last executing test programs: 3m3.166415516s ago: executing program 3 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 3m3.166170636s ago: executing program 32 (id=29): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 3m0.458119048s ago: executing program 33 (id=42): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.swap.current\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x8}) fcntl$lock(r2, 0x7, 0x0) memfd_create(0x0, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0x1) ioctl$TCSETS(r3, 0x89f0, 0x0) syz_io_uring_setup(0xea9, 0x0, &(0x7f00000005c0), 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) close(0x3) r5 = syz_io_uring_setup(0x497, &(0x7f0000000140)={0x0, 0xc69f, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r4, 0x0) syz_io_uring_submit(r9, r7, &(0x7f0000000200)=@IORING_OP_OPENAT={0x12, 0x20, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0, 0x12345, {0x0, r8}}) syz_io_uring_setup(0x3f46, &(0x7f0000000600)={0x0, 0x711d, 0x2000, 0x3, 0x290}, &(0x7f0000000340), &(0x7f0000000680)) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x9, 0x0, 0x8, 0x4, 0x0, {0x0, r8}}) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) signalfd4(0xffffffffffffffff, &(0x7f0000000500)={[0x50e]}, 0x8, 0x100800) fcntl$lock(r2, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x73e9}) 2m50.6516126s ago: executing program 34 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x410c00, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r5) sendmsg$L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r6, @ANYBLOB="040028bd7000ffdbdf250800000006001b004e200000050006006d000000"], 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x20008800) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) r7 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711872000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4014, &(0x7f0000001000)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a302d4e3a332f", @ANYRESDEC=r8]) 2m37.937559864s ago: executing program 35 (id=186): ioctl$sock_netdev_private(0xffffffffffffffff, 0x8948, &(0x7f0000000280)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r0, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000895, &(0x7f0000000180)={0xa, 0x4e1c, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) 2m32.031823982s ago: executing program 7 (id=231): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r2, 0x42, 0x3, [0x7fff, 0x0, 0x9]}, 0xe) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xd}, &(0x7f00000000c0)=0x8) socket$inet6(0xa, 0x1, 0x8010000000000084) (async) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r2, 0x1}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000140)={r2, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={r2, 0x42, 0x3, [0x7fff, 0x0, 0x9]}, 0xe) (async) shutdown(r0, 0x1) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0xd}, &(0x7f00000000c0)=0x8) (async) 2m31.752158886s ago: executing program 7 (id=234): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m31.751945166s ago: executing program 7 (id=235): syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) read$hidraw(r0, &(0x7f0000002380)=""/93, 0xfdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x21, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 2m30.612023019s ago: executing program 8 (id=238): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x0, 0x102}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="5a0f6d218817d584a21b59989d313a5f91e7277750593696a74b8a5e7886b8465fbc6e2e7c8e52cd6623d8", 0x2b, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x243400) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0), &(0x7f0000000300)=@tcp6=r5, 0x2}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026004506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m30.002919588s ago: executing program 8 (id=242): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x21c004, &(0x7f0000000e40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) (async) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x38, 0x48, 0xe01, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x30}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x38}}, 0x4000000) 2m29.728201554s ago: executing program 8 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5d47050001000000140012800cfe01006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0875fe00"], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2m29.565251712s ago: executing program 8 (id=245): dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 2m29.196867618s ago: executing program 8 (id=249): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = creat(0x0, 0x268) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 2m28.732261176s ago: executing program 7 (id=256): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$eJzs3V9v29YZx/EfXbt2NSAbtiEIAic9TTbAGVyVkhsHWq846khmK5ECSbfxVRE0cmFE7op4AxbfbLnJNmB7Eb3d/W6H3e92b6NYr4bdaSAp2XL0r0mcyAm+HyE51OHDcx7Kgh7Qlo4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADk+HXXrThqBeHuXTOdX4+j9ni3lqViY+DWmWbGvJKT/dPamq4UXVd+err7cvbfDa0X99a1ljVrOv7B5R999JPlpeHxMxJ+JY4eHT+41+t1Hy46kQVp2jBIoqDtNa0JksjU3pG000hMI2jZZC9Jbdv4sfXSKDYb/i1TqdW2jC3vRbths+617LDzzvtV1902H5c71ouTKPzg43Li7wStVhA285hsdxZzJ3sifhKkJrVe25j9g153a16SWVDl+wRV5wVV3Wq1UqlWK9u3a7fvuO7yWId7ypHruhqLWPyTFot1zq/gwPNbGtR/tRQsDzvNhJuvumJFak/cO1b/f/6BnTnvaP3Pq3xf61dOd19VXv+vF/euT6v/U3KZcVuZdn7PdHt7OMaRHulYD3RPPfXU1cPTmM1zmemC35qyChUoUaRAbXl5jxn0GNW0rW25+lw7aiiRUUOBWrJKtKdEqWz+jPIVa1WeUkWKZbQhX7dkVFF/taYtGVmVtadIuwrVVF1ePsq+DvLHfWtGjlnQahZUmRH02fCZV50R9Ez1Pzd6yL+o/6D+4yLpD+v/095aRDYAAAAAAOBlcPLfvmfX/yu6Jq04agQt6y46LQAAAAAAcI7yv/yvZ03+zrhrcrj+BwAAAADgTePkn7FzJJX0brE1/EzV4JcA/R8uOkcAAAAAAPBi8r//X8+aUrb1rpynr/8BAAAAAMDr7k/T1tj/p9QfLAu46vzjP4rjFedx5+7PnEMv6/MOBwsEjq0TmDauOpcGg+TN9vLgnm/XncHqlyeLYH47aPbnrfXvnEMC+oveK2Leu1+094d7illKjaBly37U+qgiz7u0lNq76W+/Ovid8tP/c9i+5Hy3f9Drlr/4de9+nsvjbJTHh4NHamwdxRm5/EbXiphrk894Jf8gxmDekqNsXnf0/JeKw5emzik9PecT3ShibpSKtnT2/NeyOSvlaWdfZLEq6YXO/IluFjE3N24WzYQsqnOy6FZHH/+5j8VzZrE1K4vVg1536wWzAIBF2Z9dhXJvna27z/Eq92qq+xNtFDEbV/MX1uWrE17R3Xl1xZ1Q19dOpl8eZtH//ZQs/jb2HUjTamw2719P5q3k836THfDN1KqatKqO1r7+b79/+LUuHz06fv/g8N6X3S+7X1WrW9vuh657u6qV/DQGDbUHADDB/O/YmRvhfDjnqvrHJ28pKOsL6X/9/n1t5p82yN9xMHHUUn7Md/nbEDbnXLWWTsavaHPOVd1pbPUZYrdewU8CAIBX58acOjy9/jvDb/FzNudcd5dG3lK4OXp1/LbGro5HazkAAHg5bPytU0r/6MRx0Pm8UqtVvHTHmjjyPzFxUG9aE4Spjf0dL2xa04mjNPKjVrbxaVC3iUl2O50oTk0jik0nSoK7+Te/m8FXvye27YVp4CedlvUSa/woTD0/NfUg8U1n91etINmxcX5w0rF+0Ah8Lw2i0CTRbuzbsjGJtSOBQd2GadAIss3QdOKg7cV75tOotdu2pm4TPw46aVQMOJwrCBtR3M6HLS/6wQYA4II4enT84F6v1314pCWp1+s6yyc957Wx6HMEAABnUaUBAAAAAAAAAAAAAAAAAAAAALj4zu1Dfm/UxurLGPkzvdg4v/jlpF3vSJp9+L9L0mhPv/99J126CD+LMxvDRadnxPx9wi5Jf1h88q/XxqRXi7H1qAG8xv4fAAD//5RrUOQ=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="4a00000001007d4c85eddb69918594db144bc54d"], 0x80002) r2 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) r4 = memfd_create(&(0x7f0000000000)='\x00', 0x4) io_submit(r3, 0x1, &(0x7f0000001640)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x7fff, r4, &(0x7f00000000c0)="e2718f8e80", 0x5, 0x29}]) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="b594a9e4be2ac9e1b6ad168da392784e686348a2b8c63cd6c2ee17892ec4069095888b99c0dd6327d65f996d8e5ada1fa8141dc07d06e4f33a1c12a61ee6ceae7164860744e236c0e6906dd527453224abb34d68e209832ac24635", &(0x7f00000000c0)=""/4, &(0x7f00000005c0)="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", &(0x7f0000000100)="8c9e7aadac37b733853d653fcc014ef09b5d0b4993db985896857386778d87fa1874870372924bbc56c2f535dc8c9ddb86a5d78b5574090602b02862de959015bb5e8f9e8c97fa1b9586a0cb6c935173cf270bd3f3cbc95f0c4402a7c3fa5c2e5225", 0x6, r6, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0x120, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe94, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000dc0)=ANY=[@ANYBLOB="73686f776173736f632c0080da3e68c346f09759880adda7fb7a95a2f9a5376cd7c5d2ddfca3e914f85cffd5047acdc68e67c6179a91f4b17bfee47a6f9f901f2685c19d25d93a65403e593e0aea376762d3323a54ea772757b22259d244f61622274d5e8b21d835ceb3afac660819b63431b9fe729c02baeb2313404366fa28fed4"], 0x5, 0x567, &(0x7f00000001c0)="$eJzs3e1u01gawPHHfVmqssuudlcIVQUOZVcqUgmOA0ERn7zOSWpw7Mh2UPsJVTRFFSmsKCNN+2n4gmakmYvgKxcxlzB3guYSGPklfc3LtLRJh/n/oplzYh+f8xwT+ZGb2BYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCGUzXNoiGe67dWVH9ONQwaA9Z3+7tzqBgwroiR/CczM3ItW3Tt3/urryb/W5D57N28zCTFjOxevvqPR/+amuhuPyCgkdje2X251um035xko8nzi+c0ZvJdfppt69p3o8Bt2HWt3ChQlXLZvLdci1TN9XS0GsW6oZxQ23EQqkXnjipWKiWlC6tBy69XbU93Fz68a5lmWT0uNLUdRoF/73EhcpZdz3P9etomWZ20eZh8EJ+4sYq13VBqY7PTLimlLg8KMmlUHDaTpJE1rJFlWlaxaFnF8oPKg4emOXVsgXmE5C0+G9lONqfG/6HFeJ3VoRv4YhN5/hdPXPGlJSuier4cqUoogTT6rM918/9/7+m9Mf7SY9yD+b+b5a/tr56TNP/fyN7d6Jf/+8Qyute27MiuvJQ16UhH2vJm7BGN9lUXLb64EkkgrjTETpeofImSipSlLKY8k2WpSSRKauKKJ1oiWZVIYtHpJ8qRULTYEksgoShZFEfuiJKiVKQiJVGipSCrEkhLfKlLVey0lw3ZTPd7qWd0e7JGxQET2evJGtDoJPn/UpLtzeObkP//7M74CA6c3udu/u9venTRAAAAAACA82Ckf3030tP862mt5nraHHdYAAAAAADgDKXf/M8nRfo1/3UxOP8HAAAAAOBrY6TX2BkiMis3s1r3Sij+CAAAAAAAwFci/f7/RlLMJrWbYnD+DwAAAADA1+b7offYj5qXjJ9/lTCcNt41V/5jbNlJO3trMttu8miPcW3OuJJ3khblqfydo+eN/O6XezfB/JQXG/3i+Gu61DCMMwhAfpRbWZtb61m53l2TzXa25nq64ATeo6LY9pWJWK/E37za/FbS6f/gN64YsrHZaReev+6sp7G8S3p5t5XfQPHYfRQHxPI2vd9Ces3FoRlP53t+Or0QIxvX+C4b1zw4/4ls84kTjPleFrI2C7NZOXt4/jPJmMVCv9nPZlEUj8y8590jB0ZxO2tze/F2VvSIwuobRTLcZqdtHYziVPvid0RRGrYvSt0opveHP0kUADAuG32y0H7+P5Z3T3GU65vdu6OcSXZ/L4tZm8W59MA6NdfjiG4OO6KbX5jXP04ffQZSvxybjPvTkaz6IdngQ99xI88ykl04+Xbr/3J1e2f37ubW2ov2i/YryyqVzfum+cCS6XQaeUHuAQD0MPwZO0NbGPeHnFX/c+8nBQV5Lq+lI+uylF5tkP7i4GCv9b/nvc4e+BnC0pCz1v22RVnqcVYnPdtaPdv27rc0gn8JAABGZ+F4Hv74+YT5f2nIeffhXD747PhgLgcAAOdDh58e5dXms2KlUrTjZa3CwHmiQrda18r1Yx06y7Zf16oZBnHgBF5SeepWdaSiVrMZhLGqBaFqBpG7kj75XeWPfo90w/Zj14manrYjrZzAj20nVlU3clSz9T/PjZZ1mGzcfcagY8du4KsoaIWOLigVaX2goVvVfuzW3KTqq2boNuxwVT0NvFZDq6qOnNBtxkHa4d5Yrl8LwoYdu3+Twhj3MwAAF8n2zu7LtU6n/eYcK+OeIwAAOIwsDQAAAAAAAAAAAAAAAAAAAADAxTeK6//GX/kle4qAXJR4/oCVmYsRxgkrEyJyys27t6S4ALMYVDHOq+dxHpUAjMJvAQAA//9St0Y/") syz_io_uring_setup(0x58c9, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r7, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@private0, @private=0xa010100, 0x19, 0x18}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x194) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@deltaction={0xa0, 0x31, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) r8 = dup2(r0, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) accept$inet6(r6, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000840)=0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x2, 0xff, 0x3, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x401, 0x6}, 0x100930, 0x10000, 0x7fffffff, 0x3, 0x0, 0x6, 0xf9, 0x0, 0xfb4, 0x0, 0x8001}, r9, 0x2, 0xffffffffffffffff, 0xb) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r10, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c80)=ANY=[@ANYBLOB="cb2aaa2c"], 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x6e64543f0ae2cee6) 2m28.512134662s ago: executing program 7 (id=257): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x4, 0x4, 0x4, 0x4000b, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x8c, 