last executing test programs: 7m40.576924147s ago: executing program 32 (id=1755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000000000001", @ANYRESDEC, @ANYRES32], 0x3c}}, 0x20000050) 7m28.24840611s ago: executing program 33 (id=1817): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) 7m6.132772937s ago: executing program 34 (id=2017): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xa0080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x4c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200003401c000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2", 0xa5}], 0x1}, 0x40840) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) 7m3.536191406s ago: executing program 35 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008040}, 0x10) 7m1.03061871s ago: executing program 36 (id=1984): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m58.518094135s ago: executing program 37 (id=2000): creat(&(0x7f0000000400)='./bus\x00', 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = socket(0x1d, 0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x4db9349bf4e9cad4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0xe, 0xe3, 0x448, 0xd}, {0xc4, 0x1, 0x60, 0xffff, 0x2, 0x62e}, 0x8, 0xf, 0x1af5}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x6c}}, 0x8d0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x40000081, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4c814) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m52.497837164s ago: executing program 38 (id=2015): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@nomblk_io_submit}, {@noload}, {@abort}, {@auto_da_alloc}]}, 0xff, 0x459, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8916, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000400)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x9, 0xfffffffffffffffe, 0x80, 0x290761e6, 0x0, 0x0, 0x4}) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x11) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r2, r2, 0x0, 0xe3aa6ea) getpid() openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) 6m33.550859364s ago: executing program 39 (id=2055): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000480)=""/177, 0xb1}], 0x1, 0x5, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r4, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1e0411, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x6025, 0x4008, 0xb, 0x3, 0x80, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 5m43.440420792s ago: executing program 40 (id=3277): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0x0, 0x10, 0x6835, 0x1, 0xd3, 0x75, &(0x7f0000000800)="3c7c0ff40f353cd73d8fa6ba0d0f813c5cd1de5604d46545ffe2257711cde045d9987a95eab9c236189c2f565d57aa3f98ade56eca6911c7a913b655c970a83a6736f2312f1878335dc54ec6d887f486e2afb6072b952568eddc2a17fee6f188535cf16fb2659ee7020fc03bb6d469d780e5407c23ebc82690956d162eb6961e515813b4e44f0bfe9faa91a22c10e5d95ec60d6ea962bfe1bbe11069ad7a3c36a1b7a40efab5c1df57ecd05283f6b3153c6adcad2aa76f5a0757efd3f1cc92b1056576b2739825c3af961276799e8dda00a352"}) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x400f}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010102, 0xff, 0xffffffff, 'veth0_to_team\x00', 'veth1_vlan\x00', {0xff}, {}, 0x8, 0x3, 0x14}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff000000, 'veth0_vlan\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x1, 0x2, 0x10}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, 0x41de, 0x10, [0xb, 0x3f, 0x3b, 0x2f, 0x29, 0x4, 0x4, 0x17, 0x32, 0x9, 0x3f, 0x17, 0x2f, 0x20, 0xb, 0x27], 0x1, 0x65, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) 5m42.378003935s ago: executing program 41 (id=3302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e540800014000000002"], 0x70}}, 0x24044850) 5m39.922448347s ago: executing program 42 (id=3318): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)='\'', 0x1}], 0x1}, 0x4) 5m18.403158515s ago: executing program 43 (id=3475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000ac000880a8000080800009801c00008006000100020000000e000200ac1414aa05000300020000001c0000800600010002000000080002007f00000105000300030000001c0000800600010002000000080002000a010102050003000300000028000080060001000a00000014000200fc010000000000000000000000000000050003000300000024000100000000000000000000000000000000000000000000000000000000000000000014"], 0xd4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 5m14.397045214s ago: executing program 44 (id=3500): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) 5m8.659026699s ago: executing program 45 (id=3550): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000000f) getdents64(r0, &(0x7f0000001000)=""/164, 0xa4) 5m8.64355203s ago: executing program 6 (id=3602): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r0, &(0x7f0000000100)=""/83, 0x53) 5m8.603381361s ago: executing program 6 (id=3603): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21281f, &(0x7f00000001c0)={[], [{@obj_role={'obj_role', 0x3d, '\xaa\xaa\xaa\xaa\x11\xde&\xe4\xad\x05\xb0\x88ZX8\xdblh\x1ey\a\x1dDXr'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x9890c0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) 5m7.754762764s ago: executing program 6 (id=3604): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400), r2, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20062008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) syz_open_dev$usbfs(&(0x7f0000000240), 0x9000, 0x0) 4m58.383825649s ago: executing program 46 (id=3581): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) 4m56.384702118s ago: executing program 47 (id=3594): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 4m52.373909877s ago: executing program 48 (id=3604): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000400), r2, 0x0, 0x1, 0x4}}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20062008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4001) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) syz_open_dev$usbfs(&(0x7f0000000240), 0x9000, 0x0) 4m48.549134497s ago: executing program 49 (id=3616): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x61, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x5, 0x4dd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x3d8}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f", 0xe9}], 0x2}, 0x484b5) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r2, &(0x7f0000000040)=""/102400, 0x19000, 0x10000002fc) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000019040)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e21, @multicast2}], 0x2c) sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x80, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0xfd, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x22, 0x8, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x0, 0x0, 0x5}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) 4m34.241456267s ago: executing program 50 (id=3636): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3, 0x9, 0x7356, 0x5, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4m22.160459627s ago: executing program 51 (id=3696): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f00000004c0)={'gretap0\x00', 0x0, 0x20, 0x7800, 0x0, 0x99, {{0xd, 0x4, 0x1, 0x33, 0x34, 0x68, 0xff, 0xd, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@end, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0xfd, [@multicast2, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000feffffff000000000000000018010000200300000000000000202020db1af8ff41000000bda100000000000007010000b80000ffb702000008000000b71b000000000000850000004600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6(0xa, 0x3, 0x1) r5 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x48042, 0x20) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r6, 0x2000) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000001600)={{r4}, 0x0, 0x10, @inherit={0x88, &(0x7f0000000680)=ANY=[@ANYBLOB="01000000000000000800000000000000070000000000000015000000000000000400000000000000060000000000000008000000000000000000000000000000020000000000000002000000000000000500000000000000c300000000000000000000000000000001000000000000000500000000000000ffffffffffffff090000000000000000"]}, @name="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"}) umount2(&(0x7f0000000200)='./file1\x00', 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000280)="f9", 0x1, 0x20000040, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x8c9d0, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000140)='./file1\x00', &(0x7f0000000380)={[&(0x7f0000000180)='\x00']}, &(0x7f00000003c0)) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r8, &(0x7f0000000380)=[{0x84, 0x77, 0x0, 0x0, @time={0xe, 0x428}, {0xfd}, {0x7}, @raw32={[0x2, 0x66704740, 0x8000000]}}, {0x2, 0xff, 0x5, 0x83, @tick=0x1, {0xfd, 0x1}, {0x3}, @note={0x81, 0x0, 0xe}}, {0xf2, 0x3, 0x9, 0x3, @tick=0x1, {0x10, 0x5}, {0xce, 0x2}, @connect={{0x1, 0x3}, {0x6, 0xb}}}, {0x0, 0x80, 0x0, 0x0, @tick=0xf791, {0xfb, 0x9}, {0x8, 0x4}, @ext={0x0, 0x0}}], 0x70) lseek(0xffffffffffffffff, 0x0, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fd) 4m6.355353231s ago: executing program 52 (id=3769): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) readv(r0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x7, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) 3m55.884355541s ago: executing program 53 (id=3826): socket$inet(0x2, 0x2, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="9f00000018000000000000002000000020e1ffff03000000030000000100000f040000000a000000cf0000000400f000000000040000000000000000df51afad500077552ca5bd40a0b8d51d417df52d27e50911ce77c694a9709a8e49badbecffcad2452822998cb2487231e21d01299fc423dc5c421756f618e875bbc1519f"], &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r4, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 3m50.995806984s ago: executing program 6 (id=3902): creat(&(0x7f0000000400)='./bus\x00', 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = socket(0x1d, 0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x4db9349bf4e9cad4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0xe, 0xe3, 0x448, 0xd}, {0xc4, 0x1, 0x60, 0xffff, 0x2, 0x62e}, 0x8, 0xf, 0x1af5}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x6c}}, 0x8d0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10013}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_SRC={0x14, 0x2, @loopback}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x40}}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b40)=@newtfilter={0x24, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff2}, {0xfff1, 0x3d}}}, 0x24}}, 0x0) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r5, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) unshare(0x6a040000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4c814) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m50.723457587s ago: executing program 6 (id=3923): syz_emit_ethernet(0x22, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @local, @void, {@ipv4={0x4305, @generic={{0x5, 0x4, 0x3, 0x3, 0x14, 0x65, 0x0, 0x8, 0x2e, 0x0, @private=0xa010101, @rand_addr=0x64010102}}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21281f, &(0x7f00000001c0)={[], [{@obj_role={'obj_role', 0x3d, '\xaa\xaa\xaa\xaa\x11\xde&\xe4\xad\x05\xb0\x88ZX8\xdblh\x1ey\a\x1dDXr'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x9890c0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) 3m49.404631103s ago: executing program 6 (id=3928): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90800000053"], 0x65) 3m39.821209538s ago: executing program 5 (id=3971): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0xb, 0x8, [@remote, @dev={0xac, 0x14, 0x14, 0xc}]}, @ssrr={0x89, 0xf, 0xd3, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @ssrr={0x89, 0x3, 0x2}]}}, {{0x0, 0x1004, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f00000002c0)="c7b03a5c2e597d74f924aa963e1460c575a1083020bd8a14351410ffd53c78a451f4441db9426dd06da68e13d21a9112e66b55dbe740850779575b9ca09168deb57a29eb11a98220e6910833c89dec79f8979363837f231d0224db48687408c83283cea4d3378699c58316297259842db8c7912d1233659b86d34ca65a6190d733d1628d6abb5ef9f8a5", 0x8a}, {&(0x7f00000001c0)="4ac57c4426", 0x5}, {&(0x7f0000000440)="3678d063b9a8256b190258689d1f9e992edcf7573483f1b79560a82f89878bda1c24ff4d99676db6b4758bdbe54afaefe0031cf75e485746aa46bc0a20b92e4ce491ad0769bea0ca7b9ab046c458cdbe6693eee6fa7a6ed63bb3125ce8c383e1cd0586eed16fb4fcd204755652cea6bcb855b03ed9d2f5b8fb96ce7a53877f6a1c02829e4dc69ac9598e636436d5", 0x8e}], 0x3, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100b4e004000480080002000100000008000100000000001c00088004"], 0x44}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0xcfa4) 3m39.748079752s ago: executing program 5 (id=3972): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0xa0080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x4c}}, 0x4044080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200003401c000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2", 0xa5}], 0x1}, 0x40840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) setreuid(0x0, 0xee00) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x11) 3m39.251958887s ago: executing program 5 (id=3974): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1003}) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000002840)) 3m39.226918218s ago: executing program 5 (id=3976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x6, 0x6, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x5, &(0x7f0000000780)=ANY=[@ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb446edcd875b863c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r3 = socket(0x2b, 0x80801, 0x1) listen(r0, 0x4) bind$l2tp6(r3, &(0x7f0000000340)={0xa, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$eJzs28tvG0UYAPBv13FKXySU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlUQECpHVIk74ojEX8AJLgg4IXGFO6pUoVxaOBmtvZs4jp0mwY5L/ftJm8zsjjPzeXbs2Z1sAH1rJPuRROyJiN8jYqieXV1gpP7r5tLl6b+XLk8nUa2+9VdSK3dj6fJ0UbR43e48M5pGpJ8lcahFvfMXL52dqlRmL+T58YVz74/PX7z07JlzU6dnT8+enzxx4vixiReen3yuI3Fmbbpx8KO5wwdee+fqG9Mnr77787dJEX9THB0yst7BJ6rVDlfXW3sb0slADxvCppQiIuuucm38D0UpVjpvKF79tKeNA7qqWq1Wd7c/vFgF7mBJbLTk2fzzArgzFF/02fVvsW3T1OO2cP2l+gVQFvfNfKsfGYg0L1Nuur7tpJGIOLn4z1fZFt25DwEAsMr32fznmVbzvzTubyh3d742NBwR90TEvoi4NyL2R8R9EbWyD0TEg5usv3mRZO38J722pcA2KJv/vZivba2e/xWzvxgu5bm9tfjLyakzldmj+XsyGuUdWX5inTp+eOW3L9oda5z/ZVtWfzEXzNtxbWDH6tfMTC1M/ZeYG13/JOLgQKv4k+WVgCQiDkTEwS3Wceapbw63O9Yu/vJG/nAH1pmqX0c8We//xWiKv5Csvz45fldUZo+OF2fFWr/8euXNdvXfuv+7K+v/XS3P/+X4h5PG9dr5zddx5Y/P217TbPX8H0zerqUH830fTi0sXJiIGExerze6cf/kymuLfFE+i3/0SOvxvy9W3olDEZGdxA9FxMMR8Uje9kcj4rGIOLJO/D+9/Ph7W4+/u7L4ZzbV/yuJwWje0zpROvvjd6sqHd5M/Fn/H6+lRvM9G/n820i7tnY2AwAAwP9PGhF7IknHltNpOjZW/3/5/bErrczNLzx9au6D8zP1ZwSGo5wWd7qGGu6HTuSX9UV+sil/LL9v/GVpZy0/Nj1Xmel18NDndrcZ/5k/S71uHdB1nteC/mX8Q/8y/qF/Gf/Qv1qM/529aAew/Vp9/3/cg3YA269p/Fv2gz7i+h/6l/EP/cv4h740vzNu/ZC8hMSaRKS3RTMkupTo9ScTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wbAAD//9E940M=") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000)=0x4, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0xffff, 0x0, @loopback, 0xfffffffb}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000001840), 0x4) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="10000000050605"], 0x1c}}, 0x8000) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x6, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r6 = inotify_init() poll(&(0x7f0000000000)=[{r6, 0x100}], 0x1, 0x3) epoll_create1(0x0) epoll_create1(0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 3m38.704628994s ago: executing program 5 (id=3979): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x206, 0x80, 0xfe, 0xffffffff}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc092, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffffffb, @local, 0x4, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=[{0x18, 0x29, 0x3, "ec"}], 0x18}, 0x4004080) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) pipe2(0x0, 0x800) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x100000b, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) 3m38.269421516s ago: executing program 54 (id=3914): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000026040a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ffff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m37.836724937s ago: executing program 5 (id=3983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x3d) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 3m37.835447257s ago: executing program 55 (id=3983): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x3d) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 3m33.979660088s ago: executing program 56 (id=3928): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90800000053"], 0x65) 2m23.84125867s ago: executing program 9 (id=4572): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000009c0)=[@in6={0xa, 0x4e21, 0x7ffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf}, @in6={0xa, 0x4e23, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9cc}, @in6={0xa, 0x4f24, 0x6, @dev, 0x80000000}, @in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, @in={0x2, 0xce23, @private=0xa010101}, @in6={0xa, 0x4e20, 0x3c, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, @in6={0xa, 0x4e24, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0xb8) sendmsg$inet6(r0, &(0x7f0000000980)={&(0x7f0000000080)={0xa, 0x4e2b, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x8004}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000300)="f1bbd2a687e28700fccbad79a500a0049007cbfa5e9f1cca693952abe0a9d6aefd402a488b8a9c524cefa31c80fbd126f7bec852e466aa35d7387f50b7b03b2c9c2f3c47d5d8ce02f99c6eaf6de3f54c95d0dba7f7f2d393140b1d88abbc88f3011ad6473f8a93ddcdb2ef85aa725a10cb6dd68ef79e482e87b7afe81e50099de91093d34d95f5fa0000", 0x8a}, {&(0x7f00000003c0)="888d4bf8d431cd08d2e2c3342bd6fec82312946e1a88ab872087904cbcc5aaf806d3aad1f29916cdcd93b0b2deeebb04bffdb915b410c931640bd602b055c1ba21411fd0779d8a36902605840592719f0dcb104075bb15bf28b9f459b7c46d441f695606ff76a5776c361aa100c5d65d2cb37c5afabdfdd0d8730bb08f38076a6171b0b2f8989bda012863fc329fad019d363179371e5e9f92", 0x99}, {&(0x7f0000000880)="86a03665b77dbd0de64d26197d9cf1563266841b9eb0b2162cd9e28f8b551fcd8f6b1733d49922ccc7944476f74c9d8ae49f9eb18810ae3a7d63c7ae6b365a26f8efbf49446da5e6566a3d558342cb8c97f99093e9e9bbc252ffc1a788470b256eaf4e7f72bf2954548ff32bd38d76822bc7ffc59590ca4546dbf8ac34d9982a7bac8e1fb85fd433425b2870160d4385b5aaf76d52877eb5b1d0cbfd5b069ad727861b51be699b2bf0fc25bda8df320cc957d3bb9a386639ff519e7ef84c5d18ae4e8c4a8d6e00c03477d626e782f0da2074e01d2bde960d8c6d85276a", 0xdd}], 0x3}, 0x48047) dup(r0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfc271, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0xffffffffffff0000, 0xf60e}, 0x9092, 0xf6, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e20, @local}], 0x10) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) 2m23.736967585s ago: executing program 9 (id=4576): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeaf, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) timer_create(0x5, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"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", 0x1000}}, 0x1006) 2m23.184703123s ago: executing program 9 (id=4580): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000ed8547e7df3ad6b1c8c6bb4804351f45ebe145bfed5edd2b561b13adbcfede3eef7f78c16a00553c694cc7e924060349590285ebf746c1b8084a186b9126994b916f224bcb6e84212a0155a13d0317c5dc40131d1430eae88242cbbaeb389ecf5b2421458c7b6cc655dfed41e0f8030c420a8a013a4a6d667dfbd60e796dc0ed99d328ab7017976d109d01bc12fbf5c1204e5b9b0d657c72703bb63b0260d3ee7c1398b7b2c2b00220adfef75581a6625de144c84e6b5e83e96abc6eaa265e4c401a6e2de31ac0ea236f", @ANYRES32=r7, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e000200000006000f000e00000008000600ac141426"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) utimensat(r8, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000480)={0x7, 0x5b8, 0x1, 'queue1\x00', 0xbde}) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) 2m23.097797187s ago: executing program 9 (id=4582): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200008c0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xb5, 0x1, 0x0, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x6, 0x6, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0x5, &(0x7f0000000780)=ANY=[@ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xb446edcd875b863c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) r2 = socket(0x2b, 0x80801, 0x1) listen(r2, 0x7e5a) bind$l2tp6(r2, &(0x7f0000000340)={0xa, 0x0, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x4}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0xa, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="10000000050605"], 0x1c}}, 0x8000) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4003, 0x0, 0x6, 0x2) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) epoll_create1(0x80000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x880000, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 2m22.160236733s ago: executing program 9 (id=4590): socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x104}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x80000000) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x0) unshare(0x22020400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24004840) 2m21.772591393s ago: executing program 9 (id=4591): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000ed8547e7df3ad6b1c8c6bb4804351f45ebe145bfed5edd2b561b13adbcfede3eef7f78c16a00553c694cc7e924060349590285ebf746c1b8084a186b9126994b916f224bcb6e84212a0155a13d0317c5dc40131d1430eae88242cbbaeb389ecf5b2421458c7b6cc655dfed41e0f8030c420a8a013a4a6d667dfbd60e796dc0ed99d328ab7017976d109d01bc12fbf5c1204e5b9b0d657c72703bb63b0260d3ee7c1398b7b2c2b00220adfef75581a6625de144c84e6b5e83e96abc6eaa265e4c401a6e2de31ac0ea236f", @ANYRES32=r7, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e000200000006000f000e00000008000600ac141426"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) setuid(0xee01) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) 