 [ 415.690423][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2587'. [ 415.796252][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 416.446264][ T3325] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 416.459832][ T3325] CPU: 0 UID: 0 PID: 3325 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 416.459865][ T3325] Tainted: [W]=WARN [ 416.459872][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.459884][ T3325] Call Trace: [ 416.459892][ T3325] [ 416.459972][ T3325] __dump_stack+0x1d/0x30 [ 416.459999][ T3325] dump_stack_lvl+0x95/0xd0 [ 416.460071][ T3325] dump_stack+0x15/0x1b [ 416.460157][ T3325] dump_header+0x80/0x240 [ 416.460181][ T3325] oom_kill_process+0x295/0x350 [ 416.460206][ T3325] out_of_memory+0x97d/0xb80 [ 416.460244][ T3325] try_charge_memcg+0x62f/0xa10 [ 416.460362][ T3325] charge_memcg+0x6d/0x120 [ 416.460420][ T3325] __mem_cgroup_charge+0x28/0xb0 [ 416.460522][ T3325] filemap_add_folio+0x110/0x350 [ 416.460597][ T3325] __filemap_get_folio_mpol+0x326/0x680 [ 416.460621][ T3325] filemap_fault+0x462/0xb70 [ 416.460647][ T3325] ? rcu_read_unlock_special+0x9f/0x200 [ 416.460680][ T3325] ? __pfx_filemap_map_pages+0x10/0x10 [ 416.460863][ T3325] handle_mm_fault+0x16cb/0x2e70 [ 416.460897][ T3325] ? __pfx_filemap_fault+0x10/0x10 [ 416.460931][ T3325] do_user_addr_fault+0x62f/0x1050 [ 416.461013][ T3325] ? trace_page_fault_user+0x1f/0xa0 [ 416.461115][ T3325] exc_page_fault+0x62/0xa0 [ 416.461137][ T3325] asm_exc_page_fault+0x26/0x30 [ 416.461157][ T3325] RIP: 0033:0x7f137abfa834 [ 416.461182][ T3325] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 80 af ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 79 ae ed 00 48 01 d1 [ 416.461200][ T3325] RSP: 002b:00007ffd0e1bc0d0 EFLAGS: 00010206 [ 416.461222][ T3325] RAX: 0000001b33f24000 RBX: 0000000000000646 RCX: 000000000005ef88 [ 416.461239][ T3325] RDX: 0000000007ac2ea1 RSI: 00007ffd0e1bc160 RDI: 0000000000000001 [ 416.461256][ T3325] RBP: 00007ffd0e1bc10c R08: 000000001d44c2a3 R09: 3fffffffffffffff [ 416.461396][ T3325] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 416.461413][ T3325] R13: 00000000000927c0 R14: 000000000005ee3c R15: 00007ffd0e1bc160 [ 416.461438][ T3325] [ 416.461490][ T3325] memory: usage 307200kB, limit 307200kB, failcnt 7607 [ 416.678755][ T3325] memory+swap: usage 374548kB, limit 9007199254740988kB, failcnt 0 [ 416.686769][ T3325] kmem: usage 247336kB, limit 9007199254740988kB, failcnt 0 [ 416.694229][ T3325] Memory cgroup stats for /syz1: [ 416.694984][ T3325] cache 51437568 [ 416.703593][ T3325] rss 73728 [ 416.712451][ T3325] shmem 51437568 [ 416.725459][ T3325] mapped_file 0 [ 416.734654][ T3325] dirty 0 [ 416.737789][ T3325] writeback 0 [ 416.741627][ T3325] workingset_refault_anon 286 [ 416.746343][ T3325] workingset_refault_file 2174 [ 416.757223][ T3325] swap 78016512 [ 416.761284][ T3325] swapcached 91009024 [ 416.765475][ T3325] pgpgin 551544 [ 416.768988][ T3325] pgpgout 538857 [ 416.773257][ T3325] pgfault 482886 [ 416.777029][ T3325] pgmajfault 53 [ 416.780606][ T3325] inactive_anon 9084928 [ 416.788084][ T3325] active_anon 42872832 [ 416.792349][ T3325] inactive_file 0 [ 416.797212][ T3325] active_file 4096 [ 416.801183][ T3325] unevictable 0 [ 416.804994][ T3325] hierarchical_memory_limit 314572800 [ 416.810691][ T3325] hierarchical_memsw_limit 9223372036854771712 [ 416.817303][ T3325] total_cache 51437568 [ 416.821528][ T3325] total_rss 73728 [ 416.825206][ T3325] total_shmem 51437568 [ 416.830115][ T3325] total_mapped_file 0 [ 416.834373][ T3325] total_dirty 0 [ 416.838139][ T3325] total_writeback 0 [ 416.842176][ T3325] total_workingset_refault_anon 286 [ 416.848498][ T3325] total_workingset_refault_file 2174 [ 416.853987][ T3325] total_swap 78016512 [ 416.858068][ T3325] total_swapcached 91009024 [ 416.863290][ T3325] total_pgpgin 551544 [ 416.867363][ T3325] total_pgpgout 538857 [ 416.872038][ T3325] total_pgfault 482886 [ 416.876212][ T3325] total_pgmajfault 53 [ 416.880745][ T3325] total_inactive_anon 9084928 [ 416.885564][ T3325] total_active_anon 42872832 [ 416.890291][ T3325] total_inactive_file 0 [ 416.895355][ T3325] total_active_file 4096 [ 416.899643][ T3325] total_unevictable 0 [ 416.906821][ T3325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2574,pid=12832,uid=0 [ 416.922663][ T3325] Memory cgroup out of memory: OOM victim 12832 (syz.1.2574) is