0xb7, &(0x7f00000000c0)="7dddd808954a8f10e5b84344abf59a20c2c7b30c6067cea5eb8f21b6b58c3fbbdda658deeec670afcf91dbbc8d4542fbbe47811acd30f5a8c11b0feeeb69f171d4be2dfc933b9a927aab856e7fbe0a2e9e03943268f60ac3cd8aa3fe49b4b48f494b262bc62184fd88a3122998ce8cdc98535fdc01f1c7d9307421264f60a191c4a4aafb523d92018bff36ff", &(0x7f0000000180)=""/183, 0x2, 0x0, 0x28, 0xe6, &(0x7f0000000040)="2100b4f2babdbaa6db2f014f43662459a7173554251ae806d0a55f99cc0e554afecc7566fee56eca", &(0x7f0000000240)="25a5613455e309437144f663db5aa679cf48295962befa6a19fb98b5797098fa2409e7582e1e356fc1e7bafd1d2847777de072b88e5af37c98da41433913fe7a043a6bf08e1b86d3f18705c6ab756cd51cd6122d2de16720fb73876b5e7e7416cc74d54b7542c0b80bd2d3bf002ec61e4b5d8ca8cff54c09ed4b0c9abda2fa3eae29990a96b9069b4b355854328039a0f229060060234ecf7bc4703a59abf0409c092372482776e93d40f9dab2cb5a38197223a3cb53d2b259c1d32e8621d7a26d9bf28b2a33ae7832364e442443160366ed4303308044ff923350ce48e0fa28639ec267045c", 0x0, 0x0, 0x80000000}, 0x50) 2m28.314503853s ago: executing program 7 (id=262): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2m28.280557156s ago: executing program 36 (id=262): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0x894, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}], [@TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 2m27.350954352s ago: executing program 8 (id=270): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x10}}, 0x20001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210000000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x41) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000aba000/0x3000)=nil, &(0x7f0000a0e000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000838000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0001000400000001000400000000", @ANYRES32=r7, @ANYBLOB], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, "317aa4914beb751a04e26a6fb6959a4f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m27.327678156s ago: executing program 37 (id=270): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x10}}, 0x20001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210000000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0xc0000200}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x2b}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) dup(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x41) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000aba000/0x3000)=nil, &(0x7f0000a0e000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000838000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d0001000400000001000400000000", @ANYRES32=r7, @ANYBLOB], 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x7, "317aa4914beb751a04e26a6fb6959a4f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m24.972147069s ago: executing program 1 (id=286): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe}, 0x106200, 0x10004, 0x4, 0x5, 0x9b41, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv6_newaddr={0x34, 0x14, 0x800, 0x70bd29, 0x25dfdbfe, {0xa, 0xd0, 0x0, 0xff}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}, 0x1, 0x0, 0x0, 0xc885}, 0x8000002) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r1, 0x8) r3 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="697d9c66dc25a30a44a4ce2c7894220cbeceff6b7b85bcbfd5764701"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f0000000080)) mq_timedsend(r3, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x6, 0x0) mq_timedreceive(r3, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 2m23.672696311s ago: executing program 1 (id=295): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0xfffe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x8000) 2m23.546777766s ago: executing program 1 (id=296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008851}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0xa00000000000000, 0x2, 0x0, 0xfffffffffffffffc, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x7, 0x2000}) 2m23.420311211s ago: executing program 1 (id=298): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 2m23.162647999s ago: executing program 1 (id=299): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x10002) r1 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4eb, &(0x7f00000010c0)="$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") openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002bc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000025c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1c14744, &(0x7f0000000080), 0x2, 0x4bb, &(0x7f0000000600)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c000380"], 0x2c}, 0x1, 0x0, 0x0, 0x404c001}, 0x22008014) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f00000015c0)={{r3}, r4, 0x0, @inherit={0x50, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000000e5ff0000000000000000090000ff7f00000000000000000000000000000085940000000000000700000000000000001080da000000060000000000000000eb0a00000000000000000000fcfa1b5628ac1685935d4fdd1d88edcd67cfe293eba0b19cb6b55a51f6f5d801000000e7ed6c7c67900f7ae35e0506b74a30f78c6dced8a7d0476bc4dbf1dbd140e9d3ff10f78d3c03a4f9eede5894124032141c58b7533c8504ac6e9d72081a5843dc56"]}, @name="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"}) unshare(0x6a040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x38, r8, 0x1, 0x3, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8}, @GTPA_TID={0xc}]}, 0x38}}, 0x0) r9 = syz_io_uring_setup(0xbc3, &(0x7f0000000d80)={0x0, 0xb70c, 0x80, 0x0, 0x6b}, 0x0, &(0x7f0000000900)) io_uring_enter(r9, 0x47f8, 0x0, 0x0, 0x0, 0x0) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x14, r9}, 0x18) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000000940)={0x0, 0x3, 0x1, [0x7fffffffffffffff, 0x7, 0xffffffffffffffff, 0x6, 0x7d], [0xf, 0x3, 0x4, 0x81cc, 0x0, 0xffff, 0x1, 0xd0, 0x3, 0xde6e, 0xff, 0x3, 0x9, 0x8, 0x10001, 0x401, 0x88, 0x81, 0x8, 0x5, 0x200, 0xe2, 0xeb7, 0x73, 0x9, 0xbc5, 0x8000000000000000, 0x8, 0x2, 0x9, 0x8, 0x8001, 0x80, 0x4, 0x8, 0xfffffffffffffeff, 0x7, 0x80000000, 0x0, 0x9, 0x67, 0xd4a9, 0xae, 0xfffffffffffffbff, 0x0, 0x5, 0x70, 0x6, 0x5, 0x5, 0x1, 0xfffffffffffffff8, 0x7, 0xe3, 0x0, 0x1, 0x7ff, 0x9, 0x81, 0xfffffffffffffff7, 0x10, 0x80000001, 0x600000, 0x8000, 0x7, 0xa, 0xffffffffffffffff, 0x5, 0x0, 0x13, 0xcf3, 0x5, 0x6, 0x1, 0xffffffffffff7fff, 0x1, 0x2, 0x3, 0x341, 0x7, 0x1, 0x6, 0x2, 0x2, 0x5f8, 0x10001, 0x6, 0x0, 0x100, 0x0, 0x1, 0x4, 0xd47d, 0x8, 0x1, 0x5, 0x401, 0x0, 0xb9, 0x31b, 0x3, 0xff, 0xf149, 0x3, 0xb, 0x7, 0x4cd, 0xffffffffffffffff, 0x80000001, 0x0, 0x9, 0x7, 0x6, 0x10000, 0x231, 0x6, 0x3, 0x2, 0x8, 0x1, 0x8001]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000002c0)={0x0, 0x3, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f00000006c0)={0x13, 0x2, {0x4, @usage=0x1, r5, 0x5, 0x7, 0x1ff, 0x9322119, 0xffffffffffffffff, 0xa, @struct={0x3ff, 0x9}, 0x9, 0x80000000, [0xa, 0xf, 0x3, 0x80000000, 0x8c]}, {0x1, @usage=0x81, 0x0, 0x3, 0x7, 0x0, 0x2094, 0x0, 0x0, @usage=0x5, 0x1, 0x6, [0x8001, 0x9, 0x1, 0x4, 0x0, 0x2]}, {0x5, @usage=0x2, r11, 0xfffffffffffffff7, 0x6, 0x100000000, 0x4, 0xdc, 0x12, @usage=0x80e, 0x7, 0xffffffff, [0x2, 0x4, 0x0, 0x7, 0x2, 0x9]}, {0x2cdc92c6, 0x7fff, 0x8b}}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/67, &(0x7f0000000180)=0x43) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SG_BLKSECTGET(r12, 0x1267, &(0x7f00000000c0)) r13 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_IRQP_SET(r13, 0x4008700c, 0x480000004000725) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="b4050000000000006110880000000000c301200000000000950000000000000046650790ca01e78adb912b911c4e43a9b0f2268664f7fd83a0f6a7368282cec0f21e6065e59f89a781c2070c43dc680a5951b84f200d6dc13888d5af349d1b2f8fd53dda"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000e80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) 2m22.717882271s ago: executing program 1 (id=304): socket$netlink(0x10, 0x3, 0x14) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="089900050200", &(0x7f0000001200)=""/4115, 0x0, 0x10010, 0x1, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @private0, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x8000) ioctl$EVIOCGNAME(r6, 0x80404506, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000002c0)=""/210) syz_clone3(&(0x7f00000024c0)={0x40000, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440), {0x2b}, 0x0, 0x0, &(0x7f0000001480)=""/4096, &(0x7f0000002480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) fcntl$lock(r6, 0x26, &(0x7f0000002540)={0x1, 0x3, 0x4, 0x1, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000104050000000000000000000a00000006000640000000000800054000000007d8ee9461f2b22cdd1aec244b145341ec9b6daed53afbef80693dfa451b3ebf0a772cd37d602cd78d11914162b0a015ef6096"], 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x2000004) syz_open_procfs(r7, &(0x7f0000000000)='personality\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x4d0, 0x2a8, 0x0, 0x148, 0x2a8, 0x148, 0x530, 0x240, 0x240, 0x530, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x8400000000000000}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x9, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x2dee, 0x2, 0x0, 0x0, 0x0) 2m22.66241295s ago: executing program 38 (id=304): socket$netlink(0x10, 0x3, 0x14) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="089900050200", &(0x7f0000001200)=""/4115, 0x0, 0x10010, 0x1, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000000c0)=0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x18, 0x3a, 0xff, @private0, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local}}}}}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x3ff, 0x8000) ioctl$EVIOCGNAME(r6, 0x80404506, 0x0) ioctl$EVIOCGKEYCODE(r6, 0x80084504, &(0x7f00000002c0)=""/210) syz_clone3(&(0x7f00000024c0)={0x40000, &(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440), {0x2b}, 0x0, 0x0, &(0x7f0000001480)=""/4096, &(0x7f0000002480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) fcntl$lock(r6, 0x26, &(0x7f0000002540)={0x1, 0x3, 0x4, 0x1, r7}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000019200)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000104050000000000000000000a00000006000640000000000800054000000007d8ee9461f2b22cdd1aec244b145341ec9b6daed53afbef80693dfa451b3ebf0a772cd37d602cd78d11914162b0a015ef6096"], 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x2000004) syz_open_procfs(r7, &(0x7f0000000000)='personality\x00') setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x4d0, 0x2a8, 0x0, 0x148, 0x2a8, 0x148, 0x530, 0x240, 0x240, 0x530, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x8400000000000000}, [@common=@unspec=@comment={{0x120}}]}, @unspec=@TRACE={0x20}}, {{@ip={@remote, @multicast1, 0xff000000, 0xff000000, 'tunl0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x1, 'syz1\x00', 0x1}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x9, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x2dee, 0x2, 0x0, 0x0, 0x0) 2m22.35773545s ago: executing program 3 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="88000000000101040000003a0000000002000000240002801400018008000100e000000108000200ac1414270c00028005000100000000000800074001000007240001801400018008000100e000000108000200ac1414000c000280050001000000000024000e801500018008000100ac1414bb080002"], 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m22.232164765s