2m21.772398233s ago: executing program 57 (id=4591): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000ed8547e7df3ad6b1c8c6bb4804351f45ebe145bfed5edd2b561b13adbcfede3eef7f78c16a00553c694cc7e924060349590285ebf746c1b8084a186b9126994b916f224bcb6e84212a0155a13d0317c5dc40131d1430eae88242cbbaeb389ecf5b2421458c7b6cc655dfed41e0f8030c420a8a013a4a6d667dfbd60e796dc0ed99d328ab7017976d109d01bc12fbf5c1204e5b9b0d657c72703bb63b0260d3ee7c1398b7b2c2b00220adfef75581a6625de144c84e6b5e83e96abc6eaa265e4c401a6e2de31ac0ea236f", @ANYRES32=r7, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e000200000006000f000e00000008000600ac141426"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) setuid(0xee01) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) 1m9.998469265s ago: executing program 4 (id=5422): socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") open(&(0x7f0000000000)='./file1\x00', 0x84242, 0x46) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a54000000060a010400000000000000000a0000040900010073797a31000000000900020073797a320000000028000480240001800b0001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1m9.002791915s ago: executing program 4 (id=5428): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m8.831918634s ago: executing program 4 (id=5431): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@generic={0x28, "2a243455533ff60dd223e275150f1d5048ee3dc09f0340ba5e3940dbf7f376d571370bad900503f68c1f3ff89d55652f070dbc8b74b1aead0d88b4f2ffae850118be189017d71774baf96a40537f3c47c60a35ed4fd1af5c9ff45614349083dbfd8da8f73587e1131b21d1ad08261f5aea07f68559ca342bd424da0ec4e0"}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0x4044454) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r2 = socket$kcm(0x21, 0x2, 0xa) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000200)={r5, 0x1}, 0x8) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff00001fbfa300000000000007030000f0ffffff6a0af0fff8ffffff61a4f0ff0000000066040200000000001d400200000000004704000001ed00006203000000ffffffcf440000000000007a0a00ff00ffffffc30300ff41000000b4000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa0f040000c72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204ab3949006c3172171652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d156ae8383117c039862198899b212c55318294270a1ad10c80fef7c247afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aa0000000000000000832371fe5bc621426d1ed0a4a99702cc1b692c3f0b15629eaf4c12a1e717d29135753208165b9cdbae2ed9dc7358f0e3adde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbad937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594807031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca9be8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b39578052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91ed92cac7c2ccd17d338bbda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922928e000000ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abb8a9982ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139566fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe6290421338ef8f6d27117cd1471bf3c0b64416fbbe955da0281e7ef7f7d5176150e86cda98d07f7de2088cb2ffd1d4c71097635c2bb3d9a0b01e757256ee427f0a244d48682bf89e2279b383b616b40f116172bc1b995eb2c1220597af8df52646f1f0cb65cfa7e038e8bb5d4d52b86a61d82dc14a4f5cc7e6061c65ccdbc2afc3f363ecf34ad0b227687c3ea8d63683ddd5914116edd9e075da9e3638647188bc8f95107c9250995eb6cadcd0f65b8504ff10304f2ceba275f9d485ed5554d64005db877f0fbb3beba59666ff66f132d5077835823592d6d392f5ff62f6f876eb10d8cbf0a73f8421b74c8916e4077b8866c95ad88bc7130244183ed216210f10f69b3e0ee13d06e4eb240cce5ec1c3b1defe4c0f8b83a34ef4f5f8f9ceefb678ad29d3683e3c44a01549e55ffca41c0b06e013f054257646c58b667ec0701004c239589b3e64ef5e1d5ed22b5fd5a90fe3453327c3652d5c9762428f0bd0178d1b80a60f64343ab77d8baa0a388711c8d2d6d3e9049814b15b6ea21387040989d69c3aa27256c55780f33d20823d8e2eb6e56850162969bf4c6c9632a55cf5be00"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) 1m7.970921526s ago: executing program 4 (id=5447): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x400, 0x1000}, {0x1, 0x2, 0x1800}], 0x2) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) chdir(&(0x7f0000000240)='./file0\x00') r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x5}, 0x8) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) eventfd2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) waitid(0x2, 0x0, 0x0, 0x1000000, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=r7, 0x1e, 0x0, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0}, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) 1m6.633314433s ago: executing program 4 (id=5453): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x2, 0x800, 0x2, 0x8, 0x10000000007, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(r1, 0xffffffffffffffff, 0x0) 1m6.47278993s ago: executing program 4 (id=5456): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f00000000c0)={[{@block_validity}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x3}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x300) 1m6.47261882s ago: executing program 58 (id=5456): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f00000000c0)={[{@block_validity}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0x3}, 0x10, 0x5, 0x43a1bd77, 0x7, 0xaa4, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x300) 18.579365328s ago: executing program 2 (id=5833): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000400), 0x2000011a) recvmmsg(r2, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/165}, {&(0x7f0000001100)=""/101}], 0x1, 0x0, 0xfffffffffffffd22}, 0x74e96c96}, {{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xfffd, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newchain={0x8d8, 0x64, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0x8, 0xd}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}]}}, @filter_kind_options=@f_route={{0xa}, {0x884, 0x2, [@TCA_ROUTE4_ACT={0x880, 0x6, [@m_tunnel_key={0x44, 0xc, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e22}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x838, 0x12, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x0, 0x10000, 0x5, 0x4, 0x2, 0x5, 0x0, 0x2, 0x8001, 0x5, 0x5, 0x3, 0x3, 0xdc1f, 0x6, 0x7, 0x9, 0xc2c8, 0x0, 0x1, 0x2, 0x200, 0x1, 0x3, 0x0, 0xac2, 0xfffffffd, 0x3, 0x8, 0x8, 0x1ff, 0x1000, 0x2, 0x7, 0x0, 0x4, 0x6, 0x4, 0xa, 0x100, 0xffff8001, 0x9, 0x7, 0x5, 0x7, 0xfc000000, 0xfffffff7, 0x4, 0x5, 0x4, 0x5f, 0xf419, 0x1ff, 0x0, 0x80000000, 0x2, 0x80, 0x5, 0x9, 0x6, 0x2, 0xa, 0xd, 0x1281, 0x8, 0x2, 0x21, 0x6a, 0x7, 0x4, 0x80000001, 0x8cf, 0x7, 0x8001, 0xb, 0xde07, 0x3, 0x6, 0x7f, 0x5, 0x10001, 0x6, 0xfffffff8, 0x2, 0x7, 0x5716380e, 0x5, 0x0, 0xa5, 0x3ff, 0x8, 0x7, 0x7f, 0x5, 0xd6, 0x2489, 0x5, 0x8, 0x9, 0x6, 0x200, 0xa, 0x80000000, 0x80000000, 0x8, 0x0, 0x3, 0xd8, 0x1, 0x6, 0x4, 0xfff, 0x7, 0x239, 0x3, 0x7ff, 0x2, 0x7, 0x5, 0x4, 0x2, 0x0, 0xffffff81, 0x3, 0x4a5, 0x0, 0xfffffffe, 0x1a, 0x3, 0xdd, 0x0, 0x7f0000, 0x5, 0x8, 0x5, 0x5, 0x9, 0x5, 0xf9, 0x80, 0x5, 0x3, 0x4, 0xfffffff8, 0x4, 0x80, 0x9, 0x4, 0xffff, 0x443, 0x3, 0x9, 0x9, 0xeae, 0x8, 0x6, 0x805c, 0x9, 0x81, 0x6, 0x3, 0x2, 0x3, 0x6dc6, 0xf5ca, 0x4, 0xd8, 0x6, 0x1000, 0xcb, 0x31a, 0x5, 0x40, 0x3, 0xffff0001, 0x6bf0, 0x1, 0x6, 0x7fffffff, 0xa8, 0x101, 0x75a, 0x5, 0xfffff800, 0x7, 0x28f663ec, 0x2, 0x21, 0xdc, 0x10000, 0x4, 0x7, 0xd0c, 0x6, 0x1, 0xdd61, 0x5, 0x857, 0xf3, 0x2800000, 0xd, 0xfffffffc, 0xfe, 0xdda, 0x80000001, 0x5, 0x2, 0x8, 0x6, 0x2, 0x0, 0x9, 0x82d, 0xca8, 0x7, 0xfff, 0x70f, 0x4, 0xd, 0xffffffa2, 0xa, 0x5, 0x8000, 0x1, 0x8, 0x6b1, 0x16, 0xbc24, 0xfffffffa, 0x3, 0x7fffffff, 0x3, 0xd2cde104, 0x6, 0x80, 0x5, 0x5, 0x0, 0x1c, 0x1ff, 0x7, 0x9, 0x3ff, 0x6ec, 0x6, 0xa5, 0x1ff, 0x3, 0xffffffff, 0xd, 0x4, 0xc20, 0x40, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2c16, 0x9, 0xf, 0x6, 0xfffff959, 0x0, 0x2, 0xd, 0xf, 0x8, 0x4d, 0x3, 0x6, 0x5, 0xa, 0x0, 0x6a, 0x7ff, 0x20000003, 0x7, 0x411, 0x86, 0x8, 0x1, 0x8001, 0x1, 0x1, 0x7, 0x3, 0xffffffff, 0x200, 0x9, 0x5, 0x4, 0x0, 0x7, 0x0, 0xbd, 0xffff, 0x4, 0x2, 0x6, 0x101, 0x1, 0x3, 0x1a49, 0x3, 0x6, 0x8, 0x2, 0x9, 0xff, 0x3, 0x4, 0x3, 0x6, 0xad, 0x9, 0x8, 0x5000000, 0x4, 0x715, 0x9, 0x5, 0x7, 0x9, 0x9, 0x3, 0x4, 0x2, 0xaf7a, 0x5a7c, 0x3, 0x4, 0x2, 0x1, 0x1, 0x4, 0x7ff, 0xb76d16c2, 0xfffffff7, 0x8, 0x101, 0x4, 0x40c4, 0xf, 0xfffffffe, 0x0, 0x9, 0x2, 0xbf4, 0xd8b, 0x8, 0xa83, 0x6, 0x8b8, 0x2, 0xfffffff8, 0x31, 0x1, 0x9, 0xf49, 0x42, 0x8001, 0x7f4, 0x2, 0x7, 0xfffffff4, 0x6, 0x8, 0x2, 0x3b5, 0x6, 0x6, 0x2cee, 0x1, 0x3a, 0x0, 0xfffff000, 0x2, 0x2, 0x7f, 0x8, 0x8000, 0x7, 0x5, 0x8, 0x2, 0x996, 0x127, 0x2, 0x9, 0xffff, 0x7, 0x7, 0x5, 0x7fff, 0x6, 0x8, 0x0, 0x8, 0xe, 0x7, 0xffff, 0x2ea8, 0x4, 0x6, 0x0, 0x6, 0x4, 0x959d, 0x80, 0x10, 0x1, 0x3, 0x17, 0x3, 0x800, 0x1, 0x6, 0x1, 0x1, 0x6, 0x7, 0x6, 0x3, 0x80000001, 0x0, 0x0, 0x0, 0x8000, 0x2, 0x3, 0x5, 0x2, 0xc383, 0xd3, 0x9, 0x96b, 0xdcb, 0x800, 0x3b, 0x1, 0x2, 0x7, 0x1, 0x4, 0x3, 0x80000000, 0x3ff, 0x6, 0xffffc746, 0x7, 0xc, 0x101, 0x80000001, 0xfffffff7, 0x3, 0x110df8c0, 0xa8fc, 0xc, 0x1, 0x3, 0x7, 0x7, 0xfffffff7, 0x100, 0x101, 0x8, 0x3, 0x80, 0x8001, 0x0, 0x6, 0x32, 0x3, 0x0, 0x101, 0x6, 0xf28, 0xc0000000, 0x9, 0x9, 0x9, 0x0, 0x8, 0x2, 0x0, 0x7, 0x0, 0x6, 0x8, 0x40e9, 0x0, 0x800, 0x7, 0x4, 0x3, 0x8001, 0x6, 0x1f, 0x38000, 0xfffffff7, 0x4, 0x7, 0x8, 0x46c20cd3, 0x6, 0x4, 0x9, 0x1, 0xfffffffa, 0x6, 0x400, 0x591d, 0x8]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0xfffffffd, 0x0, 0x0, 0xff, "0000000000000400f7ff00"}) r4 = syz_open_pts(r0, 0x101000) pipe2$9p(&(0x7f00000000c0), 0x800) r5 = dup3(r4, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180), 0x5, 0x512, &(0x7f0000000840)="$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") 18.14071476s ago: executing program 2 (id=5839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 18.13915975s ago: executing program 2 (id=5840): syz_io_uring_setup(0x6a29, &(0x7f0000000200)={0x0, 0x3, 0x800, 0x1, 0x171}, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x1003}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000002840)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0x2}, {0x20}, {0x2, 0x0, 0xe}, {}, {0x5, 0x0, 0x4, 0x8}, {0x0, 0x0, 0x3, 0x420008}]}) socket$nl_xfrm(0x10, 0x3, 0x6) fsmount(0xffffffffffffffff, 0x0, 0x64) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r4 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r4, 0x0, 0x2000000, 0x1001f3) fallocate(r4, 0x8, 0x0, 0x10000) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000580), 0x701800, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001740)=@bpf_tracing={0x1a, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="c3254000efffffff9170000104000000186400000800000000000000000000004358feff080000", @ANYRES32, @ANYBLOB="000000000000000018130000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\f\x00\x00\x00\x00\x00'], &(0x7f0000000640)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000680)=""/4096, 0x41100, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001680)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000016c0)={0x0, 0xd, 0x5, 0x9}, 0x10, 0x13de8, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000001700)=[{0x0, 0x3, 0x9, 0x8}], 0x10, 0x9}, 0x94) fsopen(&(0x7f0000001800)='9p\x00', 0x0) memfd_secret(0x80000) creat(&(0x7f0000000040)='./bus\x00', 0x0) 17.743846699s ago: executing program 2 (id=5845): r0 = syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0xff, 0x51c, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)=0x0) r3 = syz_clone(0x100000, &(0x7f00000007c0)="33689550ee51a9b952a309b30d69c16d2a1359fb44e3dcf82a4fda4b2b4059cef7f88b723804077b7947b63ab1b98e3299db228a18a2e885ebd00421e2f45ee4b1c541b1c6eccdde54a1aabcda5a79ef39093eebd9b868adf2bbd01f5caa967e7486f9cc26fde93abe2864dd2d029f8463b048c1bec6a97fa3f68f163fc0638e1670053ad969a8aa32baba21fd2d73c821bbfac93dfa5086121270acb69876115087aaa9d5e341544e82", 0xaa, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000880)="2911fc8bdf36f41ab4162facf202fd831e918b1bf17c5f5fb04e1de8750a3ccb7271f75bb48e4f6843f3ec2354c55bde88f885f765ad1549fc17b9a7f23932879e0df7675b696cbac3c877cddbd45534da11ef48b23071cb284a18f050814ebdd9f1eee97d8bbf06e7afe80b12d494fc7f7aa34dc303631bd068a9412a7f1b33a36c62555016958dd4c4e0c572d2e6dbe9beaf1c96dfe9fb63cbfb5855cfcb3771bfd135589152e7") kcmp(r2, r3, 0x3, r0, r1) sendfile(r1, r1, 0x0, 0x800) 17.414938516s ago: executing program 2 (id=5850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 16.382940397s ago: executing program 2 (id=5858): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010400000000000000000a0000040900020073797a310000000008000a40000000010900010073797a3100000000080005400000000d18000c8014000180090001006c61737400000000040002800800034000000130140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@random="147d4a33239a", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 16.359169298s ago: executing program 59 (id=5858): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) fcntl$setstatus(r0, 0x4, 0x2000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000090a010400000000000000000a0000040900020073797a310000000008000a40000000010900010073797a3100000000080005400000000d18000c8014000180090001006c61737400000000040002800800034000000130140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@random="147d4a33239a", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x3e8, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x3]}, {}, {0xdd86, 0x88be, 0x2, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0xff5, 0x2, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 5.764744104s ago: executing program 1 (id=5953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x274, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x81, 0x6, "9713beae5bcb1be56a6a922b9362707191a40200fa66b312b7313403ce3469945717f929bd23aebc8af50bae788ded675aca44ad497651568a2382386e06991192eab3218a514d25da57d51b871bdf5fba4dc89f246370b63c5fe0a551c5a34dc3e58251409a9c199ca60fdee7b2ff289bb85a1dadcdd10ebe54f81df5"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xbb, 0x6, "f65251f10086edf213b0dda9372025a7d9565b59b970c19c1c468ad21ff7323a8e75f4eb1cebb411877949b861beb83a531e9fd1761827a153719256957c77633cab5e3fba0fb8c97474b21ff7f214e0ac357a296815e82bb102f511d3d84b81147e8253424d3c4aab527b6a6c317798383e06e3d02ca0fd9e566a80592787a02cccbb7959d61e01072122721d669a5ccef8c9dff34a2afe428162eade1b5e8ed409a09ab486c3703e1680e07650bf73a0355831c0ac1b"}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "a532df42f7f443585759e3f1fe793592a56252ee8d2b34d365405f8b5a039e6b8083aaba40fcf34b47f4481e80fcf174950803d985eacc92e36b83c42148cb4c9d95aae1525aaaa24810e22679136f8d4e9c73d5638145b94c869340bdcea695e8cf7c575484ae237336e5c234dbf175c624c2f5b6150991d62b47631bba9a151d52415f27c648387350729b5243e6121f36a6987e34812c500d69c7c82a3896fc2852c731ca9ba98d9c193b7debb3d7eaf8c0cfae4f22a7379dc26fb14b9dc15f582288e1076d070577b3e37854cd48e2a1d298f1d8e4be8412b097b1992f84"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x50, 0x8, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0xac, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x3c, 0x6, "69588700b3959d4d6613d9a740684d8361cac11128881d24b1ea195adceb3ae2928e35c898b723c2f1c94a6f54e13db48f22f86ddf1589f7"}, @NFTA_TABLE_USERDATA={0x1b, 0x6, "4670ff4b5d3dd57fae20ea3b5c46aae2a40d9ce2e61278"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x398}, 0x1, 0x0, 0x0, 0x6000004}, 0x40) 5.447767239s ago: executing program 1 (id=5955): openat(0xffffffffffffff9c, 0x0, 0x42, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000002806ff00000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0100006907800000507000000070000f4fdffff0001fe04f9890000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40848c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="4b800000", @ANYRES16=r5, @ANYBLOB="010000000000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 4.380492513s ago: executing program 0 (id=5967): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) 4.312091596s ago: executing program 0 (id=5968): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x6576}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) 4.104695446s ago: executing program 8 (id=5970): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x3, 0x466, &(0x7f0000000a00)="$eJzs28+PE1UcAPDvdLf8hl0J/uCHuopE4o9ddkHk4EWjiQdNTPSA3tbdhSCFNeyaCCG6GoNHQ+LBG9GbiX+BJ70Y5WTiVe+GhBguIKeaaWeWtrS1W0sL9vNJun1v5k3e+3bmdd6btw1gaE2kf5KILRHxe0SMVbP1BSaqbzeunZ/7+9r5uSTK5Tf/Sirlrl87P5cXzY/bnGdGIwqfJbG7Sb1LZ8+dnC2VFs5k+anlU+9PLZ099+yJU7PHF44vnJ45cuTQwennD88815M407iu7/pocc/OV9+++Prc0Yvv/vJdksffEEePTLTbua9c7nF1g7W1Jp2MxjdfDbAtdG6k2k2jWOn/YzFSyVWNxSufDrRxwB1VLpfLD7TevVIG/seSGHQLgMHIb/Tp/Dd/9WnocVe4+mJ1ApTGfSN7VfeMRiErU2yY3/bSREQcXbl5KX3FnXkOAQBQ54d0/PNMs/FfIWqfC23L1lDGI+K+iNgeEYcjYkdE3B9RKftgRDy0xvobF0luH/8UrnQVWIfS8d8L2dpW/fgvH/3F+EiW21qJv5gcO1FaOJB9JvujuD7NT7ep48eXf/ui1b7K+K+YZVZuXkrrz8eCWTuujK6vP2Z+dnm223gbXf0kYtdos/iT1ZWAJCJ2RsSuLus48dS3e1rtqx3/Hm0afxujXTaoRvnriCer538lGuLPJe3XJ6c2RGnhwFR+Vdzu8q8X3mhV/3+KvwfS87+p6fW/ajypXa9dWnsdF/74vOWc5t/jb379r0veqqTzs/Th7PLymemIdclr1UbXbp+5dWyez8un8e/f27z/b8+OSevYHRHpRfxwRDwSEY9mbX8sIh6PiL1t4v/5pSfe6z7+OhvaVNOVNP75pud/9fpvOP+3EuuicUvzxMjJn76vq3R8LfGn5/9QJbU/29LJ918n7eruagYAAIB7TyEitkRSmFxNFwqTk9X/4d8RmwqlxaXlp48tfnB6vvobgfEoFvInXWM1z0Ons2l9np9pyB/Mnht/ObKxkp+cWyzNDzp4GHKbW/T/1J8jg24dcMf1YB0NuEfp/zC89H8YXvo/DK8m/X9j9n65320B+qvZ/f/jAbQD6L+G/m/ZD4aI+T8Mr076/zt9aAfQf+7/MJSWNsbqT+L3batu6+Bn8xJ3Y2J9PyuNQieFk+zecld8PhJrSAz0awkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBn/gkAAP//ll7dPg==") 3.923618885s ago: executing program 8 (id=5971): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01"], 0x12b4}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f000080a000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0x80000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0xd1e, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x100a, 0x38f}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@deltclass={0x78, 0x29, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0x2, 0xfff3}, {0x6, 0x2}}, [@tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0xfe, 0xd8}}, @TCA_RATE={0x6, 0x5, {0x1, 0xb0}}, @tclass_kind_options=@c_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xc0, 0x3}}, @TCA_RATE={0x6, 0x5, {0x5}}, @TCA_RATE={0x6, 0x5, {0xc7, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7f}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x9}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abdff070000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002800500010006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 3.647783049s ago: executing program 3 (id=5972): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f00000001c0)=0x1) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711079ffffffff0095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000ff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) fstat(r3, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x2, 0x20000000, 0x2, 0x4}, 0x4, 0x10}, [{0x4, 0x9, 0x6, 0x52, 0xa1, 0x8}, {0x2, 0xffffff01, 0xffff, 0xfffffffc, 0x62, 0x4f1}, {0x7, 0x4, 0x7, 0x76, 0x6, 0x5}, {0xb11, 0x1, 0x7f, 0xe5f, 0x4, 0x6}, {0xa10, 0x9, 0x6, 0xff, 0x800, 0x10001}, {0xffff, 0x5, 0x1, 0x6, 0x5, 0x8}, {0x4, 0x8506, 0x7ff, 0x2, 0x5, 0x7fffffff}, {0x800, 0x1, 0x3, 0x2, 0x2}, {0x53, 0x40, 0xd, 0x4, 0x874, 0x189}, {0x4740, 0xfd, 0x1, 0xfd3, 0x5, 0x4}, {0x2, 0x6, 0x2, 0x1, 0x7d47, 0x8}, {0x8, 0x4, 0x3, 0xe, 0x40, 0x200}, {0x4, 0x6, 0x7, 0x72, 0x8000, 0x3dc}, {0x6, 0x37, 0xb, 0x5, 0x5, 0x80}, {0x9, 0xffff8001, 0x840f, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x5, 0x5, 0x912, 0x3}, {0x0, 0x7, 0xfffff502, 0xff, 0x4, 0x4}, {0xfffffffe, 0x6, 0x3ff, 0x3, 0x6, 0x2}, {0x7, 0x4, 0x8001, 0x437, 0x7, 0x628}, {0x2, 0x3, 0x5, 0x6, 0x4, 0x8}, {0xfffff801, 0x7fff, 0x1000000, 0xfffffff5, 0x8, 0x9e}, {0x5, 0x1, 0x5, 0x200, 0xffff37db, 0x1}, {0x200, 0x2, 0x1, 0x3ff, 0x8, 0x3}, {0x4, 0x2, 0x3e03, 0x4, 0x8, 0xa08f}, {0xff, 0x3, 0x7, 0x4, 0x10, 0xdbaf}, {0x4, 0xfffffffb, 0x2, 0xc47, 0x8, 0x5bc}, {0x79, 0x1, 0x8, 0xffff, 0x1}, {0xe, 0x800, 0x2, 0xfffffff8, 0x5, 0x1}, {0x80, 0xc66, 0x9fa1, 0xfffffffc, 0x8, 0x41}, {0x7f, 0x9, 0xfffffff7, 0x4, 0x3, 0x800}, {0x9, 0x1, 0x4, 0x6, 0x7, 0x8000}, {0x1, 0x2, 0x987, 0x5, 0x0, 0xffff4377}, {0x2, 0x9, 0x6, 0x4, 0x0, 0x9}, {0xc, 0x1, 0x0, 0x2, 0x4, 0x2}, {0xffffffff, 0x0, 0xfffffffc, 0x1, 0x400, 0xffffff00}, {0x3, 0x80000000, 0x3, 0x14e7dcd1, 0x6, 0x2}, {0x7, 0x10001, 0x10, 0x8, 0xa, 0x6}, {0x1, 0x100, 0x3, 0x1ff, 0x5}, {0xe, 0x1, 0x0, 0x3, 0x3, 0x7}, {0x7, 0x2, 0x2, 0x3, 0x0, 0xfffffff9}, {0x80000000, 0x1, 0x8, 0x4, 0x800, 0x8}, {0x2, 0x81, 0x401, 0x7, 0x4, 0x3}, {0x898, 0x919, 0x2, 0x16000, 0x7, 0x9}, {0x130dd208, 0x63f, 0x1, 0x8e, 0x2, 0x6}, {0xc08f, 0x4, 0x4, 0x3, 0x7, 0x3}, {0x2f, 0xffffffff, 0x281, 0x6, 0x7, 0x4}, {0x2, 0x4, 0x1, 0xffff1cb0, 0x8, 0x401}, {0xffffffff, 0x40, 0x8, 0x2, 0x1, 0xc}, {0x23e9d24a, 0x3b, 0xffffffff, 0x9, 0x8, 0x9}, {0x10001, 0x32, 0x10001, 0x3, 0x52, 0xfffffffc}, {0x4, 0x1, 0xfb, 0x4, 0x6, 0x6}, {0x4, 0x47, 0x7, 0x5, 0x0, 0x7fffffff}, {0x3, 0xbc3f, 0x7, 0x80000001, 0xf, 0x8000}, {0x0, 0x0, 0xa32, 0x8, 0xc, 0x8}, {0x1ff, 0x3, 0x5, 0x8, 0x0, 0x7}, {0x3, 0x3b, 0x8, 0x2, 0x7ff}, {0x5, 0x4909, 0x2, 0x40, 0x7fff, 0x1}, {0x8, 0x1ff, 0x3, 0xfffffffa, 0x1, 0x43}, {0x8, 0x4, 0x6, 0x6, 0x35e, 0x7}, {0x8, 0x7, 0x8, 0x8, 0x3}, {0x8, 0x8, 0xe, 0x7, 0x67, 0x1ff}, {0x3, 0x100000, 0x7, 0x7e2b, 0x5, 0x5}, {0x10001, 0x10000, 0x5, 0x3, 0xfffffff8, 0x4}, {0x6, 0x991e, 0x7, 0x7, 0xc97, 0x4}, {0x8, 0x0, 0x8, 0x5, 0x2, 0x6}, {0x8, 0x6, 0x8001, 0x5, 0x8, 0x9}, {0x2, 0x1, 0x400, 0xffff, 0xc, 0x7}, {0x9, 