already exiting. Skip killing the task [ 416.934203][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 416.960335][ T28] audit: type=1400 audit(390.017:1556): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 417.634460][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.883718][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.944239][T12923] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2605'. [ 418.011401][T12918] netlink: 'syz.0.2603': attribute type 10 has an invalid length. [ 418.050459][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 418.146819][T12932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2608'. [ 418.291535][ T28] audit: type=1400 audit(391.245:1557): avc: denied { getopt } for pid=12931 comm="syz.1.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 418.401530][T12921] team0: entered promiscuous mode [ 418.412968][T12921] team_slave_0: entered promiscuous mode [ 418.424042][T12921] team_slave_1: entered promiscuous mode [ 418.441094][T12921] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.452277][T12921] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 418.481979][ T28] audit: type=1400 audit(391.411:1558): avc: denied { write } for pid=12913 comm="syz.9.2604" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 418.648876][T12941] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2611'. [ 418.745575][T12947] bond15: entered promiscuous mode [ 418.759328][T12947] 8021q: adding VLAN 0 to HW filter on device bond15 [ 418.792328][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2613'. [ 418.812970][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2613'. [ 418.927114][T12951] loop0: detected capacity change from 0 to 164 [ 419.177610][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 419.229204][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2616'. [ 419.254014][T12959] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2616'. [ 419.325342][ T28] audit: type=1400 audit(392.195:1559): avc: denied { mount } for pid=12955 comm="syz.3.2617" name="/" dev="hugetlbfs" ino=37277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 419.470252][ T28] audit: type=1326 audit(392.195:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12955 comm="syz.3.2617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f320204c819 code=0x0 [ 420.300230][T12959] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2616'. [ 420.309245][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 420.316588][ T3511] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.825630][ T3511] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.927967][T12967] ipvlan1: left allmulticast mode [ 420.937449][ T3511] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.980890][ T3511] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.442667][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 421.507574][ T28] audit: type=1326 audit(394.206:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12976 comm="syz.8.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x0 [ 421.741215][ T28] audit: type=1400 audit(394.409:1562): avc: denied { bind } for pid=12981 comm="syz.1.2623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.854376][T12991] syzkaller0: entered promiscuous mode [ 421.888649][T12991] syzkaller0: entered allmulticast mode [ 421.932403][T12991] loop3: detected capacity change from 0 to 512 [ 421.964090][T12991] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.2625: inode has both inline data and extents flags [ 422.012208][T12991] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 422.013841][T12991] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2625: couldn't read orphan inode 15 (err -117) [ 422.034970][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 422.034993][ C1] EXT4-fs (loop3): initial error at time 394: ext4_orphan_get:1397: inode 15 [ 422.035026][ C1] EXT4-fs (loop3): last error at time 394: ext4_orphan_get:1397: inode 15 [ 422.058939][T12991] loop3: lost filesystem error report for type 5 error -117 [ 422.082561][T12991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.176945][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.236865][T13001] loop3: detected capacity change from 0 to 512 [ 422.270696][T13001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.277800][T13001] EXT4-fs: Ignoring removed mblk_io_submit