ago: executing program 3 (id=306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syslog(0x3, &(0x7f00000007c0)=""/210, 0xd2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x27}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c804}, 0x8010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20010}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m21.477428155s ago: executing program 3 (id=308): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 2m21.154310261s ago: executing program 3 (id=312): r0 = socket(0xa, 0x3, 0x3a) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) io_submit(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x1, 0x0, 0x0, 0xfffffffc}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x8, 0x8, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x691, 0x0, 0x0, 0x4000]}}, 0x5c) 2m20.724058475s ago: executing program 3 (id=321): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 2m20.627602636s ago: executing program 39 (id=321): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x10fb}], 0x2, 0x0, 0x0, 0x0) 12.736584511s ago: executing program 2 (id=1344): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a00", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000001000ffff21bd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="10000000440001000a00fcffa9aaaaaaaabb0000080004"], 0x78}, 0x1, 0x0, 0x0, 0x8011}, 0x20040040) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 12.568254227s ago: executing program 2 (id=1346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x2000000}, 0x0) 12.441243912s ago: executing program 2 (id=1348): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000e00)=ANY=[@ANYBLOB='utF8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',map=normal,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,\x00'], 0x2, 0xa1a, &(0x7f0000000380)="$eJzs3c9vHOdfB/D3rO3EcaskbUMpUdtsUpK6rXFshyZEPUBibxIX/0C2IyXi0JTGQVEMhRakNkIilRAHRAUSiAu3ihOnSr3QC+oNbnDigIT6L1Sc8j35q5ldO2t77Y1dx07T18va3fnxmef5zI+dJzvZnSf8tCwfWTO2vFw9djh+/V/3IGOeYpcnvv/q6y/LxxcPciA9ebf4t6Q/ST3pTfJK0jc+MTc73aWge8mtJN8lRZKDab4+llsp/i7PPxr/LsU/l/Vu6sDjlkw3y/ys7ffxBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT6NifGJkZLQ4kMmZ6zfqTUl9g/GJudkiy8sb56ws0/Rt1et38e3fPNel3qQoH+nvX+nq+5Vjj2a/nKR+Kq82x16tOiRPf+4/9/LR917qra0sv1k2P8rBTYrtyYYN8+nn9+99uLS0+Mk2q+jfaW5PmauNmcn52cnpS1cb9cn52frF8+dHzl67Ml+/MjnVmL85v9CYro/PNS4tzM7VB8ffqo9evHiu3hi+OXt95urE8FRjZeKF3xgbGTlff3/49xqX5uZnZ86+Pzw/fm1yampy5moVU84uYy6UB+LvTi7UFxqXpuv1O3eXFs+ty2nDbiqDRrutSRk01i1obGRsbHR0bGz0i1bv2asTzr978d0LIyO9I+tkQ8QTOmh5uhzafDc/idM47Eit2f4nU5nMTK7nRuod/8YzkbnMZnqT+S0r7f/ps40t621v/1utfG/b7OPl06m83hrt36T93ySXvfv7NJ/nfu7lwyxlKYv5ZN8z2vhX7pFN5h36sWVfTSMzmcx8ZjOZ6VyqptRbU+q5mPM5n5F8kGs5kfnUcyWTmUoj87mZ+SykUR1R45lLI5eykNnMpZ7BjOet1DOai7mYc6mnkeHczGyuZyZXM5FLVSl3crfa7ue2yHE1aPRxgsa2CNrQmG+7/W9s/DckPzO7fxKHHVputf8HuocOju9FQgAAAMCu+7X/zOFjL/7H/yVFXquuy1+ZnGqM7HdaAAAAwC4qUiSvlk995ehrKXz+BwAAgGdNUf3GrkgykBPNoZVfQrkIAAAAAM+I6nY9r6c48WiCz/8AAADwjFm9x37zSsDqPXZv9KxM7XoX/mJo5fa/9dvN19utiFYRA1cmpxrD47NT743mTHWXgeqXBhtK60mKvurnB2/nZDPq5EAelK8Dj0os6+wvo0aH3xvN2znVWpHBN8qXNwY7RI41I99sRr7ZHtmTNZHnykgAeNad2qI9bt5jv3v7/3aGmhFDx6smv/d4hzZ4RMsKAE+L1T52ftHq0qxD+9+KeH2z9v83t/j8X0a8mDsnml8pGM5H+ThLuZ2htL5xcKJTqSu9ETS/hjDUdjWgsu5qwEDrKwv/faGWoQ3XA/pX17U9djFjGWpdETjUmt+6dlCsxhYrOZxrBvQ8gR0AAPvg1Jbt8OO1/0NdPv8P+EohADxVVnuwf4ID+72OAMBaWmkAAAAAAAAAAAAAAAAAAAAAAAAAAADYfY91A///OpMsLS0me9BZwOpA/3Yy3Hqglj3K+fP7vXu2fToO9CTZr9p/O9teqtzH+7OhDHQb2OcTEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHuiSHo6Ta8drF5Gkpzd65yepAf7ncBuqe9sseJhHuazHN7tdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfu5a9/+vpfn6XHNSemvJ6SS3kvz+fue4mx7udwL75o+q57b7/9eSviwX6W3u9hR94xNzs9Pl7i8OlvO//+rrL8tH97I39qpQdR9RW9e5RKuGtil9a5d6oVpqYGLx03t/9vGf1CcuVwfm5YUrUxPTV+d+51Hgy8U3zS4Q2rtBWMn3L07/+9+3TT7Qqvybck07W1/vlareiY31/mqnpTep9zHcXVocK2taaNxY+PM/vvtZ26wXczJ5YzAZXFvTH5aPTWo6uX57rlX8UPx1cTj/lFvV/i+3RrFclLvoSLX+h+7cXVoc/ujjpdurOf3lmpyO5kSS20n/4+d0ojqfdFQddbW+staRKqh8OtalvC21lTi6yXZ9oTpkBra1DvXN16HSZbu3MjrXMaN/+NOXcmbbe/pMlxo7Kn4o/re4lv/JX7X1/1Er9//pdHx3diiiimw7UtrnrXl71ZqR1ZqPtc/4YH2Zm74reQL+Nn+Q31rd/7W2839rX+3N+aitxs7vi2T774t/ObKhRXmkapGOrWuRWmefjgv0r+Z5rBm1SZ6/kneS3uPbOqO80+WMsvvv/1Z9Dwbz/3mg/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODpVyQ9nabXktNJjiY5Uo7Xk+X1MQ92UF9toNhJmrtmJzn/9BRtK7p2jYuHeZjPcng/sgIAAAAAAABg912e+P6rr78sH9X/x/fk12utOfWkN8nR4h/7xifmZqe7FNSX3Fr5L/3+7eVwq3x6/tH4d+XYK10W2t+vDwDAT9ovAwAA///ryW3i") r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r5 = fspick(r4, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000040)='map=off', 0x0, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x4c, r8, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc004}, 0x4008084) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004800}, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket(0x15, 0x5, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x15, 0x2000003, 'dh\x00', 0x0, 0x4, 0x76}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r9, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@private0, @in=@loopback}}, {{@in=@local}}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000080)) 10.403806047s ago: executing program 2 (id=1357): r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x7f}, 0x2012, 0x0, 0x80002, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x1, 0x0) mq_notify(r1, &(0x7f0000000200)={0x0, 0x23}) mq_timedsend(r1, 0x0, 0x0, 0x4, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@usrjquota}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x2, 0x9, 0x3ff}, {0x6, 0x7, 0x1, 0x5}]}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r7, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c000000101d1e0500"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4894) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000bc0)={{}, "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"}) sendmsg$FOU_CMD_DEL(r5, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4>\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf25020000000500030087000000050004000100000006000a004e240000050003003a000000"], 0x34}, 0x1, 0x0, 0x0, 0x4c804}, 0x20000000) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100ffff0900030073797a320000000014000480080006400000000008000140000000050900010073797a310000000030000000050a4f010000000000000000010020000c00024000000000000000010900010073797a310000000004000480140000001100010000000000000000000000000a"], 0xb8}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x68712c3f, 0x0}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r10, 0x3000) 10.236608694s ago: executing program 2 (id=1361): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, 0x0) writev(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r8 = dup2(r7, r7) write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0', [], 0xa, "8292eca6323326cc73608515712caf8554c99f20d74b0e46a394684746d6f355dab084363d59111100f147345926e9503a35ed2e8b9126b4fd9e894d4477034ae1bfd96f7c86"}, 0x51) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40080000, 0x800}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 9.835756934s ago: executing program 2 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r4, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)}], 0x1, &(0x7f00000009c0)=[{0xa0, 0x10c, 0x2, "c5af51dd62552373485ef7e3a37e4ebf2d25e24274376fbfabb624cb07eaaacdd7d4d25924fc1844dc801698eb7f82468c883d96f39193c6955c1d3e55783b40171455cd5fb7667f6c810865377a637b68c43d82c8c03013e2cc1644e66d71a7979dcd5fb799e85967e27fb5c43d16d9b8828a761457ec5937ed8918f2d62f0b446ea7dc9518392b9202d9c3"}, {0x38, 0x193, 0xfe0e, "18726e2fa166a9b6f5206d22ca25017383cb42a47511743109cd9202cebf1bb088d18d"}], 0xd8}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.835182334s ago: executing program 40 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x54, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$sock_linger(r1, 0x1, 0x3d, &(0x7f00000000c0)={0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/tcp\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r4, &(0x7f0000000000)={0x264, 0x1}, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg(r2, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0x4, 0x4001}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)}], 0x1, &(0x7f00000009c0)=[{0xa0, 0x10c, 0x2, "c5af51dd62552373485ef7e3a37e4ebf2d25e24274376fbfabb624cb07eaaacdd7d4d25924fc1844dc801698eb7f82468c883d96f39193c6955c1d3e55783b40171455cd5fb7667f6c810865377a637b68c43d82c8c03013e2cc1644e66d71a7979dcd5fb799e85967e27fb5c43d16d9b8828a761457ec5937ed8918f2d62f0b446ea7dc9518392b9202d9c3"}, {0x38, 0x193, 0xfe0e, "18726e2fa166a9b6f5206d22ca25017383cb42a47511743109cd9202cebf1bb088d18d"}], 0xd8}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) (async) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$urandom(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x110}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.352166362s ago: executing program 4 (id=1391): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000040000000000000000000000000000000400"/180], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x80) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0x23, 0x8, {0x8, 0x11, "8445390aeb12"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "572a959f"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xd21}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0x7, 0x45, "b3568f1b664c04a6d5413f289db89388030a8452e90c4873521048100641616f273a1c7c2876546ed9aaecf3bc3fb6ce7145cb22356b87a917a816cf9c612181c80b919859"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xa7, "0a888dea9a7b53770e81070bed01b68f0bd0af7d6c9c68be5749ab7095befe378271383bc631e2263a480408fb41c6af25cef04c5e0bae4c7760cb7f74efae3de8744721d5a1691439563ed1df9515a76dd2e72d5d685603605128715522c4a984ced7971becaeb8991af9a33cf9f33d2c0ae1a4ce484bef9d98c0b485199e6289f0f63474df8b278fe116461a742b182cd08cec4fb769200d876df048ce9edbcfe2c10a2fba7c"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xc}}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 6.248792132s ago: executing program 6 (id=1392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000004000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000000000000000000000000000000040000000000000000000200"], 0xc4}}, 0x4c050) 6.132022679s ago: executing program 6 (id=1393): r0 = socket(0x1, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000980)={'gre0\x00', 0x0, 0x1, 0x8000, 0x80000000, 0x10001, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x67, 0x0, 0x81, 0x29, 0x0, @empty, @remote}}}}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="010000000100006d000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000140600fe8000000000000000000000000000aafe8000000000000000000000100000aa80004001ac4fbe0eb1c434f4a254192d38f5e3e3203e0900f7e56894b323f8f624edaf4cb8d389d6ce5b32442bccbd29731125887335d21d8977b6e0ead9277156968107dcb40cbc89d45be75336c8e6fa01fd8a0200678252bb576fe0dcfab1bdf7f6a739f06614979aa9530b2e8e95b3b46c50981d5988af96c17081", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5042010090780000"], 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r9], 0x50}}, 0x2) 5.986047339s ago: executing program 0 (id=1394): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x2041) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r1, &(0x7f00000004c0)="d7", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e22, 0x6, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r1, 0x84, 0x16, 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) 5.838949681s ago: executing program 6 (id=1395): r0 = socket(0xb, 0x80000, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) (async) r6 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023896) (async) sendfile(r6, r7, 0x0, 0x20000023896) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x2c}}, 0x24004000) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, 0x0, 0x0, 0x0) (async) sendmmsg(r8, 0x0, 0x0, 0x0) r9 = syz_usb_connect(0x4, 0x5b7, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x54, 0xa8, 0x2a, 0x20, 0x471, 0x2182, 0xe7d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5a5, 0x3, 0x80, 0x9, 0x80, 0x10}}]}}, &(0x7f0000000180)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x7, 0x8, 0x0, 0x20, 0x5}, 0x30, &(0x7f0000000100)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "b0406c2ccaa407323ba3c23cb55fe209"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "2c273458a52360c90812b97d3e0f1d25"}]}, 0x2, [{0xe4, &(0x7f0000001240)=ANY=[@ANYBLOB="e403727e7171f68c2af0997eea0080b21caf1628165380bfc5995d937a05d6d70bdda991cda7fcd1a3db192cd62eb7677ad10ede2d23d47489d341d9ae5e1365e38ac1f0e376d7423a1827378811f9e7036e89285d7ea24ece6cdfc462f7b644e484f1aa95ee226ba7413d918b30e4c2762e48fb31217325bda12fea2b3a26e4d14cd91f8adbe66b9b2a8caa80a3b76e486805e3ccd04856e9924b352dd14aa8ebad602a6d9ade78441f9901cc526ecdeb042df206cc7f2fb10f1ce105f3078c91d5876447cab858610cd3b960a73aeb5be5b07183cdd278cec80c107fe4bd2f00d805ae"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x413}}]}) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x4, 0x56f, &(0x7f0000000b00)="$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") (async) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x4, 0x56f, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f00000061c0), r10) sendmsg$FOU_CMD_GET(r10, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x44490) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) (async) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_disconnect(r9) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) (async) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000080)='system_u:object_r:v4l_device_t:s0\x00', 0x22, 0x0) 5.258671945s ago: executing program 4 (id=1396): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000200), 0x6, 0x5af, &(0x7f0000000dc0)="$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") r1 = openat(r0, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000140)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 5.020017408s ago: executing program 0 (id=1397): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a00", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x68}}, 0x20000880) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000001000ffff21bd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="10000000440001000a00fcffa9aaaaaaaabb0000080004"], 0x78}, 0x1, 0x0, 0x0, 0x8011}, 0x20040040) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 4.97771634s ago: executing program 4 (id=1398): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x28, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$unix(0x1, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 4.653592455s ago: executing program 6 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x5, 0x9da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x80, @mcast2, 0xffffffff}, 0x15) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pwritev2(r3, 0x0, 0x0, 0x0, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x181242, 0x16a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000740)={0xc, 0xffffffffffffffff, 0x3, 0x0, 0x9, 0x4}) 4.17557799s ago: executing program 0 (id=1401): socket(0x10, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000fdff1100010100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 3.962744008s ago: executing program 0 (id=1402): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x101d0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_bp={0x0, 0x8}, 0x100882, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, 0x0) writev(r6, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x3) r8 = dup2(r7, r7) write$binfmt_script(r7, &(0x7f0000000800)={'#! ', './file0', [], 0xa, "8292eca6323326cc73608515712caf8554c99f20d74b0e46a394684746d6f355dab084363d59111100f147345926e9503a35ed2e8b9126b4fd9e894d4477034ae1bfd96f7c86"}, 0x51) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40080000, 0x800}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 3.403746337s ago: executing program 6 (id=1404): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140097006c07010033d43afffe800000000000000000000000000010ff020000000000000000000000000001"], 0x340a) 3.384653743s ago: executing program 4 (id=1405): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xe}, 0x106200, 0x10004, 0x4, 0x5, 0x9b41, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x27, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x5b, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route(r0, 0x0, 0x8000002) syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = gettid() r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffbfffff4]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r1, 0x8) r3 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6(0xa, 0x1, 0x0) dup2(r4, r4) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x4, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="697d9c66dc25a30a44a4ce2c7894220cbeceff6b7b85bcbfd5764701"], 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f0000000080)) mq_timedsend(r3, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x6, 0x0) mq_timedreceive(r3, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 3.172592881s ago: executing program 9 (id=1406): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0xc000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000000000002c00000008005800030000000e0001006e65746465a87eadb10000000f0002006e657464657673696d3000000800030003002000"], 0x44}}, 0x0) 2.896157856s ago: executing program 9 (id=1407): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x2, 0x4, 0x8, 0xf}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffb0}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.895148576s ago: executing program 9 (id=1408): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='nouid32', 0x631441, &(0x7f0000000040)={@_ha_fsid={[0x1]}, {0x8, 0xc18f, 0x2, 0x9}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x1000}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r8 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0xf88ce2e0571bc7ea}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "000200"}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x21c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x120, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xb0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x94, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "c5442989fca8e8df9dbf151e185f4493e2926ae15aa58fbb0fef00de0029e7bc6f7d551ebc91d4ff821a5369e0fc87d7234adbd24cc2f0f82005b3ffb2331b31d9c99a05133bf75269b73b5040ba5507f2a0f730c1430e139f27d3"}]}, @NFT_MSG_NEWSETELEM={0xb4, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x94, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}, {0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x24, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_LIMIT_FLAGS={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0xe50, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xe34, 0x3, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @byteorder={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4c}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0xec, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_LOG_SNAPLEN={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '\\\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x50, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000000000000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xb}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}}}, {0x2c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @rt={{0x7}, @void}}, @NFTA_SET_ELEM_KEY={0xd8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xbe, 0x1, "69c44f1b3a948cee6a4316659c12e670dac3f8611947bb32c70381cc00656d7bc4ccf1cdc797c564071fc5bb515aed4b6ce039bd204ee7cc78c1790551a58d42cad610d493d13b182bffc103bc93739c26e9e7855ca095ee488c721d9602be4b9d6dd2bed7eeb9e091589b02bcfd8fd067f0ff0762e4e99bc0c69288dcebc07ad10390942be1515120867ad63bd9e4dc551fefb1fea02f1099cf28c126d80d2dcc07868abfedd554b35bffa7c1110d3d001490d262c68a8f7a64"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa4000000000}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}, {0x4}, {0x450, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3e8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "0ce1b979f9dcba88f4cf7cad0e8f6dc184c51f2b7321a04c9bf7e652b866c0fe4e3ebfd547944476fe4ecf5f632ea4c9db0c38ebb22f01e4bb2119a177349b33e48de831597084262413ecfda74a10ed215339ca023272f4b208ac69c9589d8a75f455716033ebfadf9952095f735f4ff369d64593f94ae0e435"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x10, 0x1, "eb4c12567a8ce55564e7fe4c"}, @NFTA_DATA_VALUE={0xed, 0x1, "5e7d94f22e139e0c5ed398f31d2940806823bf775c174655231de2df3fe6c3089789226e1c3c9f712beaa183cebbcd9aa7507ce834e2b5390c7c97cd13f2b69e8bacd8d4846dbb27274dd68ca145a2dcd9b40a82041af888e13f6a64a65eb43f379b5cafe22635cbc3a7cc65a47ae519a1c40bcb3cb66452e00a246dd831e092230db5cce96ec36e142fea36c44c9920bc26a3987ad884c5b3998c74f53e1ff190931d0f5392cb121ca5c740dcfb311f0d178db1e89f5758fe4a3549ab17308a04dfb1b1eb8f942d4b15b953f29b93e4995a4478faaf203f450176761270789baf2e94b5824ed0d462"}, @NFTA_DATA_VALUE={0xf0, 0x1, "4e92d11322f08bf79a37cdc0eb24efbf474cba188b9a22557977d0afeecbc42c1554723c26684a3f287609f00f3c2eb3512318e9a651eedc8a29c9534f3b8391ba4cef395248c05b5cd66911529569fab83829786c080501b81c33a8f1c432f33f6e931d6add406c9b90ba82b741453e22ef5ab1019fd88aafef58f39a472ce844b0900ef44539fa06ab03797cec24072a058ca003df9f1225164039383b4d2e4550389f5748255846822bc5cc2a7f659b02f20c04273e6aa8f583b4fcbef16055b02d8fd26b5b5e11c53a8e0f5ef11b292a73e7c8506e8e94b4d45d02221d7581ed76dbd408796a05f633f2"}, @NFTA_DATA_VALUE={0x3a, 0x1, "8c47da32e952e638e8bb9c6b033f08fb2b0e8a5aaa83f040035baed5c40ee74541fc67dbdbb784f792bff68956589c3c0015d7b7d66f"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "e5ae30e0bca138d7f4b32c160eba397e5c6f01025202b734c0d0797f14d4831f753475d817d1604ab7ff9d60b45faf2a711e1e2a02c4458b547e31ecbd2ddee969005ee811e18f06e395982d169d20df33f679a55d90ba408c56b31ed800bb7257e4ebb985d431891f66725758042c23a8de15e4d724be3635e64feae808b989f218283384cab0574183add1dbba01e06ebd423f4c2f668205bfbd95ee9ea308c1385366e460ae9cea0703dcc25a8b861a595af21a4f674aa2d73e3d8eea02f6695ed6950bf338a5f0fb6ce627202f405a50b07686bee1f8d7b02842d9a56038a7da2e464004bb079f2eead7"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_USERDATA={0x55, 0x6, 0x1, 