0xffffffff, 0x9, 0x3ff, 0xc, 0x15565571}, {0xa, 0x2, 0xfff, 0x7, 0xfff, 0x7}, {0x3, 0x2, 0x9, 0x80, 0x7, 0x8}, {0x800, 0x7, 0x5, 0x8, 0xb351, 0x40}, {0xfffffffe, 0x400, 0x8001, 0x75ce, 0x4, 0x1}, {0xffff, 0x5, 0x80000000, 0x8, 0x3, 0x10001}, {0x6, 0x8, 0x3ce, 0x3, 0x56000, 0x1000}, {0x3, 0x83e, 0xa, 0x5, 0x7, 0x8}, {0x9, 0x4, 0x1, 0x6, 0x6, 0x5}, {0x5, 0x8000, 0x8, 0x0, 0x40000000, 0xff}, {0x6, 0xea, 0x2, 0xf7, 0xe, 0x6}, {0x8, 0x1, 0x2, 0xff, 0x8, 0x8}, {0x3, 0x8, 0x10000, 0x81, 0x2, 0x9ca}, {0xfff, 0xaadb, 0xfb5, 0xe7b, 0x3, 0x401}, {0x5, 0x4, 0x1000, 0x8001, 0xe1, 0x2}, {0x8000, 0xc5, 0x8, 0x0, 0x2, 0x5}, {0x8, 0x2b, 0x6, 0x8, 0x6, 0xfffffff7}, {0x2, 0x7fffffff, 0x3, 0x5, 0x0, 0x5}, {0xf, 0x7fff, 0x0, 0x8000, 0x0, 0x8}, {0x4, 0x0, 0x7, 0xa9c, 0x1, 0x9}, {0x4, 0xffff, 0x79a, 0x5, 0x0, 0x2}, {0x1, 0x9, 0x4, 0xffffffff, 0x31, 0x401}, {0x4, 0x7, 0x8, 0x1, 0xfff, 0x1}, {0x4, 0xf, 0x6d0, 0xf, 0x6, 0x70}, {0xd0d, 0x7, 0x3, 0x10000, 0x2, 0x8}, {0x6044, 0x6, 0x8e, 0x81, 0xb, 0x8}, {0xfb56, 0xd1, 0x0, 0xfffffff4, 0x5, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7fff, 0x8, 0xb4b}, {0x5, 0x4dc3, 0x855e, 0x8, 0x1, 0x7}, {0xd, 0xfffffff8, 0x6, 0x40, 0x5, 0xffffffff}, {0x9, 0x6, 0x8, 0x7ff, 0x7, 0x18a}, {0x2, 0x0, 0x1fcd, 0x9, 0x0, 0x8}, {0x4, 0x4, 0x850, 0x51, 0x3ff, 0xb7}, {0x7, 0x7, 0x9, 0x9}, {0x477, 0x9, 0xf7, 0x7fffffff, 0x5, 0xf8d1}, {0x10, 0x80000000, 0x6dc, 0x3a98c5bc, 0x9, 0x7}, {0x8, 0x7, 0x753f390a, 0x5, 0xb}, {0x200, 0x4, 0x8, 0xd, 0x101, 0x9f8}, {0x200, 0x1707589b, 0x6, 0x6, 0x80}, {0x4, 0x7, 0x8, 0x4, 0x3, 0x7}, {0x0, 0xffffff00, 0x5, 0x4, 0x7, 0xfffffffb}, {0x9, 0x100, 0xfa7, 0x1000, 0x2, 0x4}, {0x7f, 0x57, 0x0, 0x8, 0x68f3, 0x841}, {0x6, 0x1, 0x10, 0xffffffff, 0x0, 0xfffffff8}, {0x3ff, 0x3ff, 0x8001, 0xfff, 0x0, 0x2}, {0x7, 0x4, 0x7, 0x5, 0x6e1b, 0x5}, {0xfffff2b6, 0xfb, 0x2, 0xfffffffd, 0xd, 0x45b0}, {0x80000001, 0xfffffffd, 0x81, 0xfffffffb, 0x6}, {0x401, 0x7, 0xe, 0x9, 0x7, 0x2}, {0xf69, 0x57, 0x0, 0x8, 0x5}, {0x4, 0xfff, 0xa1, 0x9, 0x800, 0xfff}, {0x4, 0x8, 0xa7c, 0x0, 0xcd, 0x2}, {0x9, 0x7f, 0x5, 0x7, 0x4, 0x9}, {0x3, 0x1, 0x101, 0x0, 0xc, 0x7}, {0xe5a, 0x8, 0x6, 0x2, 0xffffffc0, 0xc}, {0x5, 0xfffffffd, 0xffff, 0x9973, 0x8, 0xe4a}, {0x7ff, 0x9, 0x3, 0xf0, 0x81}, {0x100, 0x6, 0x9, 0x4, 0x80000000, 0x5}, {0x0, 0x80000000, 0x99, 0x2, 0xc, 0x7}, {0x378140be, 0x4, 0x7ff, 0x10, 0x7f77, 0xffffff81}, {0x401, 0x10001, 0x8, 0x4, 0x2, 0x8}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x32820417c2b438f9}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x21577a60a46d04d}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 3.62295467s ago: executing program 7 (id=5973): r0 = socket(0x15, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000140)="ea87282593968bd57ac06b782b952c8b3df8c590db8de98333ad49c7b10a90a71d1a2d467bc18b72114c162e3e8d50ca409395dcb3d0033850ac3d8bba169c54de5a7adeccc5b17bc2a822efa570667587967409440088927ffed1d3cc4082d72e7cee86053cdc3d334dac22bc83f9730807a84a66e3ef8e0596a5bd3701b776fe088df107c9b781203b965a11102ad84fbb8181711f5e7a4461e518", 0x9c, 0x8c000, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x4db}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 3.113500405s ago: executing program 0 (id=5974): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, 0x0, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000ed8547e7df3ad6b1c8c6bb4804351f45ebe145bfed5edd2b561b13adbcfede3eef7f78c16a00553c694cc7e924060349590285ebf746c1b8084a186b9126994b916f224bcb6e84212a0155a13d0317c5dc40131d1430eae88242cbbaeb389ecf5b2421458c7b6cc655dfed41e0f8030c420a8a013a4a6d667dfbd60e796dc0ed99d328ab7017976d109d01bc12fbf5c1204e5b9b0d657c72703bb63b0260d3ee7c1398b7b2c2b00220adfef75581a6625de144c84e6b5e83e96abc6eaa265e4c401a6e2de31ac0ea236f", @ANYRES32=r7, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e000200000006000f000e00000008000600ac141426"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) setuid(0xee01) utimensat(r8, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000480)={0x7, 0x5b8, 0x1, 'queue1\x00', 0xbde}) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) 2.906803066s ago: executing program 0 (id=5975): r0 = socket$pptp(0x18, 0x1, 0x2) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40000) (fail_nth: 3) 2.833772199s ago: executing program 3 (id=5976): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0x0, 0x240047fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) getsockname$inet(r0, 0x0, &(0x7f0000000c80)) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x726b000000, 0x1}, 0x2, 0x100, 0x800000, 0x6, 0x2, 0xd1, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f0000000100)=[{r1, 0x84}], 0x1, 0x3ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae80229a6f369407ce24779fa21bae350d45fe76"], 0x18}, 0x1, 0x0, 0x0, 0x4002090}, 0x800) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8924, &(0x7f0000000000)={'veth0_to_bond\x00', @ifru_mtu=0x46}) r4 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r4, &(0x7f0000000000), 0x8) io_pgetevents(r5, 0x7, 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x8001, r4, 0x0, 0x0, 0x0, 0x0, 0x1, r4}]) 2.391989702s ago: executing program 1 (id=5977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r0}, &(0x7f0000001780)=0x4, 0x0}, 0x20) 2.312766645s ago: executing program 1 (id=5978): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0xffffffffffffffff, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x80, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000207000000000000000000000005001a"], 0x38}}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x40a54e) fcntl$notify(r1, 0x402, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000500)=""/45, 0x2d) 2.309668236s ago: executing program 0 (id=5979): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01"], 0x12b4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.22145318s ago: executing program 0 (id=5980): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030109"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638877fbac141416ac14141644089f034d2f87e5070f0cab845013f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000", 0x0, 0xd64, 0x60000000}, 0x50) syz_read_part_table(0x5af, &(0x7f0000000000)="$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") sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x404c054}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0xc408, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) 2.02641176s ago: executing program 8 (id=5981): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x6) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f0000000080)={[{@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}]}, 0x3, 0x466, &(0x7f0000000a00)="$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") 1.772974182s ago: executing program 7 (id=5982): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x6576}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="dc895b3aef62202388f17859ac664a7d4aa057fbff3878e048c65d916964b565e4f087d52a330e8c1f6ecbfab90398c407d5fc2c1866792cdccd9bc160edba226b5f3800d51d81cfb6e8d3710c0c1d263d0f931c9b68a3b2575fcf21c07ba188e3fbbf3ac016c978f572105d667f5cd0d9079851d7d2397365ef853fdf966a50db47f7454c73b62198ee9115cc362f957860358d2ad200000000000000", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r7, &(0x7f00000000c0)='./mnt\x00', r7, 0x0, 0x177) r8 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 1.650613068s ago: executing program 3 (id=5983): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$eJzs3U1IHGcYB/BnZndr1aXY9lIo/YBSSiuIvRV6sZcWhCJSSqEtWErppUULVulNe8olh+QYkuApFwm5xeQYvEguCYGcTOLBXAKJ5BDJIQnZsDsr+JVo3HUnZH4/WOfDd97nHWb+74g4GEBh9UXEUESUIqI/IioRkWxu8HH26WtuznUvjUXUaj/cTxrtsu3MxnG9ETEbEV9FxGKaxF/liOmFX1YfLn/32dGpyqdnFn7u7uhJNq2trny/fnrkyPnhL6evXr87ksRQVLecV/slu+wrJxHvHEaxV0RSznsE7Mfof+du1HP/bkR80sh/JdLILt6xyTcWK/HFqecde/zetfc7OVag/Wq1Sv0ZOFsDCieNiGok6UBEZOtpOjCQ/Qx/s9ST/j0x+W//nxNT43/kPVMB7VKNWPn2YteF3m35v1PK8g+8prJfSq38ODp/q76yXsp7QEBHfJAt6s///t9mPg/5h8KRfygu+Yfikn8oLvmH4pJ/KC75h4J42vxjv0275B+KS/6huA6c/xNPDm9QQEdszj8AUCy1rgO9Ndzel5CBXOQ9/wAAAAAAAAAAAAAAAAAAADvNdS+NbXza02N5zxaXT0asfZM13Vm/1Ph/xBFvNr72PEi29Jjsq8KL/fpRix206GzOb1+/dTvf+lc+zLf+zHjE7P8RMVgu77z/kub9d3Bv7/H9yu8tFnhJybbtr3/qbP3tHs/nW394OeJSff4Z3G3+SeO9xnL3+adav34t1v/nUYsdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0DHPAgAA///B2nXP") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3cc40}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.650337308s ago: executing program 8 (id=5984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x15, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x6d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 1.552671053s ago: executing program 8 (id=5985): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x6576}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="dc895b3aef62202388f17859ac664a7d4aa057fbff3878e048c65d916964b565e4f087d52a330e8c1f6ecbfab90398c407d5fc2c1866792cdccd9bc160edba226b5f3800d51d81cfb6e8d3710c0c1d263d0f931c9b68a3b2575fcf21c07ba188e3fbbf3ac016c978f572105d667f5cd0d9079851d7d2397365ef853fdf966a50db47f7454c73b62198ee9115cc362f957860358d2ad200000000000000", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r8, &(0x7f00000000c0)='./mnt\x00', r8, 0x0, 0x177) r9 = fsopen(&(0x7f0000000040)='squashfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 433.152329ms ago: executing program 7 (id=5986): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1004, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xed7a5c78258865d6}}, 0xfffffda4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xca, r3, 0x18}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x14f, @tick=0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f00000001c0)=0x9) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4800000010003704000000000000000000000000ed8547e7df3ad6b1c8c6bb4804351f45ebe145bfed5edd2b561b13adbcfede3eef7f78c16a00553c694cc7e924060349590285ebf746c1b8084a186b9126994b916f224bcb6e84212a0155a13d0317c5dc40131d1430eae88242cbbaeb389ecf5b2421458c7b6cc655dfed41e0f8030c420a8a013a4a6d667dfbd60e796dc0ed99d328ab7017976d109d01bc12fbf5c1204e5b9b0d657c72703bb63b0260d3ee7c1398b7b2c2b00220adfef75581a6625de144c84e6b5e83e96abc6eaa265e4c401a6e2de31ac0ea236f", @ANYRES32=r7, @ANYBLOB="83040500000000002800128008000100677265001c00028006000e000200000006000f000e00000008000600ac141426"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) close_range(r8, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) setuid(0xee01) utimensat(r8, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000480)={0x7, 0x5b8, 0x1, 'queue1\x00', 0xbde}) socket(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000140)=0x9, r1, 0x0, 0x0, 0x1}}, 0x20) 397.275661ms ago: executing program 1 (id=5987): r0 = inotify_init() ioctl(r0, 0x0, &(0x7f00000006c0)="c7c72d3c4512cba9bba620fe11d0091f2409f731b3a8a0c689034d9c8635d3f23958d8cc349541ceb21585d46384c7cbcaa5920fdbda0f3fbcf57eb6c59ff78d1457d818f0f98eb372c08a92ff069e3f5721a47fcfdaf3d9a90e8c6b783317d2f4329c771d4f7462876b93a84c0da9") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40c42, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x40040) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="14008a749e0000130a010100000000000000000a000006"], 0x14}, 0x1, 0x0, 0x0, 0x20040051}, 0x14) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000c9a7b41116808431ee67be54a8ae364791e9000000cbd20000003909458dc38ef93a645918889a24fe4950f79c6c06a3ddf20f125c6c6d834a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) dup(r9) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) 341.916823ms ago: executing program 7 (id=5988): openat(0xffffffffffffff9c, 0x0, 0x42, 0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60000000002806ff00000000000000000000000000000000fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0100006907800000507000000070000f4fdffff0001fe04f9890000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40848c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="4b800000", @ANYRES16=r5, @ANYBLOB="010000000000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 341.209313ms ago: executing program 3 (id=5989): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = dup(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)=r1}, 0x20) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) setuid(0xee00) pidfd_getfd(r2, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 238.280328ms ago: executing program 3 (id=5990): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000001600)=ANY=[], 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file2\x00', 0x8004, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xfe, 0x16d, &(0x7f0000000300)="$eJzs20GrElEUB/Az6fO9V5u3jhYDbVpJtWpZxAuigaJwUasCa6Mh5MZa+Sla9wWDcNWqG+OEligi5Yzk77eQA3/0niszc7kD9/WN94P+aPxu9GwWZ1kW7fuRx48sLuJKtKIyDQDgf/I9pfiWUkqn0zj/EimlpjsCAPbN+g8Ax2fr+n+vocYAgL2x/weA4/Pi5asnD4ri8nmen0WcRMSkF/F1Wn6WHj0uLm/ncxfLb80mk15rkd+p8vzP/CSu/srvrs07cetmlZfZw6fFSn4t+vufPgAAAByFbr6wdn/f7W7Kq+q39wMr+/d2XG/XNg0AYAfjj58Gb4bDtx9qKM7nI2b1Drpb8bmBv+Vgi1YcRBuKrUV5yf7rX27yqQTUYXnTN90JAAAAAAAAAAAAAACwyV8eFepExJooorPtZMFp7VMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAhZ8BAAD//7yiQ4k=") 237.447218ms ago: executing program 8 (id=5991): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f00000001c0)=0x1) capget(&(0x7f0000feaff9)={0x20080522}, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1c, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711079ffffffff0095"], &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000ff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) fstat(r3, &(0x7f00000000c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003f40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x5, 0x2, 0x20000000, 0x2, 0x4}, 0x4, 0x10}, [{0x4, 0x9, 0x6, 0x52, 0xa1, 0x8}, {0x2, 0xffffff01, 0xffff, 0xfffffffc, 0x62, 0x4f1}, {0x7, 0x4, 0x7, 0x76, 0x6, 0x5}, {0xb11, 0x1, 0x7f, 0xe5f, 0x4, 0x6}, {0xa10, 0x9, 0x6, 0xff, 0x800, 0x10001}, {0xffff, 0x5, 0x1, 0x6, 0x5, 0x8}, {0x4, 0x8506, 0x7ff, 0x2, 0x5, 0x7fffffff}, {0x800, 0x1, 0x3, 0x2, 0x2}, {0x53, 0x40, 0xd, 0x4, 0x874, 0x189}, {0x4740, 0xfd, 0x1, 0xfd3, 0x5, 0x4}, {0x2, 0x6, 0x2, 0x1, 0x7d47, 0x8}, {0x8, 0x4, 0x3, 0xe, 0x40, 0x200}, {0x4, 0x6, 0x7, 0x72, 0x8000, 0x3dc}, {0x6, 0x37, 0xb, 0x5, 0x5, 0x80}, {0x9, 0xffff8001, 0x840f, 0x1, 0x6, 0x4}, {0x2, 0x2, 0x5, 0x5, 0x912, 0x3}, {0x0, 0x7, 0xfffff502, 0xff, 0x4, 0x4}, {0xfffffffe, 0x6, 0x3ff, 0x3, 0x6, 0x2}, {0x7, 0x4, 0x8001, 0x437, 0x7, 0x628}, {0x2, 0x3, 0x5, 0x6, 0x4, 0x8}, {0xfffff801, 0x7fff, 0x1000000, 0xfffffff5, 0x8, 0x9e}, {0x5, 0x1, 0x5, 0x200, 0xffff37db, 0x1}, {0x200, 0x2, 0x1, 0x3ff, 0x8, 0x3}, {0x4, 0x2, 0x3e03, 0x4, 0x8, 0xa08f}, {0xff, 0x3, 0x7, 0x4, 0x10, 0xdbaf}, {0x4, 0xfffffffb, 0x2, 0xc47, 0x8, 0x5bc}, {0x79, 0x1, 0x8, 0xffff, 0x1}, {0xe, 0x800, 0x2, 0xfffffff8, 0x5, 0x1}, {0x80, 0xc66, 0x9fa1, 0xfffffffc, 0x8, 0x41}, {0x7f, 0x9, 0xfffffff7, 0x4, 0x3, 0x800}, {0x9, 0x1, 0x4, 0x6, 0x7, 0x8000}, {0x1, 0x2, 0x987, 0x5, 0x0, 0xffff4377}, {0x2, 0x9, 0x6, 0x4, 0x0, 0x9}, {0xc, 0x1, 0x0, 0x2, 0x4, 0x2}, {0xffffffff, 0x0, 0xfffffffc, 0x1, 0x400, 0xffffff00}, {0x3, 0x80000000, 0x3, 0x14e7dcd1, 0x6, 0x2}, {0x7, 0x10001, 0x10, 0x8, 0xa, 0x6}, {0x1, 0x100, 0x3, 0x1ff, 0x5}, {0xe, 0x1, 0x0, 0x3, 0x3, 0x7}, {0x7, 0x2, 0x2, 0x3, 0x0, 0xfffffff9}, {0x80000000, 0x1, 0x8, 0x4, 0x800, 0x8}, {0x2, 0x81, 0x401, 0x7, 0x4, 0x3}, {0x898, 0x919, 0x2, 0x16000, 0x7, 0x9}, {0x130dd208, 0x63f, 0x1, 0x8e, 0x2, 0x6}, {0xc08f, 0x4, 0x4, 0x3, 0x7, 0x3}, {0x2f, 0xffffffff, 0x281, 0x6, 0x7, 0x4}, {0x2, 0x4, 0x1, 0xffff1cb0, 0x8, 0x401}, {0xffffffff, 0x40, 0x8, 0x2, 0x1, 0xc}, {0x23e9d24a, 0x3b, 0xffffffff, 0x9, 0x8, 0x9}, {0x10001, 0x32, 0x10001, 0x3, 0x52, 0xfffffffc}, {0x4, 0x1, 0xfb, 0x4, 0x6, 0x6}, {0x4, 0x47, 0x7, 0x5, 0x0, 0x7fffffff}, {0x3, 0xbc3f, 0x7, 0x80000001, 0xf, 0x8000}, {0x0, 0x0, 0xa32, 0x8, 0xc, 0x8}, {0x1ff, 0x3, 0x5, 0x8, 0x0, 0x7}, {0x3, 0x3b, 0x8, 0x2, 0x7ff}, {0x5, 0x4909, 0x2, 0x40, 0x7fff, 0x1}, {0x8, 0x1ff, 0x3, 0xfffffffa, 0x1, 0x43}, {0x8, 0x4, 0x6, 0x6, 0x35e, 0x7}, {0x8, 0x7, 0x8, 0x8, 0x3}, {0x8, 0x8, 0xe, 0x7, 0x67, 0x1ff}, {0x3, 0x100000, 0x7, 0x7e2b, 0x5, 0x5}, {0x10001, 0x10000, 0x5, 0x3, 0xfffffff8, 0x4}, {0x6, 0x991e, 0x7, 0x7, 0xc97, 0x4}, {0x8, 0x0, 0x8, 0x5, 0x2, 0x6}, {0x8, 0x6, 0x8001, 0x5, 0x8, 0x9}, {0x2, 0x1, 0x400, 0xffff, 0xc, 0x7}, {0x9, 0xffffffff, 0x9, 0x3ff, 0xc, 0x15565571}, {0xa, 0x2, 0xfff, 0x7, 0xfff, 0x7}, {0x3, 0x2, 0x9, 0x80, 0x7, 0x8}, {0x800, 0x7, 0x5, 0x8, 0xb351, 0x40}, {0xfffffffe, 0x400, 0x8001, 0x75ce, 0x4, 0x1}, {0xffff, 0x5, 0x80000000, 0x8, 0x3, 0x10001}, {0x6, 0x8, 0x3ce, 0x3, 0x56000, 0x1000}, {0x3, 0x83e, 0xa, 0x5, 0x7, 0x8}, {0x9, 0x4, 0x1, 0x6, 0x6, 0x5}, {0x5, 0x8000, 0x8, 0x0, 0x40000000, 0xff}, {0x6, 0xea, 0x2, 0xf7, 0xe, 0x6}, {0x8, 0x1, 0x2, 0xff, 0x8, 0x8}, {0x3, 0x8, 0x10000, 0x81, 0x2, 0x9ca}, {0xfff, 0xaadb, 0xfb5, 0xe7b, 0x3, 0x401}, {0x5, 0x4, 0x1000, 0x8001, 0xe1, 0x2}, {0x8000, 0xc5, 0x8, 0x0, 0x2, 0x5}, {0x8, 0x2b, 0x6, 0x8, 0x6, 0xfffffff7}, {0x2, 0x7fffffff, 0x3, 0x5, 0x0, 0x5}, {0xf, 0x7fff, 0x0, 0x8000, 0x0, 0x8}, {0x4, 0x0, 0x7, 0xa9c, 0x1, 0x9}, {0x4, 0xffff, 0x79a, 0x5, 0x0, 0x2}, {0x1, 0x9, 0x4, 0xffffffff, 0x31, 0x401}, {0x4, 0x7, 0x8, 0x1, 0xfff, 0x1}, {0x4, 0xf, 0x6d0, 0xf, 0x6, 0x70}, {0xd0d, 0x7, 0x3, 0x10000, 0x2, 0x8}, {0x6044, 0x6, 0x8e, 0x81, 0xb, 0x8}, {0xfb56, 0xd1, 0x0, 0xfffffff4, 0x5, 0x2}, {0xfffffff9, 0x8, 0x1, 0x7fff, 0x8, 0xb4b}, {0x5, 0x4dc3, 0x855e, 0x8, 0x1, 0x7}, {0xd, 0xfffffff8, 0x6, 0x40, 0x5, 0xffffffff}, {0x9, 0x6, 0x8, 0x7ff, 0x7, 0x18a}, {0x2, 0x0, 0x1fcd, 0x9, 0x0, 0x8}, {0x4, 0x4, 0x850, 0x51, 0x3ff, 0xb7}, {0x7, 0x7, 0x9, 0x9}, {0x477, 0x9, 0xf7, 0x7fffffff, 0x5, 0xf8d1}, {0x10, 0x80000000, 0x6dc, 0x3a98c5bc, 0x9, 0x7}, {0x8, 0x7, 0x753f390a, 0x5, 0xb}, {0x200, 0x4, 0x8, 0xd, 0x101, 0x9f8}, {0x200, 0x1707589b, 0x6, 0x6, 0x80}, {0x4, 0x7, 0x8, 0x4, 0x3, 0x7}, {0x0, 0xffffff00, 0x5, 0x4, 0x7, 0xfffffffb}, {0x9, 0x100, 0xfa7, 0x1000, 0x2, 0x4}, {0x7f, 0x57, 0x0, 0x8, 0x68f3, 0x841}, {0x6, 0x1, 0x10, 0xffffffff, 0x0, 0xfffffff8}, {0x3ff, 0x3ff, 0x8001, 0xfff, 0x0, 0x2}, {0x7, 0x4, 0x7, 0x5, 0x6e1b, 0x5}, {0xfffff2b6, 0xfb, 0x2, 0xfffffffd, 0xd, 0x45b0}, {0x80000001, 0xfffffffd, 0x81, 0xfffffffb, 0x6}, {0x401, 0x7, 0xe, 0x9, 0x7, 0x2}, {0xf69, 0x57, 0x0, 0x8, 0x5}, {0x4, 0xfff, 0xa1, 0x9, 0x800, 0xfff}, {0x4, 0x8, 0xa7c, 0x0, 0xcd, 0x2}, {0x9, 0x7f, 0x5, 0x7, 0x4, 0x9}, {0x3, 0x1, 0x101, 0x0, 0xc, 0x7}, {0xe5a, 0x8, 0x6, 0x2, 0xffffffc0, 0xc}, {0x5, 0xfffffffd, 0xffff, 0x9973, 0x8, 0xe4a}, {0x7ff, 0x9, 0x3, 0xf0, 0x81}, {0x100, 0x6, 0x9, 0x4, 0x80000000, 0x5}, {0x0, 0x80000000, 0x99, 0x2, 0xc, 0x7}, {0x378140be, 0x4, 0x7ff, 0x10, 0x7f77, 0xffffff81}, {0x401, 0x10001, 0x8, 0x4, 0x2, 0x8}], [{0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x32820417c2b438f9}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x2}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x5}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x3}, {}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {}, {0x3}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x21577a60a46d04d}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) 212.958939ms ago: executing program 1 (id=5992): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030109"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23870140cde10e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fba6f421145c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xd64, 0x60000000}, 0x50) syz_read_part_table(0x5af, &(0x7f0000000000)="$eJzs1L9LW3sUAPCvecbow0dEhDf4BsHg8vwBcWgHQykSQxaV0pYOzoKDHQQHB7FEaTe1/0DF1hZxETt3FCOILXGSjOI/0OKSyRJywSZ0KRih5fOB3B/fc76cezknN/Bbi4UPrbWr65aGULx6iBZf/Hz3k73sRL5vur2WORNCyP7XGWp3bXWZB9F5KlE75xPp0vbJ+Le9rtP+s2LqXSyKf4rVis1f7CRv5QX5o+1njpKrawu59aXM3Hlu+XJ0dijbu5F9/vre27GVp/+OPYsGqzpXL5tSvzr8N/VTpVcPapHheLFUSR9HeYMN/65YE56Fu9c4f1s9hXKhMjmwuzgy2F0+XNmM+n7V+HUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4ZfuZo+Tq2kKufSkzd55bvhydHcr2bmTbovDYl+oxFv2aWH89qp8q3X//+Xrq65t/huPFUiV9HOUNttTvaw0hfGzOI3GH/g/1/d/qKZQLlcmB3cWRv7rLhyubUd+vGvofGu8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACLZiXzf9MNHj0NoCTOdIYRY1051/Tpxk/N3COEgup6K1vOJdGn7ZDy+13Xaf1ZMdYRECD9sCfMXO8mO+lKxpr8Mv+x7AAAA///jA3Zm") sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x404c054}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0xc408, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) 197.01423ms ago: executing program 7 (id=5993): r0 = inotify_init() ioctl(r0, 0x0, &(0x7f00000006c0)="c7c72d3c4512cba9bba620fe11d0091f2409f731b3a8a0c689034d9c8635d3f23958d8cc349541ceb21585d46384c7cbcaa5920fdbda0f3fbcf57eb6c59ff78d1457d818f0f98eb372c08a92ff069e3f5721a47fcfdaf3d9a90e8c6b783317d2f4329c771d4f7462876b93a84c0da9") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40c42, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x14}}, 0x40040) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="14008a749e0000130a010100000000000000000a000006"], 0x14}, 0x1, 0x0, 0x0, 0x20040051}, 0x14) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000c9a7b41116808431ee67be54a8ae364791e9000000cbd20000003909458dc38ef93a645918889a24fe4950f79c6c06a3ddf20f125c6c6d834a"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) ioctl$TIOCL_BLANKSCREEN(r4, 0x4b67, &(0x7f0000000180)) 100.659725ms ago: executing program 3 (id=5994): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a440000102030109"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfb, 0x0, &(0x7f0000000100)="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", 0x0, 0xd64, 0x60000000}, 0x50) syz_read_part_table(0x5af, &(0x7f0000000000)="$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") sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x404c054}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x10000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0}, 0xc408, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x20, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) 