option [ 422.293428][T13001] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 422.320055][T13001] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 422.351076][T13001] EXT4-fs (loop3): 1 truncate cleaned up [ 422.413933][T13001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.627209][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2628'. [ 422.627633][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.637621][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 422.719149][T13010] xt_TCPMSS: Only works on TCP SYN packets [ 422.765241][ T28] audit: type=1400 audit(395.369:1563): avc: denied { shutdown } for pid=13012 comm="syz.9.2631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 422.897421][T13027] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.071636][T13037] loop3: detected capacity change from 0 to 736 [ 423.094430][T13033] bond17: entered allmulticast mode [ 423.107194][T13037] Unable to read rock-ridge attributes [ 423.348680][T13048] loop3: detected capacity change from 0 to 512 [ 423.364666][T13048] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 423.383337][T13048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 423.399937][T13048] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.406754][T13048] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2642: bad orphan inode 3 [ 423.425300][T13048] loop3: lost filesystem error report for type 5 error -117 [ 423.425579][T13048] EXT4-fs (loop3): Remounting filesystem read-only [ 423.432962][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 423.432979][ C0] EXT4-fs (loop3): initial error at time 2000000000: ext4_orphan_get:1423 [ 423.433002][ C0] EXT4-fs (loop3): last error at time 2000000000: ext4_orphan_get:1423 [ 423.482422][T13048] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 423.826951][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 423.959481][T13067] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.2642: dx entry: limit 0 != root limit 125 [ 423.971265][T13067] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2642: Corrupt directory, running e2fsck is recommended [ 424.332522][ T3320] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz-executor: dx entry: limit 0 != root limit 125 [ 424.391541][ T3320] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz-executor: Corrupt directory, running e2fsck is recommended [ 424.625863][T13083] openvswitch: netlink: Missing key (keys=40, expected=100) [ 424.875085][ T7857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 424.933223][T13091] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 424.997421][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 425.733093][ T2727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.976311][ T2727] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 426.124541][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 427.240843][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 427.286760][ T2727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.301750][ T2727] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 427.896870][T13109] FAULT_INJECTION: forcing a failure. [ 427.896870][T13109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 427.910072][T13109] CPU: 1 UID: 0 PID: 13109 Comm: syz.0.2653 Tainted: G W syzkaller #0 PREEMPT(full) [ 427.910139][T13109] Tainted: [W]=WARN [ 427.910148][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 427.910161][T13109] Call Trace: [ 427.910169][T13109] [ 427.910177][T13109] __dump_stack+0x1d/0x30 [ 427.910209][T13109] dump_stack_lvl+0x95/0xd0 [ 427.910239][T13109] dump_stack+0x15/0x1b [ 427.910264][T13109] should_fail_ex+0x263/0x280 [ 427.910300][T13109] should_fail+0xb/0x20 [ 427.910329][T13109] should_fail_usercopy+0x1a/0x20 [ 427.910355][T13109] _copy_from_user+0x1c/0xb0 [ 427.910375][T13109] do_ipv6_setsockopt+0x124/0x2130 [ 427.910588][T13109] ? kstrtoull+0x111/0x140 [ 427.910615][T13109] ? __rcu_read_unlock+0x4e/0x70 [ 427.910641][T13109] ? avc_has_perm_noaudit+0xab/0x130 [ 427.910755][T13109] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 427.910785][T13109] ipv6_setsockopt+0x59/0x130 [ 427.910810][T13109] tcp_setsockopt+0x98/0xb0 [ 427.910880][T13109] sock_common_setsockopt+0x69/0x80 [ 427.910904][T13109] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 427.910956][T13109] __sys_setsockopt+0x184/0x200 [ 