0x0, "a3751b51bd03864c7d7b4ccb6e28ada0e182c6a645afd10d19e52daeccd23732800b357fcdd2ff2b31e5aa25f04c864738babeaf7b8174d5e694d81ea2ad0d4c2bf2ebb9f1290d24c5044c809358b86712"}]}, {0x7a8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x168, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x94, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_KEY={0x2b0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "abf3a7d224330e8c57916e10498f391dc391dad7afd8127d82624800d12efb8ce99b"}, @NFTA_DATA_VALUE={0x97, 0x1, "36eba8738de8de4cff1d5ea48934c21ca13be0a4fd2beba5bd7b3782da2517a229c5300e90e69b435295c7e88a2c2ffe87843bced357c2ba7ad151fbee6cc3af1d280b04f0a09b8c91727b1d2e6888eddfbfe7e73d49ca10e22ce21cc7b17b37c236774ec16f22949edaf96d3c2a144932f3bb0303ddfef627ef7ab64ba862f52a6ece0752716a9e93966919ce9f6fa03a31a1"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xa6, 0x1, "235d2a9f5547affc9c684082aa8e50afeac7e75239c62942489a70ef5dd35b1166b0fd0e05e7b5f17c73f634fa6b0e28fa16579b87dc0d7c3bbdc384b3272b32075619981fab7a46471640e992be641fb29bb07c85bd243d706d1c3a2adf52c190361ba5c26362bf60912bf88003f8fd6bc5694605718f1e8ed2d3d1b1d99ee446e59df1147958a1e734821f44cf0b1af8130565c1cc626402371dca71171b058661"}, @NFTA_DATA_VALUE={0x4c, 0x1, "bc8ec3e7de15624e434077fce38b196378d48e830078abe8369fcc79240be8253ea7537621b35429c6d290c89a17942203125037f1b5de65422baaf4408674ac4bf8d227c8ad198b"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6d, 0x1, "4abdcab7f32f1255bbd25d0f0f4fddc4fa8f18e1a63a7b0e2101a1176245b2fcd1b2fb49d7eeb7c1242205b0335645cbae7eedceabd2eab53dd44ae5c74b38eff96da305a099cbfb8089ec5934650250cfbc61616ca2e50030a5a8bb9e59798baeeb1e68636e21a69f"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x380, 0xb, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5a}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xff}]}}}, {0x54, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}]}}}, {0x284, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x274, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_BITWISE_DATA={0x268, 0x7, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "bac4f37ce7572e1854c409523baab8f5ba871903f1834cf220973edbd92ab37dec74ac799699f0b72f3dea0ffad072e52c2bc545f7260aa6ab8742a698ec742b762ddaa05b55f261688d0d5a25c40d22316a35c7fdd415ad290d09a30bc0df59ce664f2994eccd5d33f9038ee4d22030bc8de26f6c548dc3b5896c97277bef932b7c81a5411294d5c800c2e6a286fdf6f732a45835d0bc7aab48017bac00989d3cdbc2ad560ff54a29dfb9e728be14d77c67cd91ac3af20cdf1459573f9315a54c7798219435cbe107d68d1d58c653a49ffa5e169402056e5c1b4dd020980221634e11fa61bcf2589cc82458136baa"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xf9, 0x1, "638db302c0dfb0598e85839a8ddddc805823e80e983a8c1f1fd175dd1e3e558f10a8c998fa1939d6534dd26480a639f515616a9f638f9433b93148cf6b717299a049b19c0d941c45b5580396cb3365ea0426d0d108466cdc096570cfb6d3487cc4427b2919935e807cdd792154d358c28f3b6d04e28c208da532c042759f68d1ab3170a88e828bbd377eaa04c29701f75b85a7a8d0d15622d6611e338b341baa71f925e1d4f0757e2d82a3e0211bb858504e6bce83ba268b8f35a4886b4e99609b448f354a87ec5a93f1c42706fbda423bee408b76efc96a11a2664f6b2595745e20a05461cb7ea35fdda6ce3869f1ac4b47a792fa"}]}]}}}, {0x5c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x8c85d6634e6cf1b2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0xf8, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x102, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9a6b}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWCHAIN={0x64, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x173}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x13d0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$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") 2.801992337s ago: executing program 6 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000007d9000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.733432774s ago: executing program 41 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000007d9000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.603031818s ago: executing program 5 (id=1411): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f, 0x1200}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_FLAGS={0x8, 0xd, 0x8001}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_TTL={0x5, 0x8, 0x69}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20000840) 2.440160515s ago: executing program 5 (id=1412): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "090140", 0x16, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00@\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) 2.387921565s ago: executing program 5 (id=1413): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000040000000000000000000000000000000400"/180], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x80) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0x23, 0x8, {0x8, 0x11, "8445390aeb12"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "572a959f"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xd21}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0x7, 0x68, "b3568f1b664c04a6d5413f289db89388030a8452e90c4873521048100641616f273a1c7c2876546ed9aaecf3bc3fb6ce7145cb22356b87a917a816cf9c612181c80b9198598415f4a495a0a551fb8d84703480e871fc127c84a3112b66115c6cf8cd24bdc0ac4143"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xa7, "0a888dea9a7b53770e81070bed01b68f0bd0af7d6c9c68be5749ab7095befe378271383bc631e2263a480408fb41c6af25cef04c5e0bae4c7760cb7f74efae3de8744721d5a1691439563ed1df9515a76dd2e72d5d685603605128715522c4a984ced7971becaeb8991af9a33cf9f33d2c0ae1a4ce484bef9d98c0b485199e6289f0f63474df8b278fe116461a742b182cd08cec4fb769200d876df048ce9edbcfe2c10a2fba7c"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xc}}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 1.955869859s ago: executing program 0 (id=1414): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) close(0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000040000000000000000000000000000000400"/180], 0xfc}}, 0x0) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x80) r5 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, &(0x7f0000000040)={0x20, 0x23, 0x8, {0x8, 0x11, "8445390aeb12"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xb, "572a959f"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xd21}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000300)={0x0, 0x7, 0x68, "b3568f1b664c04a6d5413f289db89388030a8452e90c4873521048100641616f273a1c7c2876546ed9aaecf3bc3fb6ce7145cb22356b87a917a816cf9c612181c80b9198598415f4a495a0a551fb8d84703480e871fc127c84a3112b66115c6cf8cd24bdc0ac4143"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0x20, 0x1, 0xa7, "0a888dea9a7b53770e81070bed01b68f0bd0af7d6c9c68be5749ab7095befe378271383bc631e2263a480408fb41c6af25cef04c5e0bae4c7760cb7f74efae3de8744721d5a1691439563ed1df9515a76dd2e72d5d685603605128715522c4a984ced7971becaeb8991af9a33cf9f33d2c0ae1a4ce484bef9d98c0b485199e6289f0f63474df8b278fe116461a742b182cd08cec4fb769200d876df048ce9edbcfe2c10a2fba7c"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0xc}}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) 1.50499836s ago: executing program 5 (id=1415): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x28, 0x5, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x2, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x28, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000015) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$unix(0x1, 0x1, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 1.400096729s ago: executing program 9 (id=1416): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003050000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a00", @ANYRES32], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x68}}, 0x20000880) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="780000001000ffff21bd7000f8dbdf2500000000", @ANYRES32, @ANYBLOB="385a03002b92050028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="10000000440001000a00fcffa9aaaaaaaabb0000080004"], 0x78}, 0x1, 0x0, 0x0, 0x8011}, 0x20040040) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.295826968s ago: executing program 4 (id=1417): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$phonet_pipe(0x23, 0x5, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xfffffffffffffd5b) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x0, 0x0, 0x48050}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="11", 0x1}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}], 0x20, 0x400e815}}], 0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffd5b) (async) sendmmsg$unix(r1, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, 0x0, 0x0, 0x48050}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="11", 0x1}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, 0xee01}}}], 0x20, 0x400e815}}], 0x2, 0x4) (async) pipe(&(0x7f0000000080)) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @redirect={0x5, 0x1, 0x0, @multicast2, {0x11, 0x4, 0x0, 0x28, 0x4, 0x0, 0x0, 0x2, 0x89, 0x0, @rand_addr=0x64010101, @multicast2=0xe0000001, {[@timestamp_addr={0x44, 0x1c, 0x95, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2000}, {@private=0xa010101, 0x401}, {@local, 0x3}]}, @timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x5, [{@rand_addr=0x64010100, 0x9}, {@private=0xa010101, 0xfffffffd}]}]}}}}}}}, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) (async) splice(r0, 0x0, r5, 0x0, 0x39000, 0x0) (async) 1.267577232s ago: executing program 5 (id=1418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x50) 1.189577197s ago: executing program 5 (id=1419): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) msgsnd(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03000003000000000409276519"], 0x1a, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0xff, 0x9, 0xa, 0x20, 0x5}, 0x20) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4}, 0x9805, 0x9, 0x7fd, 0x6, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000240)={0x3, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x7, 0xa, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x3}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x7}, 0x8814) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffff000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x9, 0xa, 0x20005, 0xb, 0x0, 0x8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000200), 0xfc, 0x56f, &(0x7f0000003780)="$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") 1.143939677s ago: executing program 4 (id=1420): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f00000001c0)={0xffbfff41, 0x4000403, 0x68, 0x17, 0x8, "ffffff7f87680000000000001000007fcb3678", 0x9, 0x202}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)=0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0xfffffffffffffffe, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x2642, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r8, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) 1.05466241s ago: executing program 9 (id=1421): process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f4070009042b1f00000000000000000000000800040001000000", 0x24) 1.037768736s ago: executing program 0 (id=1422): syz_usb_connect$uac1(0x6, 0x72, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3040, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xb1, 