0s ago: executing program 7 (id=5995): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x5c, r4, 0x5eae78d9c54e9d3f, 0x0, 0x27dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "359f6ef711e7273db944a171b1d6421c"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000000}, 0x2004c0c4) bind$802154_raw(r0, &(0x7f00000003c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) kernel console output (not intermixed with test programs): dump_stack+0x15/0x1b [ 649.311607][T32445] should_fail_ex+0x263/0x280 [ 649.311637][T32445] should_fail+0xb/0x20 [ 649.311727][T32445] should_fail_usercopy+0x1a/0x20 [ 649.311755][T32445] _copy_from_user+0x1c/0xb0 [ 649.311838][T32445] kstrtouint_from_user+0x69/0xf0 [ 649.311870][T32445] proc_fail_nth_write+0x50/0x160 [ 649.311985][T32445] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 649.312015][T32445] vfs_write+0x269/0x9f0 [ 649.312045][T32445] ? __rcu_read_unlock+0x4e/0x70 [ 649.312176][T32445] ? __fget_files+0x184/0x1c0 [ 649.312202][T32445] ? mutex_lock+0x57/0x90 [ 649.312232][T32445] ksys_write+0xdc/0x1a0 [ 649.312277][T32445] __x64_sys_write+0x40/0x50 [ 649.312298][T32445] x64_sys_call+0x27e1/0x3020 [ 649.312383][T32445] do_syscall_64+0x12c/0x370 [ 649.312406][T32445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.312456][T32445] RIP: 0033:0x7fd13395cfce [ 649.312473][T32445] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 649.312493][T32445] RSP: 002b:00007fd1323eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 649.312515][T32445] RAX: ffffffffffffffda RBX: 00007fd1323ef6c0 RCX: 00007fd13395cfce [ 649.312531][T32445] RDX: 0000000000000001 RSI: 00007fd1323ef0a0 RDI: 0000000000000004 [ 649.312580][T32445] RBP: 00007fd1323ef090 R08: 0000000000000000 R09: 0000000000000000 [ 649.312592][T32445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.312607][T32445] R13: 00007fd133c16038 R14: 00007fd133c15fa0 R15: 00007ffe71ff7148 [ 649.312630][T32445] [ 649.699407][T32451] rose0: tun_chr_ioctl cmd 2147767507 [ 649.705728][T32453] bridge_slave_1: left allmulticast mode [ 649.711417][T32453] bridge_slave_1: left promiscuous mode [ 649.717193][T32453] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.726851][T32453] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 650.212233][ T4670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 650.321762][T32468] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5347'. [ 650.331635][T32468] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5347'. [ 650.543839][T32393] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 650.659149][T32474] loop0: detected capacity change from 0 to 512 [ 650.722402][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5352'. [ 650.760061][T32483] syzkaller1: entered promiscuous mode [ 650.765873][T32483] syzkaller1: entered allmulticast mode [ 650.795458][T32477] loop8: detected capacity change from 0 to 512 [ 650.807110][ T28] audit: type=1400 audit(1773794183.282:1325): avc: denied { accept } for pid=32487 comm="syz.0.5355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 650.840106][T32477] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 650.864713][ T28] audit: type=1400 audit(1773794183.342:1326): avc: denied { read } for pid=32489 comm="syz.0.5357" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 650.894262][ T28] audit: type=1400 audit(1773794183.342:1327): avc: denied { open } for pid=32489 comm="syz.0.5357" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 650.919014][T32496] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5357'. [ 650.947234][T32477] EXT4-fs (loop8): 1 truncate cleaned up [ 650.963101][T32477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.969930][T32496] tc_dump_action: action bad kind [ 651.040263][T32495] lo speed is unknown, defaulting to 1000 [ 651.234834][T32495] lo speed is unknown, defaulting to 1000 [ 651.644226][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.653087][T32495] pimreg: entered allmulticast mode [ 651.683711][T32495] pimreg: left allmulticast mode [ 651.730054][T32508] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5361'. [ 651.807758][T32513] syzkaller0: entered promiscuous mode [ 651.835409][T32513] syzkaller0: entered allmulticast mode [ 651.895174][T32522] loop0: detected capacity change from 0 to 128 [ 651.923065][T32522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5366'. [ 652.237429][T32536] siw: device registration error -23 [ 652.273479][T32536] lo speed is unknown, defaulting to 1000 [ 652.358698][T32536] lo speed is unknown, defaulting to 1000 [ 652.500774][T32537] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 652.795404][T32539] loop8: detected capacity change from 0 to 1024 [ 652.961917][T32539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.140087][T32550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5374'. [ 653.166381][T32550] loop4: detected capacity change from 0 to 512 [ 653.187651][ T1684] Bluetooth: hci0: Frame reassembly failed (-84) [ 653.213369][T32550] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 653.235154][T32550] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.5374: corrupted xattr entries [ 653.247085][T32550] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 653.247311][T32550] EXT4-fs (loop4): 1 orphan inode deleted [ 653.256537][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 653.256579][ C1] EXT4-fs (loop4): initial error at time 1773794185: xattr_find_entry:337: inode 15 [ 653.256610][ C1] EXT4-fs (loop4): last error at time 1773794185: xattr_find_entry:337: inode 15 [ 653.288683][T32550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.289103][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 653.318535][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.364621][T32556] loop4: detected capacity change from 0 to 2048 [ 653.402683][ T3302] loop4: p1 < > p4 < > [ 653.410174][T32556] loop4: p1 < > p4 < > [ 653.416761][T32556] netlink: 'syz.4.5375': attribute type 21 has an invalid length. [ 653.424847][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5375'. [ 653.485352][T32558] syzkaller0: entered promiscuous mode [ 653.491057][T32558] syzkaller0: entered allmulticast mode [ 653.677134][T32560] syzkaller0: entered promiscuous mode [ 653.683609][T32560] syzkaller0: entered allmulticast mode [ 653.693331][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.756630][T32569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5380'. [ 653.773567][ T53] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.787050][T32569] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5380'. [ 653.807157][T32572] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5378'. [ 653.821690][ T53] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.875780][ T53] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.945019][ T53] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.029533][T32574] loop4: detected capacity change from 0 to 512 [ 654.054802][ T53] bridge_slave_1: left allmulticast mode [ 654.070351][ T53] bridge_slave_1: left promiscuous mode [ 654.081443][T32574] EXT4-fs: Ignoring removed bh option [ 654.088828][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.108899][ T53] bridge_slave_0: left allmulticast mode [ 654.116466][T32574] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 654.125902][ T53] bridge_slave_0: left promiscuous mode [ 654.131570][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.163117][T32574] EXT4-fs (loop4): 1 truncate cleaned up [ 654.177398][T32574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.258986][ T28] audit: type=1400 audit(1773794186.732:1328): avc: denied { ioctl } for pid=32573 comm="syz.4.5382" path="cgroup:[4026532722]" dev="nsfs" ino=4026532722 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 654.314077][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.379781][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.397520][T32579] loop4: detected capacity change from 0 to 512 [ 654.416553][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.422644][T32579] EXT4-fs: Ignoring removed nomblk_io_submit option [ 654.433331][ T53] bond0 (unregistering): Released all slaves [ 654.456530][ T53] bond1 (unregistering): Released all slaves [ 654.474295][T32579] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 654.489873][T32579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e119, mo2=0002] [ 654.503468][ T53] tipc: Left network mode [ 654.527893][T32579] EXT4-fs (loop4): orphan cleanup on readonly fs [ 654.554903][T32579] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 654.573015][T32579] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 654.591581][T32579] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 654.602667][T32579] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5383: bg 0: block 40: padding at end of block bitmap is not set [ 654.619291][T32579] loop4: lost filesystem error report for type 5 error -117 [ 654.622111][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 654.636469][ C1] EXT4-fs (loop4): initial error at time 1773794187: ext4_validate_block_bitmap:441 [ 654.646800][ C1] EXT4-fs (loop4): last error at time 1773794187: ext4_validate_block_bitmap:441 [ 654.658804][T32579] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 654.667554][T32579] loop4: lost filesystem error report for type 5 error -117 [ 654.667773][T32579] EXT4-fs (loop4): 1 truncate cleaned up [ 654.697092][T32579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.726598][ T53] hsr_slave_0: left promiscuous mode [ 654.732613][ T53] hsr_slave_1: left promiscuous mode [ 654.738447][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.746215][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.754109][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.761580][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.826221][T32599] loop8: detected capacity change from 0 to 512 [ 654.833432][T32599] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 654.856571][T32599] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.5385: corrupted xattr entries [ 654.869867][T32603] FAULT_INJECTION: forcing a failure. [ 654.869867][T32603] name failslab, interval 1, probability 0, space 0, times 0 [ 654.883159][T32599] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 654.883307][ T53] veth1_macvtap: left promiscuous mode [ 654.883468][T32599] EXT4-fs (loop8): 1 orphan inode deleted [ 654.892524][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 654.892544][ C0] EXT4-fs (loop8): initial error at time 1773794187: xattr_find_entry:337: inode 15 [ 654.892575][ C0] EXT4-fs (loop8): last error at time 1773794187: xattr_find_entry:337: inode 15 [ 654.904164][ T53] veth0_macvtap: left promiscuous mode [ 654.911110][T32603] CPU: 0 UID: 0 PID: 32603 Comm: syz.7.5387 Tainted: G W syzkaller #0 PREEMPT(full) [ 654.911207][T32603] Tainted: [W]=WARN [ 654.911215][T32603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.911229][T32603] Call Trace: [ 654.911237][T32603] [ 654.911246][T32603] __dump_stack+0x1d/0x30 [ 654.911275][T32603] dump_stack_lvl+0x95/0xd0 [ 654.911301][T32603] dump_stack+0x15/0x1b [ 654.911378][T32603] should_fail_ex+0x263/0x280 [ 654.911435][T32603] should_failslab+0x8c/0xb0 [ 654.911463][T32603] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 654.911544][T32603] ? __d_alloc+0x37/0x340 [ 654.911581][T32603] __d_alloc+0x37/0x340 [ 654.911673][T32603] d_alloc_parallel+0x54/0xce0 [ 654.911726][T32603] ? lockref_get_not_dead+0x120/0x1c0 [ 654.911832][T32603] ? selinux_inode_permission+0x6d1/0x7d0 [ 654.911859][T32603] ? __lookup_slow+0x42/0x260 [ 654.911891][T32603] __lookup_slow+0x96/0x260 [ 654.911922][T32603] lookup_slow+0x3c/0x60 [ 654.912029][T32603] link_path_walk+0x946/0xe30 [ 654.912063][T32603] path_openat+0x1c6/0x2050 [ 654.912186][T32603] ? perf_trace_run_bpf_submit+0xac/0x110 [ 654.912269][T32603] do_file_open+0x16c/0x290 [ 654.912310][T32603] do_sys_openat2+0x94/0x130 [ 654.912377][T32603] __x64_sys_openat+0xf2/0x120 [ 654.912407][T32603] x64_sys_call+0x1e39/0x3020 [ 654.912434][T32603] do_syscall_64+0x12c/0x370 [ 654.912504][T32603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.912602][T32603] RIP: 0033:0x7fd13399c799 [ 654.912619][T32603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.912639][T32603] RSP: 002b:00007fd1323ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 654.912741][T32603] RAX: ffffffffffffffda RBX: 00007fd133c15fa0 RCX: 00007fd13399c799 [ 654.912762][T32603] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 654.912777][T32603] RBP: 00007fd1323ef090 R08: 0000000000000000 R09: 0000000000000000 [ 654.912836][T32603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.912850][T32603] R13: 00007fd133c16038 R14: 00007fd133c15fa0 R15: 00007ffe71ff7148 [ 654.912897][T32603] [ 655.154784][T32599] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.171786][ T53] veth1_vlan: left promiscuous mode [ 655.203816][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.204290][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.251947][T32608] loop8: detected capacity change from 0 to 2048 [ 655.259287][T31044] Bluetooth: hci0: command 0x1003 tx timeout [ 655.259495][ T4670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 655.292424][T32613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5391'. [ 655.305033][T32608] loop8: p1 p2 [ 655.332133][ T4670] Bluetooth: hci1: command 0x1003 tx timeout [ 655.332172][T30333] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 655.369758][ T53] team0 (unregistering): Port device team_slave_1 removed [ 655.385341][ T53] team0 (unregistering): Port device team_slave_0 removed [ 655.408480][ T28] audit: type=1400 audit(1773794187.882:1329): avc: denied { setopt } for pid=32612 comm="syz.4.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 655.635410][T32649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5392'. [ 655.645322][T32649] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5392'. [ 655.714270][T32663] 9p: Bad value for 'rfdno' [ 655.719874][ T28] audit: type=1400 audit(1773794188.192:1330): avc: denied { ioctl } for pid=32662 comm="syz.4.5393" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 655.756227][T32663] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5393'. [ 655.766316][T32663] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32663 comm=syz.4.5393 [ 655.799422][ T28] audit: type=1400 audit(1773794188.272:1331): avc: denied { create } for pid=32667 comm="syz.1.5394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 655.828625][ T28] audit: type=1400 audit(1773794188.302:1332): avc: denied { sys_admin } for pid=32667 comm="syz.1.5394" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 655.878807][T32673] loop4: detected capacity change from 0 to 512 [ 655.957172][ T28] audit: type=1400 audit(1773794188.392:1333): avc: denied { mount } for pid=32667 comm="syz.1.5394" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 655.992551][ T28] audit: type=1400 audit(1773794188.392:1334): avc: denied { unmount } for pid=32667 comm="syz.1.5394" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 655.993811][T32673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.036294][T32673] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 656.133662][T32686] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5395'. [ 656.322998][T32691] loop8: detected capacity change from 0 to 512 [ 656.436067][T32691] msdos: Unknown parameter '÷‘ ÛtÌ‘r¤”¿‡zþŠä<2H˹ƒŠÙ!1\î0x0000000000000000' [ 656.486302][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.651931][T32702] loop1: detected capacity change from 0 to 128 [ 656.754384][T32701] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 656.799110][T32701] EXT4-fs (loop4): 1 truncate cleaned up [ 656.799633][T32706] EXT4-fs: Ignoring removed bh option [ 656.826894][T32701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.934171][T32706] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.540058][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.613428][ T3302] loop4: p1 p2 [ 657.624600][T32716] loop4: p1 p2 [ 657.934799][T32726] rtc_cmos 00:00: Alarms can be up to one day in the future [ 658.009524][T32733] syzkaller0: entered promiscuous mode [ 658.026536][T32733] syzkaller0: entered allmulticast mode [ 658.278367][T32740] syzkaller0: entered promiscuous mode [ 658.284050][T32740] syzkaller0: entered allmulticast mode [ 658.369635][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 658.395300][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 658.726688][T32757] set_capacity_and_notify: 5 callbacks suppressed [ 658.726733][T32757] loop0: detected capacity change from 0 to 512 [ 658.743433][T32757] xt_TCPMSS: Only works on TCP SYN packets [ 658.890536][T32765] netlink: 'syz.7.5418': attribute type 1 has an invalid length. [ 658.898756][T32765] __nla_validate_parse: 11 callbacks suppressed [ 658.898771][T32765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5418'. [ 659.879055][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.900724][ T1773] bridge_slave_1: left allmulticast mode [ 659.919621][ T1773] bridge_slave_1: left promiscuous mode [ 659.929152][ T1773] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.939428][ T301] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5419'. [ 659.967513][ T1773] bridge_slave_0: left allmulticast mode [ 659.983392][ T301] loop8: detected capacity change from 0 to 512 [ 659.991706][ T1773] bridge_slave_0: left promiscuous mode [ 660.019305][ T301] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 660.032547][ T1773] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.115968][ T310] loop4: detected capacity change from 0 to 512 [ 660.257221][ T308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5420'. [ 660.307988][ T1773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.332042][ T1773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.352199][ T1773] bond0 (unregistering): Released all slaves [ 660.414502][ T1773] tipc: Left network mode [ 660.508023][ T318] loop1: detected capacity change from 0 to 1024 [ 660.537427][ T1773] hsr_slave_0: left promiscuous mode [ 660.552835][ T318] EXT4-fs: Ignoring removed orlov option [ 660.568265][ T1773] hsr_slave_1: left promiscuous mode [ 660.578539][ T1773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.586414][ T310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 660.602904][ T301] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.5419: corrupted xattr entries [ 660.632899][ T301] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 660.633213][ T301] EXT4-fs (loop8): 1 orphan inode deleted [ 660.642358][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 660.642406][ C0] EXT4-fs (loop8): initial error at time 1773794193: xattr_find_entry:337: inode 15 [ 660.642442][ C0] EXT4-fs (loop8): last error at time 1773794193: xattr_find_entry:337: inode 15 [ 660.673546][ T310] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.695817][ T318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5423'. [ 660.702988][ T1773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.724926][ T1773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.735364][ T310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5422'. [ 660.740462][ T301] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.744685][ T310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5422'. [ 660.765723][ T1773] veth1_macvtap: left promiscuous mode [ 660.771297][ T1773] veth0_macvtap: left promiscuous mode [ 660.778872][ T1773] veth1_vlan: left promiscuous mode [ 660.784253][ T1773] veth0_vlan: left promiscuous mode [ 660.787231][ T310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5422'. [ 660.802376][ T310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5422'. [ 660.818647][ T332] loop1: detected capacity change from 0 to 128 [ 660.844171][ T310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5422'. [ 660.862178][ T310] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5422'. [ 660.938502][ T1773] team0 (unregistering): Port device team_slave_1 removed [ 660.950312][ T1773] team0 (unregistering): Port device team_slave_0 removed [ 661.024489][ T334] syzkaller0: entered promiscuous mode [ 661.030047][ T334] syzkaller0: entered allmulticast mode [ 661.040571][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.085745][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.295413][ T367] loop0: detected capacity change from 0 to 128 [ 661.465368][ T367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 661.482978][ T376] rose0: tun_chr_ioctl cmd 2147767507 [ 661.528440][ T376] loop8: detected capacity change from 0 to 512 [ 661.623782][ T376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.650855][ T379] loop0: detected capacity change from 0 to 512 [ 661.698188][ T376] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 661.745173][ T383] loop0: detected capacity change from 0 to 512 [ 661.792956][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.849783][ T392] syzkaller0: entered promiscuous mode [ 661.855356][ T392] syzkaller0: entered allmulticast mode [ 662.093662][ T399] syzkaller0: entered promiscuous mode [ 662.100283][ T399] syzkaller0: entered allmulticast mode [ 662.109869][ T404] loop4: detected capacity change from 0 to 2048 [ 662.203087][ T395] Falling back ldisc for ttyS3. [ 662.248657][ T404] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 662.301378][ T404] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.344438][ T404] netlink: 'syz.4.5447': attribute type 6 has an invalid length. [ 662.352564][ T28] audit: type=1400 audit(1773794194.822:1335): avc: denied { getopt } for pid=403 comm="syz.4.