427.911095][T13109] __x64_sys_setsockopt+0x64/0x80 [ 427.911125][T13109] x64_sys_call+0x2327/0x3020 [ 427.911156][T13109] do_syscall_64+0x12c/0x3b0 [ 427.911184][T13109] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 427.911267][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.911291][T13109] RIP: 0033:0x7f237640c819 [ 427.911311][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.911332][T13109] RSP: 002b:00007f2374e46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 427.911356][T13109] RAX: ffffffffffffffda RBX: 00007f2376686090 RCX: 00007f237640c819 [ 427.911419][T13109] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 427.911434][T13109] RBP: 00007f2374e46090 R08: 0000000000000088 R09: 0000000000000000 [ 427.911449][T13109] R10: 0000200000fca000 R11: 0000000000000246 R12: 0000000000000001 [ 427.911464][T13109] R13: 00007f2376686128 R14: 00007f2376686090 R15: 00007ffc1f542c98 [ 427.911539][T13109] [ 428.135567][ T28] audit: type=1326 audit(2000000004.493:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.182184][ T28] audit: type=1326 audit(2000000004.493:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.207067][ T28] audit: type=1326 audit(2000000004.493:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.231161][ T28] audit: type=1326 audit(2000000004.493:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.329089][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2657'. [ 428.366461][T13120] dvmrp6: entered allmulticast mode [ 428.378796][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 428.390884][T13129] ieee802154 phy0 wpan0: encryption failed: -22 [ 428.399843][ T2727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.440597][ T2727] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 428.453020][ T28] audit: type=1326 audit(2000000004.493:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.520368][T13144] netlink: 'syz.8.2663': attribute type 13 has an invalid length. [ 428.528248][T13144] netlink: 'syz.8.2663': attribute type 17 has an invalid length. [ 428.547888][T13144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.555948][T13144] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.565665][T13144] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.582370][ T3511] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.604509][ T3511] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.622544][ T28] audit: type=1326 audit(2000000004.493:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.660862][ T2727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.673758][ T2727] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20001 - 0 [ 428.684594][ T28] audit: type=1326 audit(2000000004.493:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.713451][ T3511] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.724570][ T3511] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.733774][ T28] audit: type=1326 audit(2000000004.493:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.770888][T13145] bond18: entered allmulticast mode [ 428.820980][ T28] audit: type=1326 audit(2000000004.493:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.844469][ T28] audit: type=1326 audit(2000000004.493:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13102 comm="syz.8.2651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e386dc819 code=0x7ffc0000 [ 428.886395][T13154] loop0: detected capacity change from 0 to 164 [ 429.170873][ T2727] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 429.356121][ T2727] bond0 (unregistering): Released all slaves [ 429.444328][T13172] program syz.1.2664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 429.464228][ T2727] bond1 (unregistering): Released all slaves [ 429.480552][T13171] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.495111][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 429.499743][ T2727] bond2 (unregistering): Released all slaves [ 429.558231][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2666'. [ 429.571167][ T2727] bond3 (unregistering): (slave bond4): Releasing backup interface [ 429.594997][ T2727] bond3 (unregistering): Released all slaves [ 429.604075][ T2727] bond4 (unregistering): Released all slaves [ 429.612695][ T2727] bond5 (unregistering): Released all slaves [ 429.639984][ T2727] bond6 (unregistering): Released all slaves [ 429.659243][ T2727] bond7 (unregistering): Released all slaves [ 429.699234][ T2727] bond8 (unregistering): Released all slaves [ 429.719485][ T2727] bond9 (unregistering): Released all slaves [ 429.760865][ T2727] bond10 (unregistering): Released all slaves [ 429.806307][ T2727] bond11 (unregistering): Released all slaves [ 429.848404][ T2727] bond12 (unregistering): Released all slaves [ 429.885578][ T2727] bond13 (unregistering): Released all slaves [ 429.917640][ T2727] bond14 (unregistering): Released all slaves [ 429.957871][ T2727] bond15 (unregistering): Released all slaves [ 430.281838][ T3047] 8021q: adding VLAN 0 to HW filter on device eth1 [ 430.359449][T13174] macsec1: entered promiscuous mode [ 430.367046][T13174] bond0: entered promiscuous mode [ 430.383068][T13174] macsec1: entered allmulticast mode [ 430.388601][T13174] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 430.446930][T13174] bond0: left promiscuous mode [ 430.455803][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2666'. [ 430.464869][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2666'. [ 430.500512][ T2727] hsr_slave_0: left promiscuous mode [ 430.507858][ T2727] hsr_slave_1: left promiscuous mode [ 430.525575][ T2727] veth1_macvtap: left promiscuous mode [ 430.531103][ T2727] veth0_macvtap: left promiscuous mode [ 430.550281][ T2727] veth1_vlan: left promiscuous mode [ 430.568472][ T2727] veth0_vlan: left promiscuous mode [ 430.622214][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 430.629969][T13218] FAULT_INJECTION: forcing a failure. [ 430.629969][T13218] name failslab, interval 1, probability 0, space 0, times 0 [ 430.649647][T13218] CPU: 1 UID: 0 PID: 13218 Comm: syz.1.2680 Tainted: G W syzkaller #0 PREEMPT(full) [ 430.649752][T13218] Tainted: [W]=WARN [ 430.649760][T13218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 430.649774][T13218] Call Trace: [ 430.649781][T13218] [ 430.649846][T13218] __dump_stack+0x1d/0x30 [ 430.649880][T13218] dump_stack_lvl+0x95/0xd0 [ 430.649935][T13218] dump_stack+0x15/0x1b [ 430.649960][T13218] should_fail_ex+0x263/0x280 [ 430.650060][T13218] should_failslab+0x8c/0xb0 [ 430.650083][T13218] __kmalloc_noprof+0xb8/0x4d0 [ 430.650143][T13218] ? io_cache_alloc_new+0x2a/0xb0 [ 430.650227][T13218] io_cache_alloc_new+0x2a/0xb0 [ 430.650285][T13218] io_arm_apoll+0x20e/0x400 [ 430.650311][T13218] io_arm_poll_handler+0x12f/0x160 [ 430.650385][T13218] io_queue_async+0x25d/0x320 [ 430.650412][T13218] io_submit_sqes+0xb02/0x1170 [ 430.650443][T13218] __se_sys_io_uring_enter+0x255/0xfb0 [ 430.650474][T13218] ? mutex_lock+0x57/0x90 [ 430.650505][T13218] ? mutex_unlock+0x4e/0x90 [ 430.650615][T13218] ? fput+0x8f/0xc0 [ 430.650639][T13218] __x64_sys_io_uring_enter+0x78/0x90 [ 430.650680][T13218] x64_sys_call+0x1e16/0x3020 [ 430.650711][T13218] do_syscall_64+0x12c/0x3b0 [ 430.650791][T13218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.650822][T13218] RIP: 0033:0x7f137ad2c819 [ 430.650839][T13218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.650862][T13218] RSP: 002b:00007f1379787028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 430.650959][T13218] RAX: ffffffffffffffda RBX: 00007f137afa5fa0 RCX: 00007f137ad2c819 [ 430.650975][T13218] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 430.650989][T13218] RBP: 00007f1379787090 R08: 0000000000000000 R09: 0000000000000000 [ 430.651005][T13218] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 430.651020][T13218] R13: 00007f137afa6038 R14: 00007f137afa5fa0 R15: 00007ffd0e1bbd68 [ 430.651053][T13218] [ 431.069104][ T2727] team0 (unregistering): Port device ªªªªªª removed [ 431.192294][T13216] gre0 speed is unknown, defaulting to 1000 [ 431.224790][T13219] team0: left promiscuous mode [ 431.235187][T13219] team_slave_0: left promiscuous mode [ 431.246881][T13219] team_slave_1: left promiscuous mode [ 431.265955][T13219] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.301097][T13216] gre0 speed is unknown, defaulting to 1000 [ 431.367527][T13216] gre0 speed is unknown, defaulting to 1000 [ 431.517456][T13216] infiniband syz1: set active [ 431.528730][T13216] infiniband syz1: added gre0 [ 431.538499][ T3047] 8021q: adding VLAN 0 to HW filter on device eth2 [ 431.550466][T13216] RDS/IB: syz1: added [ 431.559845][T13216] smc: adding ib device syz1 with port count 1 [ 431.576072][T13216] smc: ib device syz1 port 1 has no pnetid [ 431.584053][ T10] gre0 speed is unknown, defaulting to 1000 [ 431.597066][ T2727] IPVS: stop unused estimator thread 0... [ 431.623686][ T3433] gre0 speed is unknown, defaulting to 1000 [ 431.629662][T13216] gre0 speed is unknown, defaulting to 1000 [ 431.703605][T13119] chnl_net:caif_netlink_parms(): no params data found [ 431.749376][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 431.776187][T13216] gre0 speed is unknown, defaulting to 1000 [ 431.827169][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.835761][T13119] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.844923][T13119] bridge_slave_0: entered allmulticast mode [ 431.856079][T13119] bridge_slave_0: entered promiscuous mode [ 431.870340][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.877460][T13119] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.886330][T13119] bridge_slave_1: entered allmulticast mode [ 431.905499][T13119] bridge_slave_1: entered promiscuous mode [ 431.940309][T13216] gre0 speed is unknown, defaulting to 1000 [ 431.959868][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 431.983264][T13119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.987970][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 432.008363][T13119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.026532][T13273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 432.044916][ T3047] 8021q: adding VLAN 0 to HW filter on device eth3 [ 432.052179][T13216] gre0 speed is unknown, defaulting to 1000 [ 432.070007][T13119] team0: Port device team_slave_0 added [ 432.081671][T13119] team0: Port device team_slave_1 added [ 432.134790][T13119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.145532][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.196945][T13119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.216426][T13216] gre0 speed is unknown, defaulting to 1000 [ 432.234810][T13119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.266249][T13119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.324519][T13119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.339434][T13216] gre0 speed is unknown, defaulting to 1000 [ 432.420827][T13291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13291 comm=syz.0.2688 [ 432.434129][T13291] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2688'. [ 432.876507][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 433.424466][T13119] hsr_slave_0: entered promiscuous mode [ 434.003595][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 434.216974][T13119] hsr_slave_1: entered promiscuous mode [ 434.224744][ T3047] 8021q: adding VLAN 0 to HW filter on device eth4 [ 434.233556][T13216] gre0 speed is unknown, defaulting to 1000 [ 434.293415][T13297] loop0: detected capacity change from 0 to 512 [ 434.337264][T13216] gre0 speed is unknown, defaulting to 1000 [ 434.385272][T13297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.397796][T13297] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.456711][T13316] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2695'. [ 434.519761][T13316] bond10: option primary_reselect: invalid value (8) [ 434.529378][T13316] bond10 (unregistering): Released all slaves [ 434.553570][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 434.553588][ T28] audit: type=1400 audit(2000000010.352:1582): avc: denied { create } for pid=13296 comm="syz.0.2689" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 434.579935][ T28] audit: type=1400 audit(2000000010.371:1583): avc: denied { write open } for pid=13296 comm="syz.0.2689" path="/112/file1/core" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 434.701742][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.727704][T13335] xt_hashlimit: size too large, truncated to 1048576 [ 434.734429][T13335] xt_hashlimit: max too large, truncated to 1048576 [ 434.898340][T13371] loop0: detected capacity change from 0 to 2048 [ 434.948886][T13371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.004249][T11114] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.039130][ T3311] ================================================================== [ 435.047294][ T3311] BUG: KCSAN: data-race in set_nlink / set_nlink [ 435.053664][ T3311] [ 435.056080][ T3311] read to 0xffff8881074db208 of 4 bytes by task 3008 on cpu 0: [ 435.063627][ T3311] set_nlink+0x29/0xb0 [ 435.067715][ T3311] kernfs_iop_permission+0x1e5/0x220 [ 435.073032][ T3311] inode_permission+0x31f/0x3b0 [ 435.077900][ T3311] link_path_walk+0x779/0xe30 [ 435.082591][ T3311] path_lookupat+0x8c/0x500 [ 435.087107][ T3311] filename_lookup+0x190/0x390 [ 435.091887][ T3311] vfs_statx+0x96/0x170 [ 435.096055][ T3311] vfs_fstatat+0x118/0x170 [ 435.100476][ T3311] __se_sys_newfstatat+0x55/0x3e0 [ 435.105515][ T3311] __x64_sys_newfstatat+0x55/0x70 [ 435.110558][ T3311] x64_sys_call+0x2c64/0x3020 [ 435.115248][ T3311] do_syscall_64+0x12c/0x3b0 [ 435.119850][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.125757][ T3311] [ 435.128081][ T3311] write to 0xffff8881074db208 of 4 bytes by task 3311 on cpu 1: [ 435.135717][ T3311] set_nlink+0x99/0xb0 [ 435.139794][ T3311] kernfs_iop_permission+0x1e5/0x220 [ 435.145103][ T3311] inode_permission+0x31f/0x3b0 [ 435.149972][ T3311] link_path_walk+0x779/0xe30 [ 435.154754][ T3311] path_openat+0x1c6/0x2050 [ 435.159270][ T3311] do_file_open+0x16c/0x290 [ 435.163825][ T3311] do_sys_openat2+0x94/0x130 [ 435.168426][ T3311] __x64_sys_openat+0xf2/0x120 [ 435.173201][ T3311] x64_sys_call+0x1e39/0x3020 [ 435.177891][ T3311] do_syscall_64+0x12c/0x3b0 [ 435.182491][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.188390][ T3311] [ 435.190724][ T3311] value changed: 0x00000009 -> 0x00000008 [ 435.196446][ T3311] [ 435.198788][ T3311] Reported by Kernel Concurrency Sanitizer on: [ 435.204946][ T3311] CPU: 1 UID: 0 PID: 3311 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 435.215371][ T3311] Tainted: [W]=WARN [ 435.219177][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 435.229236][ T3311] ================================================================== [ 435.237540][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 435.262199][T13394] Cannot find add_set index 1 as target [ 435.279178][T13392] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 435.339774][T13392] bond2 (unregistering): Released all slaves [ 435.397270][T13119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 435.428169][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.445280][T13119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 435.464389][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.473166][T13119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 435.484874][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.492660][T13119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 435.501558][T13119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.536680][T13119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.548391][T13119] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.562096][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.569223][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.581514][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.588619][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.614095][T13119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 435.624613][T13119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 435.687822][T13119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.825922][T13119] veth0_vlan: entered promiscuous mode [ 435.834672][T13119] veth1_vlan: entered promiscuous mode [ 435.853315][T13119] veth0_macvtap: entered promiscuous mode [ 435.862655][T13119] veth1_macvtap: entered promiscuous mode [ 435.875062][T13119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.887670][T13119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.900052][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.918342][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.935436][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.948993][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.344625][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 436.346168][ T3415] page_pool_release_retry() stalled pool shutdown: id 133, 1 inflight 60 sec [ 437.471757][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 438.598873][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 439.726001][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 440.853136][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 441.980262][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 443.107344][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 444.234439][ C1] IPVS: ovf: UDP 224.0.0.1:0 - no destination available