0x30, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xd, 0x1, 0x55, {0x7, 0x25, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0xfd, 0x2, {0x7, 0x25, 0x1, 0x8, 0x8, 0x3}}}}}}}}]}}, 0x0) close(0x3) (async) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x4d}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) setpriority(0x3, 0xffffffffffffffff, 0x100000000) 0s ago: executing program 9 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) kernel console output (not intermixed with test programs): fe488c9c68 [ 162.047680][ T8397] [ 162.048236][ T8397] Mem-Info: [ 162.253283][ T8397] active_anon:11763 inactive_anon:2 isolated_anon:0 [ 162.253283][ T8397] active_file:22321 inactive_file:2472 isolated_file:0 [ 162.253283][ T8397] unevictable:0 dirty:161 writeback:0 [ 162.253283][ T8397] slab_reclaimable:3801 slab_unreclaimable:20580 [ 162.253283][ T8397] mapped:29574 shmem:1500 pagetables:1888 [ 162.253283][ T8397] sec_pagetables:0 bounce:0 [ 162.253283][ T8397] kernel_misc_reclaimable:0 [ 162.253283][ T8397] free:1872545 free_pcp:9149 free_cma:0 [ 162.298853][ T8397] Node 0 active_anon:47052kB inactive_anon:8kB active_file:89284kB inactive_file:9888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118296kB dirty:644kB writeback:0kB shmem:6000kB kernel_stack:4304kB pagetables:7552kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 162.326611][ T8397] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.357258][ T8397] lowmem_reserve[]: 0 2879 7857 7857 [ 162.362871][ T8397] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 162.403955][ T8397] lowmem_reserve[]: 0 0 4978 4978 [ 162.409665][ T8397] Node 0 Normal free:4530256kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46936kB inactive_anon:8kB active_file:89284kB inactive_file:9888kB unevictable:0kB writepending:644kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:33344kB local_pcp:10392kB free_cma:0kB [ 162.444085][ T8397] lowmem_reserve[]: 0 0 0 0 [ 162.470493][ T8397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.503175][ T8413] loop0: detected capacity change from 0 to 1024 [ 162.503454][ T8397] Node 0 [ 162.531507][ T8413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.562682][ T28] audit: type=1400 audit(1772525079.049:842): avc: denied { kexec_image_load } for pid=8410 comm="syz.9.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 162.566414][ T8397] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) [ 162.606328][ T8421] netlink: 'syz.4.984': attribute type 5 has an invalid length. [ 162.606412][ T8397] 716*4096kB (M) = 2944564kB [ 162.631933][ T8397] Node 0 Normal: 1120*4kB (UME) 1362*8kB (UME) 948*16kB (UME) 602*32kB (UM) 383*64kB (UME) 306*128kB (UME) 173*256kB (UME) 139*512kB (UME) 120*1024kB (UM) 84*2048kB (UME) 978*4096kB (UM) = 4529744kB [ 162.660770][ T8397] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 162.672250][ T8424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.984'. [ 162.681674][ T8397] 25646 total pagecache pages [ 162.692995][ T8397] 8 pages in swap cache [ 162.705394][ T8429] loop6: detected capacity change from 0 to 512 [ 162.710284][ T8397] Free swap = 124712kB [ 162.746769][ T8429] EXT4-fs: inline encryption not supported [ 162.747144][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.759698][ T8429] ext4: Bad value for 'barrier' [ 162.764707][ T8397] Total swap = 124996kB [ 162.772140][ T8397] 2097051 pages RAM [ 162.777399][ T8397] 0 pages HighMem/MovableOnly [ 162.803266][ T8397] 81603 pages reserved [ 162.881600][ T8433] loop4: detected capacity change from 0 to 8192 [ 162.922867][ T28] audit: type=1400 audit(1772525079.409:843): avc: denied { create } for pid=8432 comm="syz.4.986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key_socket permissive=1 [ 162.997049][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.6.991'. [ 163.018922][ T8443] hub 9-0:1.0: USB hub found [ 163.023879][ T8443] hub 9-0:1.0: 8 ports detected [ 163.103007][ T8453] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 163.145051][ T8455] loop6: detected capacity change from 0 to 512 [ 163.216911][ T8455] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.246496][ T8465] netlink: 'syz.4.999': attribute type 5 has an invalid length. [ 163.262620][ T8455] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.283385][ T8465] ip6erspan0: mtu less than device minimum [ 163.291518][ T5385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.326741][ T8472] loop6: detected capacity change from 0 to 512 [ 163.376314][ T8472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.414689][ T8472] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.439297][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1004'. [ 163.457695][ T8472] vlan2: entered promiscuous mode [ 163.473302][ T8472] vlan2: entered allmulticast mode [ 163.480941][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1004'. [ 163.500242][ T8472] hsr_slave_1: entered allmulticast mode [ 163.548472][ T5385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.621666][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1006'. [ 163.671193][ T8486] hub 9-0:1.0: USB hub found [ 163.686086][ T8486] hub 9-0:1.0: 8 ports detected [ 163.697186][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 163.727914][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1005'. [ 163.788255][ T8490] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 163.796088][ T28] audit: type=1326 audit(1772525080.279:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 163.861990][ T8490] audit: out of memory in audit_log_start [ 163.891206][ T28] audit: type=1326 audit(1772525080.279:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 164.147917][ T8510] loop6: detected capacity change from 0 to 1024 [ 164.175236][ T8510] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 164.267112][ T8508] loop0: detected capacity change from 0 to 8192 [ 164.286069][ T28] audit: type=1326 audit(1772525080.279:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9970e4cfce code=0x7ffc0000 [ 164.333359][ T8513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8513 comm=syz.6.1014 [ 164.363909][ T28] audit: type=1326 audit(1772525080.279:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8489 comm="syz.6.1009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9970e4cfce code=0x7ffc0000 [ 164.497373][ T8513] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1014'. [ 164.518510][ T8519] wireguard0: entered promiscuous mode [ 164.524018][ T8519] wireguard0: entered allmulticast mode [ 164.536000][ T8513] netlink: 'syz.6.1014': attribute type 10 has an invalid length. [ 164.557613][ T8513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.597646][ T8513] team0: Port device bond0 added [ 164.645161][ T8520] loop4: detected capacity change from 0 to 512 [ 164.695381][ T8520] EXT4-fs: Ignoring removed nobh option [ 164.732100][ T8530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8530 comm=syz.2.1021 [ 164.780715][ T8530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.794896][ T8520] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #11: comm syz.4.1017: unexpected EA_INODE flag [ 164.840212][ T8520] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 164.845975][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 164.861619][ C0] EXT4-fs (loop4): initial error at time 1772525081: ext4_orphan_get:1391: inode 11 [ 164.871054][ C0] EXT4-fs (loop4): last error at time 1772525081: ext4_orphan_get:1391: inode 11 [ 164.882063][ T8520] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1017: couldn't read orphan inode 11 (err -117) [ 164.894905][ T8520] loop4: lost filesystem error report for type 5 error -117 [ 164.901912][ T8520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.005845][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.022088][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.078965][ T8539] bond1: option tlb_dynamic_lb: invalid value (32) [ 165.101256][ T8539] bond1 (unregistering): Released all slaves [ 166.311619][ T8567] EXT4-fs: Ignoring removed nobh option [ 166.336056][ T8567] EXT4-fs: Ignoring removed bh option [ 166.426021][ T8567] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 166.434537][ T8567] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.1031: invalid indirect mapped block 256 (level 1) [ 166.452027][ T8567] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 166.452258][ T8567] EXT4-fs (loop9): Remounting filesystem read-only [ 166.461475][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 166.461490][ C1] EXT4-fs (loop9): initial error at time 1772525082: ext4_free_branches:1023: inode 13 [ 166.461543][ C1] EXT4-fs (loop9): last error at time 1772525082: ext4_free_branches:1023: inode 13 [ 166.500087][ T8567] EXT4-fs (loop9): 1 truncate cleaned up [ 166.534555][ T8567] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.615813][ T8581] EXT4-fs (loop9): changing journal_checksum during remount not supported; ignoring [ 166.783538][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 166.783557][ T28] audit: type=1400 audit(1772525083.269:859): avc: denied { setopt } for pid=8582 comm="syz.6.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 166.816756][ T28] audit: type=1400 audit(1772525083.299:860): avc: denied { mount } for pid=8582 comm="syz.6.1036" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 166.948779][ T8586] xfrm0 speed is unknown, defaulting to 1000 [ 166.957314][ T4937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.980652][ T28] audit: type=1400 audit(1772525083.339:861): avc: denied { map } for pid=8582 comm="syz.6.1036" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 167.029753][ T8596] x_tables: ip_tables: hashlimit.1 match: invalid size 56 (kernel) != (user) 616 [ 167.066537][ T28] audit: type=1326 audit(1772525083.549:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 167.141157][ T8597] batman_adv: batadv0: Adding interface: dummy0 [ 167.144822][ T28] audit: type=1326 audit(1772525083.549:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 167.150658][ T8597] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.216162][ T8597] batman_adv: batadv0: Interface activated: dummy0 [ 167.238102][ T28] audit: type=1326 audit(1772525083.549:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 167.258546][ T8600] batadv0: mtu less than device minimum [ 167.271619][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.282679][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.288480][ T28] audit: type=1326 audit(1772525083.549:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 167.294195][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.327291][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.338339][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.349348][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.360253][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.371058][ T8600] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 167.378591][ T28] audit: type=1326 audit(1772525083.549:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 167.430056][ T8603] xfrm0 speed is unknown, defaulting to 1000 [ 167.453350][ T8583] xt_CT: You