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 662.470348][ T417] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 662.504564][ T417] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.404343][T18697] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /345/file0: bad entry in directory: directory entry overrun - offset=108, inode=646161, rec_len=4096, size=4096 fake=0 [ 663.444741][ T428] usb usb7: usbfs: process 428 (syz.7.5452) did not claim interface 0 before use [ 663.472961][ T423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 663.481742][T18697] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 663.499492][T18697] EXT4-fs error (device loop4): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 663.501524][ T425] can: request_module (can-proto-4) failed. [ 663.517990][ T434] syzkaller0: entered promiscuous mode [ 663.525948][ T434] syzkaller0: entered allmulticast mode [ 663.537804][T18697] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.551451][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 663.610884][ T1851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.721555][ T425] lo speed is unknown, defaulting to 1000 [ 663.741891][ T1851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.956468][ T425] lo speed is unknown, defaulting to 1000 [ 664.066806][ T1851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.158781][ T459] set_capacity_and_notify: 2 callbacks suppressed [ 664.158803][ T459] loop1: detected capacity change from 0 to 512 [ 664.200683][ T445] __nla_validate_parse: 4 callbacks suppressed [ 664.200699][ T445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5459'. [ 664.241500][ T445] Falling back ldisc for ttyS3. [ 664.268676][ T1851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.280593][ T463] rose0: tun_chr_ioctl cmd 2147767507 [ 664.289242][ T463] loop1: detected capacity change from 0 to 512 [ 664.317685][ T443] lo speed is unknown, defaulting to 1000 [ 664.359570][ T467] loop0: detected capacity change from 0 to 2048 [ 664.367455][ T1851] bridge_slave_1: left allmulticast mode [ 664.393632][ T1851] bridge_slave_1: left promiscuous mode [ 664.404554][ T1851] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.437715][ T1851] bridge_slave_0: left allmulticast mode [ 664.446351][ T1851] bridge_slave_0: left promiscuous mode [ 664.462295][ T1851] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.469512][ T472] loop1: detected capacity change from 0 to 128 [ 664.531568][ T472] netlink: 'syz.1.5465': attribute type 1 has an invalid length. [ 664.658582][ T479] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5466'. [ 664.874494][ T1851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.884402][ T1851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.894598][ T1851] bond0 (unregistering): Released all slaves [ 664.902738][ T1851] bond1 (unregistering): Released all slaves [ 664.911744][ T1851] bond2 (unregistering): Released all slaves [ 664.930468][ T443] lo speed is unknown, defaulting to 1000 [ 664.945199][ T472] 8021q: adding VLAN 0 to HW filter on device bond5 [ 664.980060][ T23] syz1: Port: 1 Link DOWN [ 665.072609][ T505] syzkaller0: entered promiscuous mode [ 665.078188][ T505] syzkaller0: entered allmulticast mode [ 665.226033][ T517] loop8: detected capacity change from 0 to 512 [ 665.228537][ T1851] tipc: Left network mode [ 665.258305][ T443] chnl_net:caif_netlink_parms(): no params data found [ 665.281872][ T517] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 665.354563][ T517] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.5471: corrupted xattr entries [ 665.398246][ T517] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 665.399560][ T517] EXT4-fs (loop8): 1 orphan inode deleted [ 665.408832][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 665.408852][ C1] EXT4-fs (loop8): initial error at time 1773794197: xattr_find_entry:337: inode 15 [ 665.408885][ C1] EXT4-fs (loop8): last error at time 1773794197: xattr_find_entry:337: inode 15 [ 665.482530][ T517] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.545469][ T1851] hsr_slave_0: left promiscuous mode [ 665.545967][ T1851] hsr_slave_1: left promiscuous mode [ 665.546215][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 665.546276][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.553701][ T1851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 665.553716][ T1851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 665.570893][ T1851] veth1_macvtap: left promiscuous mode [ 665.570917][ T1851] veth0_macvtap: left promiscuous mode [ 665.571053][ T1851] veth1_vlan: left promiscuous mode [ 665.571145][ T1851] veth0_vlan: left promiscuous mode [ 665.713445][ T1851] team0 (unregistering): Port device team_slave_1 removed [ 665.716262][ T523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5472'. [ 665.730166][ T1851] team0 (unregistering): Port device team_slave_0 removed [ 665.765967][ T53] smc: removing ib device syU× [ 665.793655][ T547] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5475'. [ 665.797032][ T541] Falling back ldisc for ttyS3. [ 665.812937][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.822032][ T1034] lo speed is unknown, defaulting to 1000 [ 665.828421][ T1034] syU×: Port: 1 Link DOWN [ 665.853857][ T551] loop8: detected capacity change from 0 to 2048 [ 665.873590][ T3006] loop8: p1 p2 [ 665.918350][ T3006] loop8: p1 p2 [ 665.944188][ T558] netlink: 'syz.7.5478': attribute type 1 has an invalid length. [ 665.957507][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.965220][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.967713][ T551] loop8: p1 p2 [ 665.973297][ T443] bridge_slave_0: entered allmulticast mode [ 665.983004][ T443] bridge_slave_0: entered promiscuous mode [ 666.002174][ T561] syzkaller0: entered promiscuous mode [ 666.007710][ T561] syzkaller0: entered allmulticast mode [ 666.024244][ T558] 8021q: adding VLAN 0 to HW filter on device bond5 [ 666.034920][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.058711][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.066224][ T443] bridge_slave_1: entered allmulticast mode [ 666.066578][ T556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5477'. [ 666.073157][ T443] bridge_slave_1: entered promiscuous mode [ 666.179432][ T443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.222837][ T443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.289404][ T443] team0: Port device team_slave_0 added [ 666.330896][ T443] team0: Port device team_slave_1 added [ 666.352827][ T443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.359884][ T443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.404525][ T578] loop1: detected capacity change from 0 to 512 [ 666.485753][ T574] loop0: detected capacity change from 0 to 256 [ 666.697185][ T590] FAULT_INJECTION: forcing a failure. [ 666.697185][ T590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.737430][ T590] CPU: 0 UID: 0 PID: 590 Comm: syz.0.5486 Tainted: G W syzkaller #0 PREEMPT(full) [ 666.737466][ T590] Tainted: [W]=WARN [ 666.737539][ T590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 666.737602][ T590] Call Trace: [ 666.737610][ T590] [ 666.737619][ T590] __dump_stack+0x1d/0x30 [ 666.737652][ T590] dump_stack_lvl+0x95/0xd0 [ 666.737705][ T590] dump_stack+0x15/0x1b [ 666.737725][ T590] should_fail_ex+0x263/0x280 [ 666.737820][ T590] should_fail+0xb/0x20 [ 666.737845][ T590] should_fail_usercopy+0x1a/0x20 [ 666.737877][ T590] _copy_from_iter+0xcf/0xea0 [ 666.737915][ T590] ? __alloc_skb+0x4f6/0x690 [ 666.737941][ T590] ? __alloc_skb+0x200/0x690 [ 666.738007][ T590] netlink_sendmsg+0x4ae/0x6f0 [ 666.738048][ T590] ? __pfx_netlink_sendmsg+0x10/0x10 [ 666.738117][ T590] ____sys_sendmsg+0x563/0x5b0 [ 666.738149][ T590] ___sys_sendmsg+0x195/0x1e0 [ 666.738366][ T590] __x64_sys_sendmsg+0xd4/0x160 [ 666.738518][ T590] x64_sys_call+0x194c/0x3020 [ 666.738543][ T590] do_syscall_64+0x12c/0x370 [ 666.738623][ T590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.738697][ T590] RIP: 0033:0x7fd9fea8c799 [ 666.738716][ T590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.738734][ T590] RSP: 002b:00007fd9fd4e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.738753][ T590] RAX: ffffffffffffffda RBX: 00007fd9fed05fa0 RCX: 00007fd9fea8c799 [ 666.738820][ T590] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 666.738836][ T590] RBP: 00007fd9fd4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 666.738852][ T590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.738881][ T590] R13: 00007fd9fed06038 R14: 00007fd9fed05fa0 R15: 00007fff7d55c388 [ 666.738900][ T590] [ 666.802305][ T443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.946091][ T1851] IPVS: stop unused estimator thread 0... [ 666.963296][ T443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.970292][ T443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.001699][ T443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.066338][ T443] hsr_slave_0: entered promiscuous mode [ 667.082514][ T443] hsr_slave_1: entered promiscuous mode [ 667.142537][ T443] debugfs: 'hsr0' already exists in 'hsr' [ 667.153959][ T443] Cannot create hsr debugfs directory [ 667.154385][ T607] netlink: 'syz.7.5491': attribute type 1 has an invalid length. [ 667.206688][ T607] 8021q: adding VLAN 0 to HW filter on device bond6 [ 667.293218][ T627] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5492'. [ 667.323015][ T599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5488'. [ 667.360991][ T599] Falling back ldisc for ttyS3. [ 667.376252][ T635] syzkaller0: entered promiscuous mode [ 667.381761][ T635] syzkaller0: entered allmulticast mode [ 668.499305][ T666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5498'. [ 668.556833][ T666] loop1: detected capacity change from 0 to 512 [ 668.615424][ T443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 668.625319][ T673] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5501'. [ 668.681151][ T673] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5501'. [ 668.703466][ T443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 668.729096][ T443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 668.743069][ T443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.860060][ T697] can: request_module (can-proto-4) failed. [ 668.898516][ T443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.922329][ T443] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.932550][ T697] lo speed is unknown, defaulting to 1000 [ 668.934890][ T1684] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.945433][ T1684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.965470][ T704] syzkaller0: entered promiscuous mode [ 668.970996][ T704] syzkaller0: entered allmulticast mode [ 668.994959][ T1684] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.002224][ T1684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.159931][ T443] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.614893][ T714] Falling back ldisc for ttyS3. [ 669.716260][ T739] __nla_validate_parse: 11 callbacks suppressed [ 669.716279][ T739] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5511'. [ 669.771164][ T443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.780980][ T742] loop1: detected capacity change from 0 to 512 [ 669.903554][ T749] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5513'. [ 669.989690][ T756] rose0: tun_chr_ioctl cmd 2147767507 [ 670.001872][ T756] loop0: detected capacity change from 0 to 512 [ 670.010527][ T761] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5515'. [ 670.031904][ T761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5515'. [ 670.058636][ T443] veth0_vlan: entered promiscuous mode [ 670.098006][ T443] veth1_vlan: entered promiscuous mode [ 670.121138][ T776] can: request_module (can-proto-4) failed. [ 670.140989][ T776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5519'. [ 670.244631][ T783] loop1: detected capacity change from 0 to 512 [ 670.272158][ T443] veth0_macvtap: entered promiscuous mode [ 670.285763][ T443] veth1_macvtap: entered promiscuous mode [ 670.294883][ T784] lo speed is unknown, defaulting to 1000 [ 670.298628][ T443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.321667][ T443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.330985][ T785] loop8: detected capacity change from 0 to 256 [ 670.346075][ T785] FAT-fs (loop8): Directory bread(block 64) failed [ 670.352713][ T785] FAT-fs (loop8): Directory bread(block 65) failed [ 670.359253][ T785] FAT-fs (loop8): Directory bread(block 66) failed [ 670.365984][ T785] FAT-fs (loop8): Directory bread(block 67) failed [ 670.372693][ T785] FAT-fs (loop8): Directory bread(block 68) failed [ 670.379493][ T785] FAT-fs (loop8): Directory bread(block 69) failed [ 670.386132][ T785] FAT-fs (loop8): Directory bread(block 70) failed [ 670.392700][ T785] FAT-fs (loop8): Directory bread(block 71) failed [ 670.399343][ T785] FAT-fs (loop8): Directory bread(block 72) failed [ 670.405888][ T785] FAT-fs (loop8): Directory bread(block 73) failed [ 670.417515][ T785] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5520'. [ 670.441176][ T785] team0: Port device team_slave_0 removed [ 670.452379][ T1773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.461202][ T1773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.472504][ T791] netlink: 80 bytes leftover after parsing attributes in process `syz.8.5520'. [ 670.495615][ T1773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.506373][ T1773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.606227][ T808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5521'. [ 670.634849][ T808] loop2: detected capacity change from 0 to 512 [ 670.649028][ T808] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 670.686157][ T814] can: request_module (can-proto-4) failed. [ 670.706565][ T814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5523'. [ 670.732511][ T808] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5521: corrupted xattr entries [ 670.756659][ T808] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 670.756993][ T808] EXT4-fs (loop2): 1 orphan inode deleted [ 670.766192][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 670.766215][ C0] EXT4-fs (loop2): initial error at time 1773794203: xattr_find_entry:337: inode 15 [ 670.766282][ C0] EXT4-fs (loop2): last error at time 1773794203: xattr_find_entry:337: inode 15 [ 670.811063][ T814] lo speed is unknown, defaulting to 1000 [ 670.862569][ T808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.911543][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.967787][ T28] audit: type=1400 audit(1773794203.442:1336): avc: denied { write } for pid=831 comm="syz.2.5524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 671.314433][ T861] rose0: tun_chr_ioctl cmd 2147767507 [ 671.321805][ T834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5525'. [ 671.335870][ T861] loop8: detected capacity change from 0 to 512 [ 671.369033][ T861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 671.387386][ T834] Falling back ldisc for ttyS3. [ 671.393319][ T861] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.462197][ T28] audit: type=1400 audit(1773794203.932:1337): avc: denied { ioctl } for pid=875 comm="syz.7.5530" path="socket:[111488]" dev="sockfs" ino=111488 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 671.569267][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.769959][ T1773] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.046960][ T28] audit: type=1400 audit(1773794204.522:1338): avc: denied { setopt } for pid=902 comm="syz.1.5537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 672.244439][ T28] audit: type=1400 audit(1773794204.522:1339): avc: denied { listen } for pid=902 comm="syz.1.5537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 672.265087][ T28] audit: type=1326 audit(1773794204.552:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe497e2c799 code=0x7ffc0000 [ 672.288986][ T28] audit: type=1326 audit(1773794204.552:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe497e2c799 code=0x7ffc0000 [ 672.331264][ T28] audit: type=1326 audit(1773794204.552:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe497e2c799 code=0x7ffc0000 [ 672.392133][ T28] audit: type=1326 audit(1773794204.552:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe497e2c799 code=0x7ffc0000 [ 672.443181][ T905] loop1: detected capacity change from 0 to 8192 [ 672.515281][ T28] audit: type=1326 audit(1773794204.562:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe497e2c799 code=0x7ffc0000 [ 672.641434][ T28] audit: type=1326 audit(1773794204.562:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=902 comm="syz.1.5537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe497e2c799 code=0x7ffc0000 [ 673.019758][ T958] rose0: tun_chr_ioctl cmd 2147767507 [ 673.034376][ T958] loop2: detected capacity change from 0 to 512 [ 673.123142][T19631] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 673.134291][T19631] CPU: 0 UID: 0 PID: 19631 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 673.134333][T19631] Tainted: [W]=WARN [ 673.134340][T19631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.134353][T19631] Call Trace: [ 673.134360][T19631] [ 673.134369][T19631] __dump_stack+0x1d/0x30 [ 673.134451][T19631] dump_stack_lvl+0x95/0xd0 [ 673.134494][T19631] dump_stack+0x15/0x1b [ 673.134515][T19631] dump_header+0x80/0x240 [ 673.134538][T19631] oom_kill_process+0x295/0x350 [ 673.134562][T19631] out_of_memory+0x97d/0xb80 [ 673.134650][T19631] try_charge_memcg+0x62e/0xa10 [ 673.134734][T19631] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 673.134767][T19631] __swap_cache_prepare_and_add+0x386/0x530 [ 673.134877][T19631] swap_cache_alloc_folio+0xa2/0x120 [ 673.134913][T19631] swap_cluster_readahead+0x26e/0x3d0 [ 673.134945][T19631] swapin_readahead+0xde/0x840 [ 673.134972][T19631] ? __rcu_read_unlock+0x4e/0x70 [ 673.135016][T19631] ? __perf_event_task_sched_in+0xa65/0xad0 [ 673.135038][T19631] ? __list_add_valid_or_report+0x38/0xe0 [ 673.135069][T19631] ? xfd_validate_state+0x45/0xf0 [ 673.135153][T19631] ? __rcu_read_unlock+0x4e/0x70 [ 673.135173][T19631] ? swap_cache_get_folio+0x26f/0x280 [ 673.135201][T19631] do_swap_page+0x30d/0x2220 [ 673.135251][T19631] ? __schedule+0x93c/0xd40 [ 673.135276][T19631] ? __rcu_read_lock+0x36/0x50 [ 673.135345][T19631] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 673.135374][T19631] handle_mm_fault+0xb46/0x3020 [ 673.135404][T19631] ? vma_start_read+0x1c7/0x2c0 [ 673.135430][T19631] do_user_addr_fault+0x62f/0x1050 [ 673.135517][T19631] ? trace_page_fault_user+0x1f/0xe0 [ 673.135609][T19631] exc_page_fault+0x62/0xa0 [ 673.135653][T19631] asm_exc_page_fault+0x26/0x30 [ 673.135673][T19631] RIP: 0033:0x7f4e64ea7917 [ 673.135689][T19631] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 673.135705][T19631] RSP: 002b:00007ffc57fdb190 EFLAGS: 00010202 [ 673.135721][T19631] RAX: 0000000000000000 RBX: 000055555bed1500 RCX: 00007f4e64ea7917 [ 673.135761][T19631] RDX: 00007ffc57fdb1d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.135774][T19631] RBP: 00007ffc57fdb23c R08: 0000000000000000 R09: 0000000000000000 [ 673.135788][T19631] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 673.135801][T19631] R13: 00000000000927c0 R14: 00000000000a44d7 R15: 00007ffc57fdb290 [ 673.135892][T19631] [ 673.135928][T19631] memory: usage 301164kB, limit 307200kB, failcnt 1907 [ 673.391078][ T958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.404523][ T958] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.505152][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.531128][ T953] loop1: detected capacity change from 0 to 2048 [ 673.594530][T19631] memory+swap: usage 182344kB, limit 9007199254740988kB, failcnt 0 [ 673.673138][T19631] kmem: usage 179704kB, limit 9007199254740988kB, failcnt 0 [ 673.673157][T19631] Memory cgroup stats for /syz8: [ 673.673365][T19631] cache 0 [ 673.673375][T19631] rss 0 [ 673.673382][T19631] shmem 0 [ 673.673390][T19631] mapped_file 0 [ 673.673399][T19631] dirty 0 [ 673.673413][T19631] writeback 0 [ 673.673421][T19631] workingset_refault_anon 621 [ 673.673431][T19631] workingset_refault_file 0 [ 673.673492][T19631] swap 2375680 [ 673.673500][T19631] swapcached 41168896 [ 673.673509][T19631] pgpgin 191823 [ 673.673517][T19631] pgpgout 191813 [ 673.673525][T19631] pgfault 211125 [ 673.673534][T19631] pgmajfault 1170 [ 673.673542][T19631] inactive_anon 0 [ 673.673568][T19631] active_anon 8192 [ 673.673576][T19631] inactive_file 0 [ 673.673584][T19631] active_file 32768 [ 673.673609][T19631] unevictable 0 [ 673.673618][T19631] hierarchical_memory_limit 314572800 [ 673.673628][T19631] hierarchical_memsw_limit 9223372036854771712 [ 673.673638][T19631] total_cache 0 [ 673.673646][T19631] total_rss 0 [ 673.673717][T19631] total_shmem 0 [ 673.673725][T19631] total_mapped_file 0 [ 673.673734][T19631] total_dirty 0 [ 673.673742][T19631] total_writeback 0 [ 673.673811][T19631] total_workingset_refault_anon 621 [ 673.673821][T19631] total_workingset_refault_file 0 [ 673.673830][T19631] total_swap 2375680 [ 673.673839][T19631] total_swapcached 41168896 [ 673.673848][T19631] total_pgpgin 191823 [ 673.673857][T19631] total_pgpgout 191813 [ 673.673866][T19631] total_pgfault 211125 [ 673.673874][T19631] total_pgmajfault 1170 [ 673.673893][T19631] total_inactive_anon 0 [ 673.673903][T19631] total_active_anon 8192 [ 673.673911][T19631] total_inactive_file 0 [ 673.673919][T19631] total_active_file 32768 [ 673.673927][T19631] total_unevictable 0 [ 673.673935][T19631] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.5542,pid=935,uid=0 [ 673.674038][T19631] Memory cgroup out of memory: Killed process 935 (syz.8.5542) total-vm:96212kB, anon-rss:1224kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 