must specify a L4 protocol and not use inversions on it [ 167.496763][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 167.508655][ T28] audit: type=1326 audit(1772525083.549:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 167.676783][ T28] audit: type=1326 audit(1772525083.549:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8589 comm="syz.2.1039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 168.057319][ T8616] FAULT_INJECTION: forcing a failure. [ 168.057319][ T8616] name failslab, interval 1, probability 0, space 0, times 0 [ 168.078740][ T8616] CPU: 1 UID: 0 PID: 8616 Comm: syz.0.1045 Not tainted syzkaller #0 PREEMPT(full) [ 168.078846][ T8616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.078862][ T8616] Call Trace: [ 168.078870][ T8616] [ 168.078878][ T8616] __dump_stack+0x1d/0x30 [ 168.078954][ T8616] dump_stack_lvl+0x95/0xd0 [ 168.078982][ T8616] dump_stack+0x15/0x1b [ 168.079004][ T8616] should_fail_ex+0x263/0x280 [ 168.079099][ T8616] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 168.079138][ T8616] should_failslab+0x8c/0xb0 [ 168.079164][ T8616] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 168.079266][ T8616] ? debugfs_alloc_inode+0x34/0x40 [ 168.079372][ T8616] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 168.079408][ T8616] debugfs_alloc_inode+0x34/0x40 [ 168.079450][ T8616] alloc_inode+0x40/0x170 [ 168.079472][ T8616] new_inode+0x1d/0xe0 [ 168.079537][ T8616] __debugfs_create_file+0x97/0x2b0 [ 168.079564][ T8616] debugfs_create_file_full+0x3f/0x60 [ 168.079589][ T8616] ? __pfx_macsec_setup+0x10/0x10 [ 168.079627][ T8616] ref_tracker_dir_debugfs+0x10e/0x220 [ 168.079661][ T8616] alloc_netdev_mqs+0x1a7/0xa40 [ 168.079698][ T8616] rtnl_create_link+0x239/0x720 [ 168.079725][ T8616] rtnl_newlink_create+0x174/0x650 [ 168.079776][ T8616] ? security_capable+0x7b/0x90 [ 168.079825][ T8616] ? netlink_ns_capable+0x86/0xa0 [ 168.079857][ T8616] rtnl_newlink+0x10a0/0x1330 [ 168.079979][ T8616] ? strlen+0x19/0x40 [ 168.080032][ T8616] ? __memcg_slab_free_hook+0x154/0x250 [ 168.080068][ T8616] ? __rcu_read_unlock+0x4e/0x70 [ 168.080140][ T8616] ? avc_has_perm_noaudit+0xab/0x130 [ 168.080290][ T8616] ? cred_has_capability+0x224/0x2a0 [ 168.080368][ T8616] ? selinux_capable+0x31/0x40 [ 168.080395][ T8616] ? security_capable+0x7b/0x90 [ 168.080420][ T8616] ? ns_capable+0x7c/0xb0 [ 168.080483][ T8616] ? __pfx_rtnl_newlink+0x10/0x10 [ 168.080523][ T8616] rtnetlink_rcv_msg+0x64b/0x720 [ 168.080628][ T8616] netlink_rcv_skb+0x123/0x220 [ 168.080658][ T8616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 168.080695][ T8616] rtnetlink_rcv+0x1c/0x30 [ 168.080733][ T8616] netlink_unicast+0x5c0/0x690 [ 168.080803][ T8616] netlink_sendmsg+0x5c8/0x6f0 [ 168.080844][ T8616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.080880][ T8616] ____sys_sendmsg+0x5af/0x600 [ 168.081042][ T8616] ___sys_sendmsg+0x195/0x1e0 [ 168.081106][ T8616] __x64_sys_sendmsg+0xd4/0x160 [ 168.081157][ T8616] x64_sys_call+0x194c/0x3020 [ 168.081189][ T8616] do_syscall_64+0x12c/0x370 [ 168.081216][ T8616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.081239][ T8616] RIP: 0033:0x7f408e6dc799 [ 168.081255][ T8616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.081349][ T8616] RSP: 002b:00007f408d12f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.081369][ T8616] RAX: ffffffffffffffda RBX: 00007f408e955fa0 RCX: 00007f408e6dc799 [ 168.081433][ T8616] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 168.081448][ T8616] RBP: 00007f408d12f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.081464][ T8616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.081479][ T8616] R13: 00007f408e956038 R14: 00007f408e955fa0 R15: 00007fff489f6a38 [ 168.081504][ T8616] [ 168.081872][ T8616] debugfs: out of free dentries, can not create file 'netdev@ffff88811e225560' [ 168.425368][ T8616] bridge0: entered promiscuous mode [ 168.433911][ T8616] bridge0: port 3(macsec1) entered blocking state [ 168.440703][ T8616] bridge0: port 3(macsec1) entered disabled state [ 168.447531][ T8616] macsec1: entered allmulticast mode [ 168.452901][ T8616] bridge0: entered allmulticast mode [ 168.459389][ T8616] macsec1: left allmulticast mode [ 168.466087][ T8616] bridge0: left allmulticast mode [ 168.471980][ T8616] bridge0: left promiscuous mode [ 168.576358][ T8620] __nla_validate_parse: 3 callbacks suppressed [ 168.576461][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1046'. [ 168.600381][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 168.605490][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1046'. [ 168.621115][ T8623] hub 9-0:1.0: USB hub found [ 168.627693][ T8620] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1046'. [ 168.636910][ T8623] hub 9-0:1.0: 8 ports detected [ 168.689145][ T8627] wireguard0: entered promiscuous mode [ 168.722713][ T8627] wireguard0: entered allmulticast mode [ 168.799872][ T8629] set_capacity_and_notify: 3 callbacks suppressed [ 168.799890][ T8629] loop2: detected capacity change from 0 to 8192 [ 169.135371][ T8652] netlink: 'syz.4.1055': attribute type 14 has an invalid length. [ 169.200046][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1055'. [ 169.340095][ T8652] bond0: option xmit_hash_policy: invalid value (8) [ 169.701009][ T8670] xfrm0 speed is unknown, defaulting to 1000 [ 170.048741][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1061'. [ 170.145870][ T8680] hub 9-0:1.0: USB hub found [ 170.210553][ T8680] hub 9-0:1.0: 8 ports detected [ 170.288622][ T8685] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.351297][ T8688] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 170.364159][ T8688] hub 9-0:1.0: USB hub found [ 170.369942][ T8688] hub 9-0:1.0: 8 ports detected [ 170.484632][ T8700] loop2: detected capacity change from 0 to 128 [ 170.496037][ T8700] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 170.519233][ T8700] ext4 filesystem being mounted at /240/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 170.629820][ T3314] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.639268][ T8697] loop9: detected capacity change from 0 to 8192 [ 170.654809][ T8703] loop0: detected capacity change from 0 to 8192 [ 170.677336][ T8697] FAULT_INJECTION: forcing a failure. [ 170.677336][ T8697] name failslab, interval 1, probability 0, space 0, times 0 [ 170.690463][ T8697] CPU: 1 UID: 0 PID: 8697 Comm: syz.9.1068 Not tainted syzkaller #0 PREEMPT(full) [ 170.690517][ T8697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.690535][ T8697] Call Trace: [ 170.690547][ T8697] [ 170.690589][ T8697] __dump_stack+0x1d/0x30 [ 170.690624][ T8697] dump_stack_lvl+0x95/0xd0 [ 170.690652][ T8697] dump_stack+0x15/0x1b [ 170.690682][ T8697] should_fail_ex+0x263/0x280 [ 170.690712][ T8697] ? vfat_add_entry+0xc6/0x2280 [ 170.690763][ T8697] should_failslab+0x8c/0xb0 [ 170.690796][ T8697] __kmalloc_cache_noprof+0x5f/0x410 [ 170.690821][ T8697] vfat_add_entry+0xc6/0x2280 [ 170.690868][ T8697] ? fat_search_long+0x93a/0x9b0 [ 170.690938][ T8697] ? _raw_spin_unlock+0x9/0x30 [ 170.690961][ T8697] ? ktime_get_coarse_real_ts64_mg+0x17c/0x1a0 [ 170.691020][ T8697] ? __pfx_vfat_create+0x10/0x10 [ 170.691059][ T8697] ? current_time+0x188/0x240 [ 170.691087][ T8697] vfat_create+0xb2/0x1b0 [ 170.691118][ T8697] ? __pfx_vfat_create+0x10/0x10 [ 170.691157][ T8697] path_openat+0xd75/0x2050 [ 170.691339][ T8697] do_file_open+0x16c/0x290 [ 170.691444][ T8697] do_sys_openat2+0x94/0x130 [ 170.691480][ T8697] __x64_sys_openat+0xf2/0x120 [ 170.691575][ T8697] x64_sys_call+0x1e39/0x3020 [ 170.691624][ T8697] do_syscall_64+0x12c/0x370 [ 170.691653][ T8697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.691689][ T8697] RIP: 0033:0x7f7c4a22c799 [ 170.691744][ T8697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.691774][ T8697] RSP: 002b:00007f7c48c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 170.691837][ T8697] RAX: ffffffffffffffda RBX: 00007f7c4a4a5fa0 RCX: 00007f7c4a22c799 [ 170.691855][ T8697] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 170.691873][ T8697] RBP: 00007f7c48c87090 R08: 0000000000000000 R09: 0000000000000000 [ 170.691888][ T8697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.691900][ T8697] R13: 00007f7c4a4a6038 R14: 00007f7c4a4a5fa0 R15: 00007ffe32078728 [ 170.691924][ T8697] [ 171.176928][ T8710] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1072'. [ 171.602149][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1075'. [ 171.611873][ T8727] hub 9-0:1.0: USB hub found [ 171.616792][ T8727] hub 9-0:1.0: 8 ports detected [ 171.648344][ T8729] loop4: detected capacity change from 0 to 1024 [ 171.655091][ T8729] EXT4-fs: inline encryption not supported [ 171.884089][ T8737] loop9: detected capacity change from 0 to 512 [ 171.904131][ T8737] EXT4-fs: Ignoring removed nobh option [ 172.662135][ T8729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.736240][ T8737] EXT4-fs (loop9): blocks per group (11) and clusters per group (8192) inconsistent [ 172.797312][ T8743] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1079'. [ 172.876114][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.070256][ T8759] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 173.164484][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 173.164507][ T28] audit: type=1400 audit(1772525089.649:887): avc: denied { cmd } for pid=8758 comm="syz.0.1085" path="socket:[22450]" dev="sockfs" ino=22450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 173.259495][ T8761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8761 comm=syz.9.1086 [ 173.346279][ T28] audit: type=1400 audit(1772525089.829:888): avc: denied { create } for pid=8760 comm="syz.9.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 173.602947][ T28] audit: type=1400 audit(1772525090.089:889): avc: denied { shutdown } for pid=8766 comm="syz.6.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.655432][ T28] audit: type=1400 audit(1772525090.089:890): avc: denied { read } for pid=8766 comm="syz.6.