673.829208][T30333] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 674.493896][ T1013] netlink: 'syz.7.5552': attribute type 1 has an invalid length. [ 674.520483][ T1013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 674.888500][ T1054] loop0: detected capacity change from 0 to 512 [ 674.904446][ T1057] __nla_validate_parse: 4 callbacks suppressed [ 674.904460][ T1057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5555'. [ 675.334179][ T1077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5558'. [ 675.401505][ T1071] can: request_module (can-proto-4) failed. [ 675.423012][ T1071] lo speed is unknown, defaulting to 1000 [ 675.502723][ T1065] loop0: detected capacity change from 0 to 8192 [ 675.762781][ T1087] syzkaller0: entered promiscuous mode [ 675.762800][ T1087] syzkaller0: entered allmulticast mode [ 676.279767][ T1094] loop1: detected capacity change from 0 to 512 [ 676.465550][ T1054] syz.0.5556 (1054) used greatest stack depth: 7072 bytes left [ 676.571864][ T1100] loop0: detected capacity change from 0 to 512 [ 676.631372][ T1106] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5568'. [ 676.745374][ T1116] loop0: detected capacity change from 0 to 128 [ 676.775496][ T1114] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5572'. [ 676.788884][ T1116] netlink: 'syz.0.5573': attribute type 1 has an invalid length. [ 676.870955][ T1116] 8021q: adding VLAN 0 to HW filter on device bond4 [ 677.458493][ T1114] bridge7: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 677.649071][ T1114] bridge7: entered promiscuous mode [ 678.022456][ T1114] bridge7: entered allmulticast mode [ 678.447916][ T1139] rose0: tun_chr_ioctl cmd 2147767507 [ 678.492850][ T1145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5582'. [ 678.525479][ T1147] loop0: detected capacity change from 0 to 512 [ 678.626598][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 678.626615][ T28] audit: type=1400 audit(1773794211.102:1415): avc: denied { ioctl } for pid=1142 comm="syz.7.5581" path="socket:[112536]" dev="sockfs" ino=112536 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 678.723190][ T1153] loop2: detected capacity change from 0 to 2048 [ 678.748036][ T1159] loop1: detected capacity change from 0 to 1024 [ 678.803277][ T1161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5587'. [ 678.812551][ T3302] loop2: p1 p2 [ 678.832829][ T1161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5587'. [ 678.844224][ T1153] loop2: p1 p2 [ 678.909885][ T1161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5587'. [ 678.919767][ T1161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5587'. [ 679.548149][ T1161] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5587'. [ 679.654602][ T1195] rose0: tun_chr_ioctl cmd 2147767507 [ 679.687125][ T1195] loop8: detected capacity change from 0 to 512 [ 679.750534][ T1195] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.805409][ T1195] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.882282][ T1203] loop0: detected capacity change from 0 to 1024 [ 679.909393][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.045083][ T1215] __nla_validate_parse: 1 callbacks suppressed [ 680.045099][ T1215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5602'. [ 680.229647][ T1232] loop2: detected capacity change from 0 to 512 [ 680.273220][ T1232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 680.311730][ T1232] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5606: corrupted xattr entries [ 680.372707][ T1232] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 680.382140][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 680.398671][ C0] EXT4-fs (loop2): initial error at time 1773794212: xattr_find_entry:337: inode 15 [ 680.408849][ C0] EXT4-fs (loop2): last error at time 1773794212: xattr_find_entry:337: inode 15 [ 680.770292][ T1232] EXT4-fs (loop2): 1 orphan inode deleted [ 680.784338][ T1232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.830798][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.059636][ T1244] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5609'. [ 681.104020][ T1256] loop8: detected capacity change from 0 to 1024 [ 681.114898][ T1244] Falling back ldisc for ttyS3. [ 681.493320][ T1256] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.550135][ T1272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5614'. [ 681.596760][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.696641][ T1285] syzkaller0: entered promiscuous mode [ 681.702263][ T1285] syzkaller0: entered allmulticast mode [ 681.726110][ T1287] FAULT_INJECTION: forcing a failure. [ 681.726110][ T1287] name failslab, interval 1, probability 0, space 0, times 0 [ 681.784077][ T1291] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5620'. [ 681.862282][ T1287] CPU: 0 UID: 0 PID: 1287 Comm: syz.0.5619 Tainted: G W syzkaller #0 PREEMPT(full) [ 681.862327][ T1287] Tainted: [W]=WARN [ 681.862335][ T1287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.862349][ T1287] Call Trace: [ 681.862356][ T1287] [ 681.862365][ T1287] __dump_stack+0x1d/0x30 [ 681.862391][ T1287] dump_stack_lvl+0x95/0xd0 [ 681.862483][ T1287] dump_stack+0x15/0x1b [ 681.862518][ T1287] should_fail_ex+0x263/0x280 [ 681.862564][ T1287] ? cgroup_pidlist_start+0x463/0x830 [ 681.862589][ T1287] should_failslab+0x8c/0xb0 [ 681.862614][ T1287] __kmalloc_cache_noprof+0x5f/0x410 [ 681.862707][ T1287] cgroup_pidlist_start+0x463/0x830 [ 681.862736][ T1287] cgroup_seqfile_start+0x58/0x70 [ 681.862767][ T1287] kernfs_seq_start+0xb4/0x170 [ 681.862787][ T1287] traverse+0xf4/0x3a0 [ 681.862864][ T1287] seq_read_iter+0x85f/0x940 [ 681.862897][ T1287] ? _parse_integer+0x27/0x40 [ 681.862923][ T1287] kernfs_fop_read_iter+0xc1/0x330 [ 681.863049][ T1287] ? avc_policy_seqno+0x15/0x30 [ 681.863123][ T1287] ? selinux_file_permission+0x1f2/0x690 [ 681.863151][ T1287] do_iter_readv_writev+0x4fd/0x5a0 [ 681.863178][ T1287] vfs_readv+0x1f4/0x6e0 [ 681.863232][ T1287] __x64_sys_preadv+0xfd/0x1c0 [ 681.863255][ T1287] x64_sys_call+0x2915/0x3020 [ 681.863326][ T1287] do_syscall_64+0x12c/0x370 [ 681.863403][ T1287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.863466][ T1287] RIP: 0033:0x7fd9fea8c799 [ 681.863484][ T1287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.863507][ T1287] RSP: 002b:00007fd9fd4e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 681.863529][ T1287] RAX: ffffffffffffffda RBX: 00007fd9fed05fa0 RCX: 00007fd9fea8c799 [ 681.863543][ T1287] RDX: 0000000000000001 RSI: 0000200000001b00 RDI: 0000000000000005 [ 681.863568][ T1287] RBP: 00007fd9fd4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 681.863581][ T1287] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 681.863593][ T1287] R13: 00007fd9fed06038 R14: 00007fd9fed05fa0 R15: 00007fff7d55c388 [ 681.863682][ T1287] [ 681.879450][ T1301] syzkaller0: entered promiscuous mode [ 682.077994][ T1307] loop8: detected capacity change from 0 to 1024 [ 682.083301][ T1301] syzkaller0: entered allmulticast mode [ 682.163101][ T1307] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.334363][ T1316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5630'. [ 682.359117][ T1293] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5622'. [ 682.402564][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.432349][ T1320] loop1: detected capacity change from 0 to 2048 [ 682.487379][ T1325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 682.498707][ T1321] loop0: detected capacity change from 0 to 2048 [ 682.512486][ T1325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.624658][ T1327] netlink: 272 bytes leftover after parsing attributes in process `syz.7.5634'. [ 683.019598][ T1320] loop1: p1 p2 [ 683.044430][ T3302] loop0: p1 p2 [ 683.064021][ T1321] loop0: p1 p2 [ 683.348517][ T1336] rose0: tun_chr_ioctl cmd 2147767507 [ 683.428128][ T1338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5635'. [ 683.942368][ T767] Bluetooth: hci0: Frame reassembly failed (-84) [ 683.949097][ T767] Bluetooth: hci0: Frame reassembly failed (-84) [ 684.073020][ T1358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5643'. [ 685.561480][ T1396] loop1: detected capacity change from 0 to 2048 [ 685.652885][ T3302] loop1: p1 p2 [ 685.745254][ T1407] loop8: detected capacity change from 0 to 512 [ 685.755879][ T1396] loop1: p1 p2 [ 685.762482][ T1407] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 685.807360][ T1407] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.5654: corrupted xattr entries [ 685.847405][ T1407] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 685.852107][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 685.867770][ C0] EXT4-fs (loop8): initial error at time 1773794218: xattr_find_entry:337: inode 15 [ 685.877178][ C0] EXT4-fs (loop8): last error at time 1773794218: xattr_find_entry:337: inode 15 [ 685.904545][ T1407] EXT4-fs (loop8): 1 orphan inode deleted [ 685.924512][ T1407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.972190][ T4670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 686.042304][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.241637][ T1423] syzkaller0: entered promiscuous mode [ 686.248990][ T1423] syzkaller0: entered allmulticast mode [ 687.202627][ T1429] syzkaller0: entered promiscuous mode [ 687.232286][ T1429] syzkaller0: entered allmulticast mode [ 687.239015][ T1434] loop8: detected capacity change from 0 to 2048 [ 687.325062][ T1432] loop2: detected capacity change from 0 to 8192 [ 687.352875][ T1432] loop2: p1 < > p2 p4 < p5 > [ 687.353359][ T3006] loop8: p1 p2 [ 687.357835][ T1432] loop2: partition table partially beyond EOD, truncated [ 687.368635][ T1432] loop2: p1 start 134217728 is beyond EOD, truncated [ 687.375475][ T1432] loop2: p2 size 591360 extends beyond EOD, truncated [ 687.383489][ T3006] loop8: p1 p2 [ 687.397720][ T1434] loop8: p1 p2 [ 687.402742][ T1432] loop2: p5 size 591360 extends beyond EOD, truncated [ 687.585937][ T28] audit: type=1400 audit(1773794220.052:1416): avc: denied { read } for pid=1431 comm="syz.2.5660" lport=5717 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 687.788872][ T3006] loop2: p1 < > p2 p4 < p5 > [ 687.795202][ T3006] loop2: partition table partially beyond EOD, truncated [ 687.802511][ T3006] loop2: p1 start 134217728 is beyond EOD, truncated [ 687.809278][ T3006] loop2: p2 size 591360 extends beyond EOD, truncated [ 687.822850][ T3006] loop2: p5 size 591360 extends beyond EOD, truncated [ 687.864505][ T3006] loop8: p1 p2 [ 687.921759][ T1447] lo speed is unknown, defaulting to 1000 [ 688.001970][ T1455] loop0: detected capacity change from 0 to 512 [ 688.028483][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 688.029474][T20812] udevd[20812]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 688.061398][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 688.118471][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 688.134559][ T8502] udevd[8502]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 688.141963][T20812] udevd[20812]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 688.615464][ T1481] loop8: detected capacity change from 0 to 128 [ 688.697430][ T1481] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 688.749950][ T1481] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 688.863670][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 689.160869][ T1500] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5676'. [ 689.216576][ T1498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5675'. [ 689.290481][ T1500] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5676'. [ 689.324466][ T1502] loop2: detected capacity change from 0 to 512 [ 689.375559][ T1502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 689.386446][ T1500] netlink: 176 bytes leftover after parsing attributes in process `syz.8.5676'. [ 689.396543][ T1502] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5677: corrupted xattr entries [ 689.422122][ T1502] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 689.424049][ T1502] EXT4-fs (loop2): 1 orphan inode deleted [ 689.433234][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 689.433257][ C0] EXT4-fs (loop2): initial error at time 1773794221: xattr_find_entry:337: inode 15 [ 689.433291][ C0] EXT4-fs (loop2): last error at time 1773794221: xattr_find_entry:337: inode 15 [ 689.465669][ T1502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.599213][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.067033][ T1513] FAULT_INJECTION: forcing a failure. [ 690.067033][ T1513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.080146][ T1513] CPU: 0 UID: 0 PID: 1513 Comm: syz.8.5678 Tainted: G W syzkaller #0 PREEMPT(full) [ 690.080181][ T1513] Tainted: [W]=WARN [ 690.080190][ T1513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.080205][ T1513] Call Trace: [ 690.080214][ T1513] [ 690.080221][ T1513] __dump_stack+0x1d/0x30 [ 690.080249][ T1513] dump_stack_lvl+0x95/0xd0 [ 690.080270][ T1513] dump_stack+0x15/0x1b [ 690.080289][ T1513] should_fail_ex+0x263/0x280 [ 690.080366][ T1513] should_fail+0xb/0x20 [ 690.080387][ T1513] should_fail_usercopy+0x1a/0x20 [ 690.080412][ T1513] _copy_from_user+0x1c/0xb0 [ 690.080480][ T1513] sk_setsockopt+0x1fa/0x2140 [ 690.080556][ T1513] sock_setsockopt+0x40/0x50 [ 690.080587][ T1513] __sys_setsockopt+0x13a/0x200 [ 690.080648][ T1513] __x64_sys_setsockopt+0x64/0x80 [ 690.080676][ T1513] x64_sys_call+0x2327/0x3020 [ 690.080706][ T1513] do_syscall_64+0x12c/0x370 [ 690.080809][ T1513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.080834][ T1513] RIP: 0033:0x7f4e64eec799 [ 690.080853][ T1513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.080946][ T1513] RSP: 002b:00007f4e638fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 690.080968][ T1513] RAX: ffffffffffffffda RBX: 00007f4e65166180 RCX: 00007f4e64eec799 [ 690.080985][ T1513] RDX: 0000000000000044 RSI: 0000000000000001 RDI: 0000000000000007 [ 690.080999][ T1513] RBP: 00007f4e638fd090 R08: 0000000000000004 R09: 0000000000000000 [ 690.081076][ T1513] R10: 0000200000009000 R11: 0000000000000246 R12: 0000000000000001 [ 690.081091][ T1513] R13: 00007f4e65166218 R14: 00007f4e65166180 R15: 00007ffc57fdae98 [ 690.081112][ T1513] [ 692.032751][ T1773] Bluetooth: hci0: Frame reassembly failed (-84) [ 692.090202][ T1562] loop0: detected capacity change from 0 to 512 [ 692.164326][ T1560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5689'. [ 692.869812][ T1579] loop2: detected capacity change from 0 to 512 [ 693.029585][ T1579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.569667][ T1579] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.707557][ T1579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5695'. [ 693.772184][ T1579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5695'. [ 693.830907][ T1579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5695'. [ 693.860230][ T1579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5695'. [ 693.900755][ T1579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5695'. [ 694.003337][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.052145][T31044] Bluetooth: hci0: command 0x1003 tx timeout [ 694.052206][T30333] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 694.160076][ T1602] loop2: detected capacity change from 0 to 512 [ 694.180363][ T1602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 694.202915][ T1602] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5701: corrupted xattr entries [ 694.214998][ T1602] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 694.215242][ T1602] EXT4-fs (loop2): 1 orphan inode deleted [ 694.224460][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 694.224483][ C1] EXT4-fs (loop2): initial error at time 1773794226: xattr_find_entry:337: inode 15 [ 694.224526][ C1] EXT4-fs (loop2): last error at time 1773794226: xattr_find_entry:337: inode 15 [ 694.258236][ T1607] __nla_validate_parse: 1 callbacks suppressed [ 694.258255][ T1607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5702'. [ 694.277315][ T1602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.300983][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.424051][ T1615] loop2: detected capacity change from 0 to 512 [ 694.431088][ T1615] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 694.505504][ T1618] loop1: detected capacity change from 0 to 128 [ 694.512516][ T1615] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5703: corrupted xattr entries [ 694.525980][ T1618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5706'. [ 694.541520][ T1615] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 694.541725][ T1615] EXT4-fs (loop2): 1 orphan inode deleted [ 694.550910][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 694.550925][ C0] EXT4-fs (loop2): initial error at time 1773794227: xattr_find_entry:337: inode 15 [ 694.550968][ C0] EXT4-fs (loop2): last error at time 1773794227: xattr_find_entry:337: inode 15 [ 694.652626][ T1615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 694.818399][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 695.970790][T30333] Bluetooth: hci1: command 0x1003 tx timeout [ 696.412118][ T4670] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 696.567693][ T1641] loop1: detected capacity change from 0 to 512 [ 696.581203][ T1643] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5714'. [ 696.749789][ T1647] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5715'. [ 697.232182][ T1773] Bluetooth: hci0: Frame reassembly failed (-84) [ 697.242148][ T1773] Bluetooth: hci0: Frame reassembly failed (-84) [ 697.269615][ T1646] loop0: detected capacity change from 0 to 1764 [ 697.720527][ T28] audit: type=1400 audit(1773794230.192:1417): avc: denied { mounton } for pid=1644 comm="syz.0.5716" path="/198/file1/file0" dev="loop0" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 697.788176][ T1671] loop2: detected capacity change from 0 to 2048 [ 697.947642][ T1671] loop2: p1 p2 [ 697.954498][ T3006] loop2: p1 p2 [ 698.892471][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5725'. [ 698.901471][ T1690] FAULT_INJECTION: forcing a failure. [ 698.901471][ T1690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.920475][ T1690] CPU: 0 UID: 0 PID: 1690 Comm: syz.7.5726 Tainted: G W syzkaller #0 PREEMPT(full) [ 698.920513][ T1690] Tainted: [W]=WARN [ 698.920521][ T1690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.920576][ T1690] Call Trace: [ 698.920584][ T1690] [ 698.920593][ T1690] __dump_stack+0x1d/0x30 [ 698.920635][ T1690] dump_stack_lvl+0x95/0xd0 [ 698.920657][ T1690] dump_stack+0x15/0x1b [ 698.920749][ T1690] should_fail_ex+0x263/0x280 [ 698.920780][ T1690] should_fail+0xb/0x20 [ 698.920806][ T1690] should_fail_usercopy+0x1a/0x20 [ 698.920877][ T1690] strncpy_from_user+0x27/0x250 [ 698.920901][ T1690] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 698.920994][ T1690] do_getname+0x59/0x1c0 [ 698.921018][ T1690] user_path_at+0x28/0x100 [ 698.921052][ T1690] __se_sys_quotactl+0xaf/0x660 [ 698.921156][ T1690] ? fput+0x8f/0xc0 [ 698.921187][ T1690] __x64_sys_quotactl+0x55/0x70 [ 698.921213][ T1690] x64_sys_call+0x1a2a/0x3020 [ 698.921240][ T1690] do_syscall_64+0x12c/0x370 [ 698.921296][ T1690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.921322][ T1690] RIP: 0033:0x7fd13399c799 [ 698.921340][ T1690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.921359][ T1690] RSP: 002b:00007fd1323ef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 698.921385][ T1690] RAX: ffffffffffffffda RBX: 00007fd133c15fa0 RCX: 00007fd13399c799 [ 698.921398][ T1690] RDX: ffffffffffffffff RSI: 0000200000000200 RDI: ffffffff80000201 [ 698.921426][ T1690] RBP: 00007fd1323ef090 R08: 0000000000000000 R09: 0000000000000000 [ 698.921442][ T1690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.921457][ T1690] R13: 00007fd133c16038 R14: 00007fd133c15fa0 R15: 00007ffe71ff7148 [ 698.921480][ T1690] [ 699.130837][ T1692] can: request_module (can-proto-4) failed. [ 699.137767][ T1692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5727'. [ 699.157566][ T1692] usb usb7: usbfs: process 1692 (syz.0.5727) did not claim interface 0 before use [ 699.179943][ T1692] lo speed is unknown, defaulting to 1000 [ 699.258031][T30333] Bluetooth: hci0: command 0x1003 tx timeout [ 699.264060][ T4670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 699.338647][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5729'. [ 699.490174][ T1712] lo speed is unknown, defaulting to 1000 [ 699.526465][ T1714] tmpfs: Bad value for 'mpol' [ 699.565990][ T1718] loop8: detected capacity change from 0 to 128 [ 699.600023][ T1718] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 699.600206][ T1718] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.615831][ T1718] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5737'. [ 699.643497][ T1722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5738'. [ 699.646479][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 699.718033][ T1726] loop8: detected capacity change from 0 to 2048 [ 699.754698][ T3302] loop8: p1 p2 [ 699.766699][ T1726] loop8: p1 p2 [ 699.797636][ T1730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5741'. [ 699.797966][ T3006] loop8: p1 p2 [ 699.841926][ T1728] can: request_module (can-proto-4) failed. [ 699.895890][ T1728] usb usb7: usbfs: process 1728 (syz.7.5741) did not claim interface 0 before use [ 699.915702][ T1728] lo speed is unknown, defaulting to 1000 [ 699.980603][ T1736] FAULT_INJECTION: forcing a failure. [ 699.980603][ T1736] name failslab, interval 1, probability 0, space 0, times 0 [ 700.012152][ T1736] CPU: 0 UID: 0 PID: 1736 Comm: syz.2.5743 Tainted: G W syzkaller #0 PREEMPT(full) [ 700.012191][ T1736] Tainted: [W]=WARN [ 700.012274][ T1736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.012286][ T1736] Call Trace: [ 700.012292][ T1736] [ 700.012300][ T1736] __dump_stack+0x1d/0x30 [ 700.012330][ T1736] dump_stack_lvl+0x95/0xd0 [ 700.012390][ T1736] dump_stack+0x15/0x1b [ 700.012422][ T1736] should_fail_ex+0x263/0x280 [ 700.012448][ T1736] should_failslab+0x8c/0xb0 [ 700.012468][ T1736] __kmalloc_noprof+0xb8/0x4e0 [ 700.012525][ T1736] ? bpf_test_init+0x86/0x130 [ 700.012631][ T1736] bpf_test_init+0x86/0x130 [ 700.012766][ T1736] bpf_prog_test_run_xdp+0x306/0xa10 [ 700.012803][ T1736] ? __rcu_read_unlock+0x4e/0x70 [ 700.012830][ T1736] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 700.012925][ T1736] bpf_prog_test_run+0x204/0x340 [ 700.012953][ T1736] __sys_bpf+0x52e/0x7e0 [ 700.012979][ T1736] __x64_sys_bpf+0x41/0x50 [ 700.013071][ T1736] x64_sys_call+0x10cb/0x3020 [ 700.013176][ T1736] do_syscall_64+0x12c/0x370 [ 700.013201][ T1736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.013294][ T1736] RIP: 0033:0x7f0cbd2dc799 [ 700.013309][ T1736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.013388][ T1736] RSP: 002b:00007f0cbbd2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 700.013408][ T1736] RAX: ffffffffffffffda RBX: 00007f0cbd555fa0 RCX: 00007f0cbd2dc799 [ 700.013423][ T1736] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 700.013501][ T1736] RBP: 00007f0cbbd2f090 R08: 0000000000000000 R09: 0000000000000000 [ 700.013570][ T1736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.013586][ T1736] R13: 00007f0cbd556038 R14: 00007f0cbd555fa0 R15: 00007ffc25b7e3e8 [ 700.013609][ T1736] [ 700.396133][ T1744] loop2: detected capacity change from 0 to 512 [ 700.403396][ T1744] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 700.414601][ T1744] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5745: corrupted xattr entries [ 700.434662][ T1744] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 700.434989][ T1744] EXT4-fs (loop2): 1 orphan inode deleted [ 700.444161][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 700.444194][ C0] EXT4-fs (loop2): initial error at time 1773794232: xattr_find_entry:337: inode 15 [ 700.444221][ C0] EXT4-fs (loop2): last error at time 1773794232: xattr_find_entry:337: inode 15 [ 700.478699][ T1744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 700.494023][ T1747] syzkaller0: entered promiscuous mode [ 700.500542][ T1747] syzkaller0: entered allmulticast mode [ 700.518536][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.786684][ T1752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5747'. [ 700.816466][ T1752] Falling back ldisc for ttyS3. [ 700.859235][ T1758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5750'. [ 701.125945][ T1760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5751'. [ 701.149119][ T1760] Falling back ldisc for ttyS3. [ 701.149676][ T767] Bluetooth: hci1: Frame reassembly failed (-84) [ 701.468877][ T1782] loop2: detected capacity change from 0 to 512 [ 701.477642][ T1779] can: request_module (can-proto-4) failed. [ 701.484953][ T1782] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 701.501472][ T1783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5756'. [ 701.540176][ T1782] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5757: corrupted xattr entries [ 701.563374][ T1779] usb usb7: usbfs: process 1779 (syz.1.5756) did not claim interface 0 before use [ 701.578283][ T1782] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 701.582183][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 701.597795][ C1] EXT4-fs (loop2): initial error at time 1773794234: xattr_find_entry:337: inode 15 [ 701.607237][ C1] EXT4-fs (loop2): last error at time 1773794234: xattr_find_entry:337: inode 15 [ 701.616932][ T1782] EXT4-fs (loop2): 1 orphan inode deleted [ 701.619037][ T1779] lo speed is unknown, defaulting to 1000 [ 701.623488][ T1782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 701.654048][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.797576][ T1773] Bluetooth: hci2: Frame reassembly failed (-84) [ 701.848427][ T1798] loop2: detected capacity change from 0 to 164 [ 701.974333][ T1804] FAULT_INJECTION: forcing a failure. [ 701.974333][ T1804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.987836][ T1804] CPU: 0 UID: 0 PID: 1804 Comm: syz.2.5765 Tainted: G W syzkaller #0 PREEMPT(full) [ 701.987869][ T1804] Tainted: [W]=WARN [ 701.987876][ T1804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 701.987889][ T1804] Call Trace: [ 701.987895][ T1804] [ 701.987901][ T1804] __dump_stack+0x1d/0x30 [ 701.987944][ T1804] dump_stack_lvl+0x95/0xd0 [ 701.987980][ T1804] dump_stack+0x15/0x1b [ 701.988020][ T1804] should_fail_ex+0x263/0x280 [ 701.988036][ T1804] should_fail+0xb/0x20 [ 701.988067][ T1804] should_fail_usercopy+0x1a/0x20 [ 701.988122][ T1804] strncpy_from_user+0x27/0x250 [ 701.988179][ T1804] ? __kmalloc_cache_noprof+0x18a/0x410 [ 701.988195][ T1804] __se_sys_memfd_create+0x20f/0x3b0 [ 701.988283][ T1804] __x64_sys_memfd_create+0x31/0x40 [ 701.988326][ T1804] x64_sys_call+0x1f22/0x3020 [ 701.988343][ T1804] do_syscall_64+0x12c/0x370 [ 701.988357][ T1804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.988370][ T1804] RIP: 0033:0x7f0cbd2dc799 [ 701.988449][ T1804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.988460][ T1804] RSP: 002b:00007f0cbbd2ed58 EFLAGS: 00000206 ORIG_RAX: 000000000000013f [ 701.988472][ T1804] RAX: ffffffffffffffda RBX: 0000000000001057 RCX: 00007f0cbd2dc799 [ 701.988481][ T1804] RDX: 00007f0cbbd2eddc RSI: 0000000000000000 RDI: 00007f0cbd372e79 [ 701.988489][ T1804] RBP: 0000200000001080 R08: 00000000ffffffff R09: 0000000000000000 [ 701.988497][ T1804] R10: 0000000000000001 R11: 0000000000000206 R12: 0000000000000001 [ 701.988505][ T1804] R13: 00007f0cbbd2eddc R14: 00007f0cbbd2ede0 R15: 00007ffc25b7e3e8 [ 701.988576][ T1804] [ 702.165522][ T1807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5766'. [ 702.285314][ T1807] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 702.705289][ T4670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 702.809672][ T1811] loop8: detected capacity change from 0 to 164 [ 702.833494][ T1813] loop2: detected capacity change from 0 to 512 [ 702.862843][ T1813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 702.903204][ T1815] can: request_module (can-proto-4) failed. [ 702.910294][ T1815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5769'. [ 702.923094][ T1813] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.5768: corrupted xattr entries [ 702.942857][ T1815] usb usb7: usbfs: process 1815 (syz.8.5769) did not claim interface 0 before use [ 702.957677][ T1813] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.958082][ T1813] EXT4-fs (loop2): 1 orphan inode deleted [ 702.967248][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 702.967265][ C0] EXT4-fs (loop2): initial error at time 1773794235: xattr_find_entry:337: inode 15 [ 702.967318][ C0] EXT4-fs (loop2): last error at time 1773794235: xattr_find_entry:337: inode 15 [ 703.009907][ T1819] lo speed is unknown, defaulting to 1000 [ 703.044190][ T1813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.088788][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.172146][T30333] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 703.257499][ T1829] loop0: detected capacity change from 0 to 2048 [ 703.352514][ T3302] loop0: p1 p2 [ 703.670238][ T1829] loop0: p1 p2 [ 703.790001][ T2237] Bluetooth: hci0: Frame reassembly failed (-84) [ 703.812174][T31044] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 704.212495][ T1849] loop8: detected capacity change from 0 to 512 [ 704.318027][ T1849] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.352301][ T1853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5780'. [ 704.378886][ T1849] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 704.393401][ T1853] loop0: detected capacity change from 0 to 512 [ 704.528293][ T1849] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5779'. [ 704.538126][ T1857] FAULT_INJECTION: forcing a failure. [ 704.538126][ T1857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.568853][ T1857] CPU: 1 UID: 0 PID: 1857 Comm: syz.1.5781 Tainted: G W syzkaller #0 PREEMPT(full) [ 704.568963][ T1857] Tainted: [W]=WARN [ 704.568969][ T1857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.568981][ T1857] Call Trace: [ 704.568988][ T1857] [ 704.568995][ T1857] __dump_stack+0x1d/0x30 [ 704.569059][ T1857] dump_stack_lvl+0x95/0xd0 [ 704.569084][ T1857] dump_stack+0x15/0x1b [ 704.569108][ T1857] should_fail_ex+0x263/0x280 [ 704.569135][ T1857] should_fail+0xb/0x20 [ 704.569168][ T1857] should_fail_usercopy+0x1a/0x20 [ 704.569266][ T1857] strncpy_from_user+0x27/0x250 [ 704.569285][ T1857] ? __kmalloc_cache_noprof+0x18a/0x410 [ 704.569383][ T1857] __se_sys_memfd_create+0x20f/0x3b0 [ 704.569420][ T1857] __x64_sys_memfd_create+0x31/0x40 [ 704.569484][ T1857] x64_sys_call+0x1f22/0x3020 [ 704.569512][ T1857] do_syscall_64+0x12c/0x370 [ 704.569539][ T1857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.569567][ T1857] RIP: 0033:0x7fe497e2c799 [ 704.569586][ T1857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.569606][ T1857] RSP: 002b:00007fe49687f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 704.569629][ T1857] RAX: ffffffffffffffda RBX: 00007fe4980a5fa0 RCX: 00007fe497e2c799 [ 704.569645][ T1857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.569725][ T1857] RBP: 00007fe49687f090 R08: 0000000000000000 R09: 0000000000000000 [ 704.569771][ T1857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.569785][ T1857] R13: 00007fe4980a6038 R14: 00007fe4980a5fa0 R15: 00007ffd8bd1d928 [ 704.569807][ T1857] [ 704.758027][ T1859] can: request_module (can-proto-4) failed. [ 704.766941][ T1859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5782'. [ 704.781085][ T1859] usb usb7: usbfs: process 1859 (syz.0.5782) did not claim interface 0 before use [ 704.809565][ T1859] lo speed is unknown, defaulting to 1000 [ 704.823118][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.926376][T30333] Bluetooth: hci0: command 0x1003 tx timeout [ 705.933197][ T1796] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 705.958921][ T1880] nftables ruleset with unbound set [ 705.974170][ T1882] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5790'. [ 706.202545][ T1893] FAULT_INJECTION: forcing a failure. [ 706.202545][ T1893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.255714][ T1893] CPU: 0 UID: 0 PID: 1893 Comm: syz.1.5794 Tainted: G W syzkaller #0 PREEMPT(full) [ 706.255808][ T1893] Tainted: [W]=WARN [ 706.255817][ T1893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 706.255831][ T1893] Call Trace: [ 706.255840][ T1893] [ 706.255847][ T1893] __dump_stack+0x1d/0x30 [ 706.255878][ T1893] dump_stack_lvl+0x95/0xd0 [ 706.255944][ T1893] dump_stack+0x15/0x1b [ 706.255969][ T1893] should_fail_ex+0x263/0x280 [ 706.255996][ T1893] should_fail+0xb/0x20 [ 706.256021][ T1893] should_fail_usercopy+0x1a/0x20 [ 706.256110][ T1893] strncpy_from_user+0x27/0x250 [ 706.256131][ T1893] ? __kmalloc_cache_noprof+0x18a/0x410 [ 706.256155][ T1893] __se_sys_memfd_create+0x20f/0x3b0 [ 706.256184][ T1893] __x64_sys_memfd_create+0x31/0x40 [ 706.256235][ T1893] x64_sys_call+0x1f22/0x3020 [ 706.256263][ T1893] do_syscall_64+0x12c/0x370 [ 706.256291][ T1893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.256312][ T1893] RIP: 0033:0x7fe497e2c799 [ 706.256375][ T1893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.256395][ T1893] RSP: 002b:00007fe49687ee08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 706.256482][ T1893] RAX: ffffffffffffffda RBX: 0000000000000567 RCX: 00007fe497e2c799 [ 706.256536][ T1893] RDX: 00007fe49687eee0 RSI: 0000000000000000 RDI: 00007fe497ec2e79 [ 706.256549][ T1893] RBP: 00002000000003c0 R08: 00000000ffffffff R09: 0000000000000000 [ 706.256592][ T1893] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 706.256607][ T1893] R13: 00007fe49687eee0 R14: 00007fe49687eea0 R15: 0000200000000180 [ 706.256630][ T1893] [ 706.639971][ T1897] loop1: detected capacity change from 0 to 2048 [ 706.692551][ T3302] loop1: p1 p2 [ 706.710295][ T1897] loop1: p1 p2 [ 706.966255][ T1907] can: request_module (can-proto-4) failed. [ 706.977346][ T1907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5797'. [ 706.993539][ T1907] usb usb7: usbfs: process 1907 (syz.2.5797) did not claim interface 0 before use [ 707.029831][ T1907] lo speed is unknown, defaulting to 1000 [ 707.285095][ T1925] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5803'. [ 707.865596][ T1929] loop2: detected capacity change from 0 to 2048 [ 707.942479][ T3302] loop2: p1 p2 [ 707.961073][ T1929] loop2: p1 p2 [ 708.024964][ T1936] syzkaller0: entered promiscuous mode [ 708.030459][ T1936] syzkaller0: entered allmulticast mode [ 709.576147][ T1972] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5814'. [ 709.581238][ T1968] can: request_module (can-proto-4) failed. [ 709.601855][ T1968] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5812'. [ 709.617687][ T1968] usb usb7: usbfs: process 1968 (syz.8.5812) did not claim interface 0 before use [ 709.659342][ T1968] lo speed is unknown, defaulting to 1000 [ 709.730488][ T1979] loop2: detected capacity change from 0 to 2048 [ 709.827543][ T3302] loop2: p1 p2 [ 709.856526][ T1979] loop2: p1 p2 [ 709.890803][ T1983] loop1: detected capacity change from 0 to 2048 [ 709.937177][ T3309] loop1: p1 p2 [ 709.958765][ T1983] loop1: p1 p2 [ 710.759254][ T1993] syzkaller0: entered promiscuous mode [ 710.765261][ T1993] syzkaller0: entered allmulticast mode [ 711.182316][ T2007] rose0: tun_chr_ioctl cmd 2147767507 [ 711.222536][ T2013] loop8: detected capacity change from 0 to 128 [ 711.231490][ T2013] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 711.247655][ T2013] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 711.332392][ T2013] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5827'. [ 711.372296][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 711.433016][ T2026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5832'. [ 711.576529][ T2042] iso9660: Unknown parameter 'cruft showassoc' [ 711.593457][ T2042] tipc: Enabling of bearer rejected, failed to enable media [ 711.648630][ T2033] loop2: detected capacity change from 0 to 512 [ 711.685777][ T2033] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=5 [ 711.725614][ T2033] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 711.783846][ T2033] EXT4-fs (loop2): mount failed [ 711.820235][ T2049] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5837'. [ 711.892100][ T1796] Bluetooth: hci0: command 0x1003 tx timeout [ 711.892147][T31044] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 711.908265][ T2053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5839'. [ 711.951922][ T2055] rose0: tun_chr_ioctl cmd 2147767507 [ 711.960851][ T2055] loop2: detected capacity change from 0 to 512 [ 711.989752][ T2055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.003010][ T2055] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.054778][ T2063] FAULT_INJECTION: forcing a failure. [ 712.054778][ T2063] name failslab, interval 1, probability 0, space 0, times 0 [ 712.068061][ T2063] CPU: 0 UID: 0 PID: 2063 Comm: syz.7.5843 Tainted: G W syzkaller #0 PREEMPT(full) [ 712.068126][ T2063] Tainted: [W]=WARN [ 712.068133][ T2063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.068145][ T2063] Call Trace: [ 712.068153][ T2063] [ 712.068163][ T2063] __dump_stack+0x1d/0x30 [ 712.068269][ T2063] dump_stack_lvl+0x95/0xd0 [ 712.068294][ T2063] dump_stack+0x15/0x1b [ 712.068314][ T2063] should_fail_ex+0x263/0x280 [ 712.068382][ T2063] should_failslab+0x8c/0xb0 [ 712.068401][ T2063] __kmalloc_noprof+0xb8/0x4e0 [ 712.068533][ T2063] ? alloc_pipe_info+0x1c8/0x340 [ 712.068551][ T2063] alloc_pipe_info+0x1c8/0x340 [ 712.068568][ T2063] splice_direct_to_actor+0x591/0x670 [ 712.068596][ T2063] ? preempt_schedule_irq+0x2d/0x50 [ 712.068629][ T2063] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 712.068657][ T2063] ? irqentry_exit+0x91/0x520 [ 712.068692][ T2063] ? __pfx_direct_splice_actor+0x10/0x10 [ 712.068776][ T2063] ? avc_policy_seqno+0x15/0x30 [ 712.068807][ T2063] ? selinux_file_permission+0x1f2/0x690 [ 712.068838][ T2063] do_splice_direct+0x119/0x1a0 [ 712.068904][ T2063] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 712.068929][ T2063] do_sendfile+0x382/0x650 [ 712.068959][ T2063] __x64_sys_sendfile64+0x105/0x150 [ 712.069016][ T2063] x64_sys_call+0x2dc4/0x3020 [ 712.069044][ T2063] do_syscall_64+0x12c/0x370 [ 712.069071][ T2063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.069097][ T2063] RIP: 0033:0x7fd13399c799 [ 712.069198][ T2063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.069219][ T2063] RSP: 002b:00007fd1323ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 712.069242][ T2063] RAX: ffffffffffffffda RBX: 00007fd133c15fa0 RCX: 00007fd13399c799 [ 712.069259][ T2063] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 712.069344][ T2063] RBP: 00007fd1323ef090 R08: 0000000000000000 R09: 0000000000000000 [ 712.069359][ T2063] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 712.069374][ T2063] R13: 00007fd133c16038 R14: 00007fd133c15fa0 R15: 00007ffe71ff7148 [ 712.069396][ T2063] [ 712.354483][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.377507][ T2067] loop2: detected capacity change from 0 to 512 [ 712.391107][ T2065] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5844'. [ 712.448493][ T2070] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5846'. [ 712.471375][ T2070] netlink: 'syz.7.5846': attribute type 3 has an invalid length. [ 712.475746][ T2067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.479975][ T2070] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5846'. [ 712.516990][ T2067] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 712.616308][ T443] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 712.616627][ T443] EXT4-fs error (device loop2): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 713.161650][ T2086] loop8: detected capacity change from 0 to 128 [ 713.210922][ T2086] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 713.257209][ T2086] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.335087][ T2086] netlink: 'syz.8.5853': attribute type 1 has an invalid length. [ 713.425262][ T2088] syzkaller0: entered promiscuous mode [ 713.441250][ T2088] syzkaller0: entered allmulticast mode [ 713.470972][ T2086] 8021q: adding VLAN 0 to HW filter on device bond3 [ 713.565142][ T2095] loop0: detected capacity change from 0 to 128 [ 713.587261][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 713.604033][ T2095] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5855'. [ 713.617499][ T443] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.823997][ T2107] loop8: detected capacity change from 0 to 2048 [ 713.863375][ T1851] Bluetooth: hci0: Frame reassembly failed (-84) [ 713.882569][ T2107] loop8: p1 p2 [ 713.983523][ T2110] lo speed is unknown, defaulting to 1000 [ 714.156242][ T2110] chnl_net:caif_netlink_parms(): no params data found [ 714.218031][ T2110] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.225582][ T2110] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.232912][ T2110] bridge_slave_0: entered allmulticast mode [ 714.239702][ T2110] bridge_slave_0: entered promiscuous mode [ 714.246855][ T2110] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.255121][ T2110] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.263990][ T2110] bridge_slave_1: entered allmulticast mode [ 714.270740][ T2110] bridge_slave_1: entered promiscuous mode [ 714.289830][ T2110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 714.301720][ T2110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 714.324528][ T2110] team0: Port device team_slave_0 added [ 714.331469][ T2110] team0: Port device team_slave_1 added [ 714.348237][ T2110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.355442][ T2110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.381674][ T2110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.393998][ T2110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.401071][ T2110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.427670][ T2110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.466222][ T2110] hsr_slave_0: entered promiscuous mode [ 714.482895][ T2110] hsr_slave_1: entered promiscuous mode [ 714.488915][ T2110] debugfs: 'hsr0' already exists in 'hsr' [ 714.510267][ T2110] Cannot create hsr debugfs directory [ 714.564525][ T2135] bridge0: entered allmulticast mode [ 714.576740][ T2135] bridge_slave_0: left allmulticast mode [ 714.583891][ T2135] bridge_slave_0: left promiscuous mode [ 714.592039][ T2135] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.643170][ T2136] __nla_validate_parse: 1 callbacks suppressed [ 714.643256][ T2136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5863'. [ 714.868087][ T2110] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.913503][ T2110] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.954648][ T2144] loop8: detected capacity change from 0 to 128 [ 714.987393][ T2144] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 714.999761][ T2144] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 715.011839][ T2110] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.028400][ T2144] netlink: 'syz.8.5866': attribute type 1 has an invalid length. [ 715.047556][ T2144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 715.109840][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 715.122811][ T2110] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.325696][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5869'. [ 715.386193][ T2155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5869'. [ 715.424714][ T2154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5869'. [ 715.453368][ T2155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5869'. [ 715.459386][ T2154] netlink: 'syz.7.5869': attribute type 12 has an invalid length. [ 715.462385][ T2155] netlink: 'syz.7.5869': attribute type 12 has an invalid length. [ 715.497145][ T2151] syzkaller0: entered promiscuous mode [ 715.503157][ T2151] syzkaller0: entered allmulticast mode [ 715.514815][ T2110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 715.534094][ T2110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 715.543779][ T2110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 715.554397][ T2110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 715.623213][ T2110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.635855][ T2110] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.648334][ T1773] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.655455][ T1773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.670503][ T1851] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.673047][ T2168] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5871'. [ 715.677724][ T1851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.719064][ T2110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 715.743610][ T2110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 715.759322][ T2169] FAULT_INJECTION: forcing a failure. [ 715.759322][ T2169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.772848][ T2169] CPU: 1 UID: 0 PID: 2169 Comm: syz.7.5870 Tainted: G W syzkaller #0 PREEMPT(full) [ 715.772880][ T2169] Tainted: [W]=WARN [ 715.772947][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.772995][ T2169] Call Trace: [ 715.773003][ T2169] [ 715.773011][ T2169] __dump_stack+0x1d/0x30 [ 715.773037][ T2169] dump_stack_lvl+0x95/0xd0 [ 715.773063][ T2169] dump_stack+0x15/0x1b [ 715.773087][ T2169] should_fail_ex+0x263/0x280 [ 715.773137][ T2169] should_fail+0xb/0x20 [ 715.773219][ T2169] should_fail_usercopy+0x1a/0x20 [ 715.773314][ T2169] strncpy_from_user+0x27/0x250 [ 715.773406][ T2169] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 715.773540][ T2169] do_getname+0x59/0x1c0 [ 715.773561][ T2169] getname_flags+0x1d/0x30 [ 715.773581][ T2169] do_sys_openat2+0x60/0x130 [ 715.773666][ T2169] __x64_sys_openat+0xf2/0x120 [ 715.773771][ T2169] x64_sys_call+0x1e39/0x3020 [ 715.773834][ T2169] do_syscall_64+0x12c/0x370 [ 715.773861][ T2169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.773956][ T2169] RIP: 0033:0x7fd13395cfce [ 715.773971][ T2169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 715.773988][ T2169] RSP: 002b:00007fd1323acf18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 715.774076][ T2169] RAX: ffffffffffffffda RBX: 00007fd1323ad6c0 RCX: 00007fd13395cfce [ 715.774089][ T2169] RDX: 0000000000000000 RSI: 00007fd133a32330 RDI: ffffffffffffff9c [ 715.774102][ T2169] RBP: 00007fd1323ad090 R08: 0000000000000000 R09: 0000000000000000 [ 715.774119][ T2169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.774141][ T2169] R13: 00007fd133c16218 R14: 00007fd133c16180 R15: 00007ffe71ff7148 [ 715.774193][ T2169] [ 715.959393][T31044] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 716.071825][ T2110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.157067][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5873'. [ 716.188508][ T2182] loop8: detected capacity change from 0 to 1024 [ 716.200282][ T2110] veth0_vlan: entered promiscuous mode [ 716.213317][ T2110] veth1_vlan: entered promiscuous mode [ 716.232371][ T2182] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 716.241005][ T2110] veth0_macvtap: entered promiscuous mode [ 716.256513][ T2182] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 716.268212][ T2110] veth1_macvtap: entered promiscuous mode [ 716.283582][ T2110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.293083][ T2110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 716.308543][ T1851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.311770][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 716.326502][ T1851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.336984][ T1851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.346097][ T1851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 716.537256][ T28] audit: type=1400 audit(1773794249.012:1418): avc: denied { watch watch_reads } for pid=2177 comm="syz.0.5872" path="/proc/617/net" dev="proc" ino=116514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 716.609743][ T2204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5879'. [ 716.643377][ T2204] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5879'. [ 717.125301][ T2225] loop0: detected capacity change from 0 to 2048 [ 717.164626][ T2225] loop0: p1 p2 [ 717.180508][ T3006] loop0: p1 p2 [ 717.331567][ T2229] FAULT_INJECTION: forcing a failure. [ 717.331567][ T2229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.345212][ T2229] CPU: 1 UID: 0 PID: 2229 Comm: syz.8.5885 Tainted: G W syzkaller #0 PREEMPT(full) [ 717.345255][ T2229] Tainted: [W]=WARN [ 717.345263][ T2229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 717.345354][ T2229] Call Trace: [ 717.345363][ T2229] [ 717.345372][ T2229] __dump_stack+0x1d/0x30 [ 717.345399][ T2229] dump_stack_lvl+0x95/0xd0 [ 717.345478][ T2229] dump_stack+0x15/0x1b [ 717.345503][ T2229] should_fail_ex+0x263/0x280 [ 717.345589][ T2229] should_fail+0xb/0x20 [ 717.345614][ T2229] should_fail_usercopy+0x1a/0x20 [ 717.345639][ T2229] _copy_to_user+0x20/0xa0 [ 717.345709][ T2229] put_timespec64+0x70/0xc0 [ 717.345732][ T2229] do_nanosleep+0x24d/0x330 [ 717.345781][ T2229] hrtimer_nanosleep+0x207/0x3e0 [ 717.345854][ T2229] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 717.345878][ T2229] __x64_sys_nanosleep+0x18c/0x1d0 [ 717.345901][ T2229] x64_sys_call+0x1fa2/0x3020 [ 717.345929][ T2229] do_syscall_64+0x12c/0x370 [ 717.346106][ T2229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.346127][ T2229] RIP: 0033:0x7f4e64eec799 [ 717.346144][ T2229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.346164][ T2229] RSP: 002b:00007f4e6393f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 717.346187][ T2229] RAX: ffffffffffffffda RBX: 00007f4e65165fa0 RCX: 00007f4e64eec799 [ 717.346214][ T2229] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 717.346238][ T2229] RBP: 00007f4e6393f090 R08: 0000000000000000 R09: 0000000000000000 [ 717.346258][ T2229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.346272][ T2229] R13: 00007f4e65166038 R14: 00007f4e65165fa0 R15: 00007ffc57fdae98 [ 717.346291][ T2229] [ 717.603507][ T2239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5887'. [ 717.790374][ T28] audit: type=1400 audit(1773794250.262:1419): avc: denied { setopt } for pid=2252 comm="syz.8.5894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 717.837584][ T2255] batman_adv: batadv0: Adding interface: ipvlan2 [ 717.850640][ T2255] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.877735][ T2255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.897105][ T2255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.907846][ T2255] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 717.920106][ T2263] batadv0: entered promiscuous mode [ 719.022291][ T1796] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 719.380774][ T2301] syzkaller0: entered promiscuous mode [ 719.392179][ T2301] syzkaller0: entered allmulticast mode [ 720.320206][ T2337] __nla_validate_parse: 4 callbacks suppressed [ 720.320284][ T2337] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5914'. [ 720.403870][ T2343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2343 comm=syz.3.5915 [ 720.530710][ T2347] loop8: detected capacity change from 0 to 512 [ 720.778785][ T2347] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.975992][ T2347] ext4 filesystem being mounted at /399/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 721.021586][ T2359] FAULT_INJECTION: forcing a failure. [ 721.021586][ T2359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.044999][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 721.052382][ T2359] CPU: 1 UID: 0 PID: 2359 Comm: syz.1.5920 Tainted: G W syzkaller #0 PREEMPT(full) [ 721.052416][ T2359] Tainted: [W]=WARN [ 721.052424][ T2359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.052510][ T2359] Call Trace: [ 721.052518][ T2359] [ 721.052606][ T2359] __dump_stack+0x1d/0x30 [ 721.052635][ T2359] dump_stack_lvl+0x95/0xd0 [ 721.052713][ T2359] dump_stack+0x15/0x1b [ 721.052736][ T2359] should_fail_ex+0x263/0x280 [ 721.052765][ T2359] should_fail+0xb/0x20 [ 721.052788][ T2359] should_fail_usercopy+0x1a/0x20 [ 721.052892][ T2359] _copy_to_user+0x20/0xa0 [ 721.052972][ T2359] simple_read_from_buffer+0xb5/0x130 [ 721.052997][ T2359] proc_fail_nth_read+0x10e/0x150 [ 721.053034][ T2359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.053072][ T2359] vfs_read+0x1ab/0x7f0 [ 721.053104][ T2359] ? __rcu_read_unlock+0x4e/0x70 [ 721.053156][ T2359] ? __fget_files+0x184/0x1c0 [ 721.053233][ T2359] ? mutex_lock+0x57/0x90 [ 721.053266][ T2359] ksys_read+0xdc/0x1a0 [ 721.053298][ T2359] __x64_sys_read+0x40/0x50 [ 721.053390][ T2359] x64_sys_call+0x2886/0x3020 [ 721.053418][ T2359] do_syscall_64+0x12c/0x370 [ 721.053449][ T2359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.053531][ T2359] RIP: 0033:0x7fe497decfce [ 721.053549][ T2359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 721.053568][ T2359] RSP: 002b:00007fe49687efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.053589][ T2359] RAX: ffffffffffffffda RBX: 00007fe49687f6c0 RCX: 00007fe497decfce [ 721.053604][ T2359] RDX: 000000000000000f RSI: 00007fe49687f0a0 RDI: 0000000000000005 [ 721.053618][ T2359] RBP: 00007fe49687f090 R08: 0000000000000000 R09: 0000000000000000 [ 721.053633][ T2359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.053712][ T2359] R13: 00007fe4980a6038 R14: 00007fe4980a5fa0 R15: 00007ffd8bd1d928 [ 721.053733][ T2359] [ 721.730486][ T2377] loop0: detected capacity change from 0 to 2048 [ 721.928683][ T2383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5928'. [ 721.948474][ T2377] loop0: p1 p2 [ 722.330585][ T2392] syzkaller0: entered promiscuous mode [ 722.336771][ T2392] syzkaller0: entered allmulticast mode [ 722.423580][ T2406] loop1: detected capacity change from 0 to 1024 [ 722.457812][ T2406] EXT4-fs: Ignoring removed mblk_io_submit option [ 722.505395][ T2410] netlink: 'syz.7.5933': attribute type 1 has an invalid length. [ 722.547743][ T2410] 8021q: adding VLAN 0 to HW filter on device bond8 [ 722.804836][ T2428] can: request_module (can-proto-4) failed. [ 722.842720][ T2428] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5938'. [ 722.857953][ T2435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5940'. [ 722.922529][ T2442] loop0: detected capacity change from 0 to 512 [ 722.923548][ T2428] usb usb7: usbfs: process 2428 (syz.7.5938) did not claim interface 0 before use [ 722.952619][ T2442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5941'. [ 723.003286][ T2428] lo speed is unknown, defaulting to 1000 [ 723.405783][ T2474] netlink: 'syz.7.5946': attribute type 1 has an invalid length. [ 723.450276][ T2474] 8021q: adding VLAN 0 to HW filter on device bond9 [ 723.740381][ T2456] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5944'. [ 723.749494][ T2441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5942'. [ 723.784184][ T2456] Falling back ldisc for ttyS3. [ 723.844288][ T2487] loop8: detected capacity change from 0 to 256 [ 723.880091][ T2487] FAT-fs (loop8): Directory bread(block 64) failed [ 723.898813][ T2487] FAT-fs (loop8): Directory bread(block 65) failed [ 723.916929][ T2487] FAT-fs (loop8): Directory bread(block 66) failed [ 723.932182][ T2487] FAT-fs (loop8): Directory bread(block 67) failed [ 723.946638][ T2487] FAT-fs (loop8): Directory bread(block 68) failed [ 723.969650][ T2487] FAT-fs (loop8): Directory bread(block 69) failed [ 723.984430][ T2487] FAT-fs (loop8): Directory bread(block 70) failed [ 724.005700][ T2489] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5951'. [ 724.064965][ T2487] FAT-fs (loop8): Directory bread(block 71) failed [ 724.077308][ T2487] FAT-fs (loop8): Directory bread(block 72) failed [ 724.091536][ T2487] FAT-fs (loop8): Directory bread(block 73) failed [ 724.216363][ T2487] netlink: 'syz.8.5950': attribute type 4 has an invalid length. [ 724.243383][ T2487] netlink: 'syz.8.5950': attribute type 4 has an invalid length. [ 724.501114][ T4562] IPVS: starting estimator thread 0... [ 724.642175][ T2499] IPVS: using max 2400 ests per chain, 120000 per kthread [ 724.709992][ T2505] loop8: detected capacity change from 0 to 128 [ 724.742636][ T2505] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 724.815447][ T2505] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.851946][ T2505] netlink: 'syz.8.5957': attribute type 1 has an invalid length. [ 724.925093][ T2505] 8021q: adding VLAN 0 to HW filter on device bond5 [ 724.962558][T19631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 724.979196][ T2515] loop0: detected capacity change from 0 to 512 [ 725.116937][ T2520] loop8: detected capacity change from 0 to 256 [ 725.312325][ T28] audit: type=1326 audit(1773794257.782:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.381432][ T28] audit: type=1326 audit(1773794257.782:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.408163][ T28] audit: type=1326 audit(1773794257.792:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.434053][ T28] audit: type=1326 audit(1773794257.792:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.458720][ T2530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5963'. [ 725.468833][ T28] audit: type=1326 audit(1773794257.792:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9fea8c502 code=0x7ffc0000 [ 725.587733][ T28] audit: type=1326 audit(1773794257.792:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.631690][ T28] audit: type=1326 audit(1773794257.792:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.682120][ T28] audit: type=1326 audit(1773794257.792:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9fea8c799 code=0x7ffc0000 [ 725.723226][ T28] audit: type=1326 audit(1773794257.822:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd9fea8c597 code=0x7ffc0000 [ 725.763335][ T28] audit: type=1326 audit(1773794257.822:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2512 comm="syz.0.5958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd9fea49491 code=0x7ffc0000 [ 725.868753][ T2547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2547 comm=syz.8.5969 [ 725.932169][ T2555] loop8: detected capacity change from 0 to 512 [ 725.955866][ T2555] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 725.987358][ T2555] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.5970: corrupted xattr entries [ 726.017449][ T2555] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 726.017863][ T2555] EXT4-fs (loop8): 1 orphan inode deleted [ 726.027094][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 726.027116][ C1] EXT4-fs (loop8): initial error at time 1773794258: xattr_find_entry:337: inode 15 [ 726.027152][ C1] EXT4-fs (loop8): last error at time 1773794258: xattr_find_entry:337: inode 15 [ 726.061236][ T2555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.144601][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.777532][ T2561] syzkaller0: entered promiscuous mode [ 726.784508][ T2561] syzkaller0: entered allmulticast mode [ 726.889765][ T1796] Bluetooth: hci0: command 0x1003 tx timeout [ 726.896054][T31044] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 726.936507][ T2565] 8021q: adding VLAN 0 to HW filter on device bond6 [ 727.037620][ T2570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5974'. [ 727.187726][ T2572] FAULT_INJECTION: forcing a failure. [ 727.187726][ T2572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 727.258113][ T2572] CPU: 0 UID: 0 PID: 2572 Comm: syz.0.5975 Tainted: G W syzkaller #0 PREEMPT(full) [ 727.258150][ T2572] Tainted: [W]=WARN [ 727.258157][ T2572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 727.258186][ T2572] Call Trace: [ 727.258192][ T2572] [ 727.258198][ T2572] __dump_stack+0x1d/0x30 [ 727.258228][ T2572] dump_stack_lvl+0x95/0xd0 [ 727.258256][ T2572] dump_stack+0x15/0x1b [ 727.258295][ T2572] should_fail_ex+0x263/0x280 [ 727.258326][ T2572] should_fail+0xb/0x20 [ 727.258352][ T2572] should_fail_usercopy+0x1a/0x20 [ 727.258483][ T2572] _copy_from_user+0x1c/0xb0 [ 727.258586][ T2572] kstrtouint_from_user+0x69/0xf0 [ 727.258616][ T2572] proc_fail_nth_write+0x50/0x160 [ 727.258668][ T2572] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 727.258737][ T2572] vfs_write+0x269/0x9f0 [ 727.258836][ T2572] ? __rcu_read_unlock+0x4e/0x70 [ 727.258859][ T2572] ? __fget_files+0x184/0x1c0 [ 727.258893][ T2572] ? mutex_lock+0x57/0x90 [ 727.258957][ T2572] ksys_write+0xdc/0x1a0 [ 727.258976][ T2572] __x64_sys_write+0x40/0x50 [ 727.259045][ T2572] x64_sys_call+0x27e1/0x3020 [ 727.259135][ T2572] do_syscall_64+0x12c/0x370 [ 727.259163][ T2572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.259188][ T2572] RIP: 0033:0x7fd9fea4cfce [ 727.259264][ T2572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 727.259286][ T2572] RSP: 002b:00007fd9fd4e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 727.259309][ T2572] RAX: ffffffffffffffda RBX: 00007fd9fd4e76c0 RCX: 00007fd9fea4cfce [ 727.259397][ T2572] RDX: 0000000000000001 RSI: 00007fd9fd4e70a0 RDI: 0000000000000004 [ 727.259413][ T2572] RBP: 00007fd9fd4e7090 R08: 0000000000000000 R09: 0000000000000000 [ 727.259428][ T2572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.259441][ T2572] R13: 00007fd9fed06038 R14: 00007fd9fed05fa0 R15: 00007fff7d55c388 [ 727.259460][ T2572] [ 727.789715][ T2585] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5979'. [ 727.909187][ T2587] loop0: detected capacity change from 0 to 2048 [ 727.974052][ T3302] loop0: p1 p2 [ 727.991728][ T2587] loop0: p1 p2 [ 728.057028][ T2590] loop8: detected capacity change from 0 to 512 [ 728.064029][ T2590] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 728.109325][ T2590] EXT4-fs error (device loop8): xattr_find_entry:337: inode #15: comm syz.8.5981: corrupted xattr entries [ 728.152197][ T2590] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 728.152467][ T2590] EXT4-fs (loop8): 1 orphan inode deleted [ 728.167656][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 728.167671][ C1] EXT4-fs (loop8): initial error at time 1773794260: xattr_find_entry:337: inode 15 [ 728.167695][ C1] EXT4-fs (loop8): last error at time 1773794260: xattr_find_entry:337: inode 15 [ 728.244075][ T2590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 728.348385][T19631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.473992][ T2601] loop3: detected capacity change from 0 to 128 [ 728.676140][ T2601] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 729.556328][ T2601] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 729.656786][ T2613] netlink: 'syz.3.5983': attribute type 1 has an invalid length. [ 729.678900][ T2614] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5986'. [ 729.714668][ T2616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5987'. [ 729.726166][ T2110] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 729.830072][ T2625] loop3: detected capacity change from 0 to 128 [ 729.914854][ T2631] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5993'. [ 729.965521][ T2629] loop1: detected capacity change from 0 to 2048 [ 729.969844][ T2633] loop3: detected capacity change from 0 to 2048 [ 729.987712][ T2628] syzkaller0: entered promiscuous mode [ 729.993694][ T2628] syzkaller0: entered allmulticast mode [ 730.022449][ T3302] loop1: p1 p2 [ 730.032331][ T2633] loop3: p1 p2 [ 730.037193][ T2629] loop1: p1 p2 [ 730.045355][ T3006] loop3: p1 p2 [ 730.079770][ T3311] ================================================================== [ 730.087882][ T3311] BUG: KCSAN: data-race in __d_drop / fast_dput [ 730.094131][ T3311] [ 730.096453][ T3311] write to 0xffff88811be3c790 of 8 bytes by task 3006 on cpu 1: [ 730.104079][ T3311] __d_drop+0x14d/0x240 [ 730.108246][ T3311] __dentry_kill+0x122/0x460 [ 730.112829][ T3311] finish_dput+0x2b/0x200 [ 730.117152][ T3311] dput+0x52/0x60 [ 730.120783][ T3311] terminate_walk+0x77/0x210 [ 730.125365][ T3311] path_lookupat+0x469/0x500 [ 730.129956][ T3311] filename_lookup+0x190/0x390 [ 730.134878][ T3311] do_readlinkat+0x74/0x2f0 [ 730.139393][ T3311] __x64_sys_readlink+0x47/0x60 [ 730.144258][ T3311] x64_sys_call+0x2b51/0x3020 [ 730.148943][ T3311] do_syscall_64+0x12c/0x370 [ 730.153536][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.159439][ T3311] [ 730.161754][ T3311] read to 0xffff88811be3c790 of 8 bytes by task 3311 on cpu 0: [ 730.169292][ T3311] fast_dput+0x5f/0x2c0 [ 730.173454][ T3311] dput+0x24/0x60 [ 730.177080][ T3311] filename_unlinkat+0x217/0x410 [ 730.182006][ T3311] __se_sys_unlink+0x2b/0xe0 [ 730.186934][ T3311] __x64_sys_unlink+0x1f/0x30 [ 730.191610][ T3311] x64_sys_call+0x2eb6/0x3020 [ 730.196352][ T3311] do_syscall_64+0x12c/0x370 [ 730.200937][ T3311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.206820][ T3311] [ 730.209126][ T3311] value changed: 0xffff888237481770 -> 0x0000000000000000 [ 730.216214][ T3311] [ 730.218522][ T3311] Reported by Kernel Concurrency Sanitizer on: [ 730.224656][ T3311] CPU: 0 UID: 0 PID: 3311 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 730.235062][ T3311] Tainted: [W]=WARN [ 730.238848][ T3311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.248898][ T3311] ==================================================================