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.697165][ T8774] batman_adv: batadv0: Adding interface: ipvlan2 [ 173.706475][ T8774] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.834458][ T8778] loop9: detected capacity change from 0 to 512 [ 173.852011][ T8778] EXT4-fs: Ignoring removed nobh option [ 173.871544][ T8778] EXT4-fs (loop9): blocks per group (35) and clusters per group (8192) inconsistent [ 173.918589][ T8776] loop0: detected capacity change from 0 to 512 [ 174.118803][ T8774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.203213][ T8774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.236964][ T8774] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 175.116487][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1105'. [ 175.131471][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1105'. [ 175.152610][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1105'. [ 175.188732][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1105'. [ 175.348882][ T8808] loop0: detected capacity change from 0 to 512 [ 175.364453][ T8808] EXT4-fs: Ignoring removed nobh option [ 175.408553][ T8808] EXT4-fs (loop0): blocks per group (11) and clusters per group (8192) inconsistent [ 175.428419][ T8809] netlink: 'syz.4.1096': attribute type 13 has an invalid length. [ 176.848290][ T354] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.885993][ T354] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.923665][ T354] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.953173][ T8821] bond_slave_0: Caught tx_queue_len zero misconfig [ 176.963356][ T354] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.973959][ T8821] loop0: detected capacity change from 0 to 164 [ 177.313944][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1103'. [ 177.340301][ T8830] hub 9-0:1.0: USB hub found [ 177.357647][ T8830] hub 9-0:1.0: 8 ports detected [ 177.414716][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 177.585642][ T8843] loop2: detected capacity change from 0 to 8192 [ 178.080924][ T8850] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 178.123002][ T8850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.481261][ T8861] loop9: detected capacity change from 0 to 8192 [ 178.493837][ T8866] netlink: 79 bytes leftover after parsing attributes in process `syz.4.1117'. [ 180.310234][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1119'. [ 180.326493][ T8877] hub 9-0:1.0: USB hub found [ 180.336301][ T8877] hub 9-0:1.0: 8 ports detected [ 180.532133][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1122'. [ 180.586960][ T8884] loop9: detected capacity change from 0 to 4096 [ 180.624616][ T8888] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 180.788084][ T8898] netlink: 'syz.4.1126': attribute type 29 has an invalid length. [ 180.843072][ T8905] netlink: 'syz.4.1126': attribute type 29 has an invalid length. [ 180.872537][ T8898] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1126'. [ 181.013540][ T8911] loop9: detected capacity change from 0 to 512 [ 181.056990][ T8911] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 181.137566][ T28] audit: type=1400 audit(1772525097.629:891): avc: denied { getopt } for pid=8914 comm="syz.4.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 181.180481][ T8911] EXT4-fs (loop9): 1 truncate cleaned up [ 181.201974][ T8911] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.495234][ T8928] loop0: detected capacity change from 0 to 512 [ 181.515069][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1137'. [ 181.534287][ T8928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.547788][ T8928] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.548360][ T28] audit: type=1400 audit(1772525098.039:892): avc: denied { create } for pid=8929 comm="syz.6.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.613498][ T28] audit: type=1400 audit(1772525098.069:893): avc: denied { write } for pid=8929 comm="syz.6.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.650718][ T28] audit: type=1400 audit(1772525098.139:894): avc: denied { ioctl } for pid=8929 comm="syz.6.1137" path="socket:[23083]" dev="sockfs" ino=23083 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 181.811728][ T8943] xfrm0 speed is unknown, defaulting to 1000 [ 181.818112][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1140'. [ 181.833126][ T8945] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 181.875976][ T8945] bond1 (unregistering): Released all slaves [ 182.116583][ T8954] loop4: detected capacity change from 0 to 4096 [ 182.443146][ T8954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.460797][ T4937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.523935][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.627302][ T28] audit: type=1400 audit(1772525099.119:895): avc: denied { map } for pid=8953 comm="syz.4.1143" path="/260/file1/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 182.681376][ T8964] vlan3: entered promiscuous mode [ 182.700028][ T8968] loop6: detected capacity change from 0 to 128 [ 182.700870][ T8964] team0: entered promiscuous mode [ 182.732042][ T8968] loop6: detected capacity change from 0 to 512 [ 182.744972][ T8968] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 182.762171][ T8968] EXT4-fs (loop6): 1 truncate cleaned up [ 182.762749][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.808917][ T28] audit: type=1400 audit(1772525099.299:896): avc: denied { setopt } for pid=8965 comm="syz.0.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 182.846997][ T8968] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.004229][ T8988] loop2: detected capacity change from 0 to 512 [ 183.011376][ T8988] ext4: Unknown parameter 'smackfsroot' [ 183.106913][ T8997] loop2: detected capacity change from 0 to 512 [ 183.166005][ T8997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.179211][ T5385] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.189195][ T8997] EXT4-fs (loop2): blocks per group (8192) and clusters per group (1) inconsistent [ 183.251514][ T8998] loop9: detected capacity change from 0 to 8192 [ 183.956265][ T9010] team0: Port device bond0 removed [ 184.006694][ T9010] bond1: (slave dummy0): Releasing active interface [ 184.099400][ T9010] bridge_slave_0: left allmulticast mode [ 184.135144][ T9010] bridge_slave_0: left promiscuous mode [ 184.151693][ T9010] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.207596][ T9010] bridge_slave_1: left allmulticast mode [ 184.239937][ T9010] bridge_slave_1: left promiscuous mode [ 184.245792][ T9010] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.257068][ T9010] bond0: (slave bond_slave_0): Releasing backup interface [ 184.277645][ T9010] bond0: (slave bond_slave_1): Releasing backup interface [ 184.298323][ T9012] netlink: 'syz.6.1159': attribute type 39 has an invalid length. [ 184.364845][ T9023] loop9: detected capacity change from 0 to 256 [ 184.486967][ T9025] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 184.486967][ T9025] program syz.6.1159 not setting count and/or reply_len properly [ 184.554155][ T9023] FAT-fs (loop9): Directory bread(block 64) failed [ 184.561133][ T9023] FAT-fs (loop9): Directory bread(block 65) failed [ 184.567973][ T9023] FAT-fs (loop9): Directory bread(block 66) failed [ 184.574638][ T9023] FAT-fs (loop9): Directory bread(block 67) failed [ 184.581532][ T9023] FAT-fs (loop9): Directory bread(block 68) failed [ 184.588285][ T9023] FAT-fs (loop9): Directory bread(block 69) failed [ 184.594943][ T9023] FAT-fs (loop9): Directory bread(block 70) failed [ 184.601523][ T9023] FAT-fs (loop9): Directory bread(block 71) failed [ 184.608213][ T9023] FAT-fs (loop9): Directory bread(block 72) failed [ 184.614966][ T9023] FAT-fs (loop9): Directory bread(block 73) failed [ 185.265618][ T9010] team0: Port device team_slave_0 removed [ 185.324700][ T9010] team0: Port device team_slave_1 removed [ 185.353417][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.378631][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.390267][ T9010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.398457][ T9010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.412326][ T9010] net_ratelimit: 11 callbacks suppressed [ 185.412341][ T9010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 186.267958][ T9031] xt_hashlimit: size too large, truncated to 1048576 [ 186.754463][ T9043] loop4: detected capacity change from 0 to 512 [ 186.755479][ T9038] loop2: detected capacity change from 0 to 1764 [ 186.781660][ T9043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.817398][ T9043] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.836983][ T9038] iso9660: Bad value for 'session' [ 186.916760][ T9028] netlink: 'syz.2.1164': attribute type 5 has an invalid length. [ 186.967177][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1164'. [ 187.071293][ T9023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.150912][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.158349][ T9050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1166'. [ 187.274375][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1169'. [ 187.284226][ T9056] hub 9-0:1.0: USB hub found [ 187.289289][ T9056] hub 9-0:1.0: 8 ports detected [ 187.358969][ T9060] loop6: detected capacity change from 0 to 8192 [ 187.370191][ T9062] loop4: detected capacity change from 0 to 128 [ 187.398704][ T9062] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.471316][ T9062] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 188.074401][ T9075] bond2: option arp_all_targets: invalid value (768) [ 188.083635][ T9075] bond2 (unregistering): Released all slaves [ 188.156883][ T9078] l2tp_ppp: sess 2/0: no socket in recv [ 188.319972][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.537867][ T9089] netlink: 'syz.6.1177': attribute type 10 has an invalid length. [ 188.595975][ T9089] team0: Port device geneve0 added [ 188.628913][ T9090] xfrm0 speed is unknown, defaulting to 1000 [ 188.804438][ T9090] random: crng reseeded on system resumption [ 188.852416][ T28] audit: type=1400 audit(1772525105.239:897): avc: denied { checkpoint_restore } for pid=9084 comm="syz.0.1188" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 189.327354][ T28] audit: type=1400 audit(1772525105.289:898): avc: denied { write } for pid=9084 comm="syz.0.1188" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 189.431331][ T9103] xt_hashlimit: size too large, truncated to 1048576 [ 189.610859][ T9106] bridge_slave_0: left allmulticast mode [ 189.627225][ T9106] bridge_slave_0: left promiscuous mode [ 189.637203][ T9106] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.668318][ T9113] loop4: detected capacity change from 0 to 1764 [ 189.675255][ T9113] iso9660: Bad value for 'session' [ 189.759028][ T9106] bridge_slave_1: left allmulticast mode [ 189.759609][ T9096] netlink: 'syz.4.1178': attribute type 5 has an invalid length. [ 189.774475][ T9106] bridge_slave_1: left promiscuous mode [ 189.780383][ T9106] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.790686][ T9096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1178'. [ 189.825631][ T9106] bond0: (slave bond_slave_0): Releasing backup interface [ 189.850924][ T9106] bond0: (slave bond_slave_1): Releasing backup interface [ 189.910832][ T9106] team0: Port device team_slave_0 removed [ 189.946469][ T9106] team0: Port device team_slave_1 removed [ 189.953661][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.961339][ T9106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.970310][ T9106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.978086][ T9106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.988900][ T9106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.006055][ T9101] ip6tnl0: entered promiscuous mode [ 190.013373][ T9101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1181'. [ 190.071373][ T9129] loop4: detected capacity change from 0 to 512 [ 190.142091][ T9106] netlink: 'syz.0.1182': attribute type 39 has an invalid length. [ 190.176625][ T9106] hsr_slave_1 (unregistering): left promiscuous mode [ 190.211559][ T9134] xt_hashlimit: size too large, truncated to 1048576 [ 190.230561][ T9110] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 190.230561][ T9110] program syz.0.1182 not setting count and/or reply_len properly [ 190.245860][ T9133] loop6: detected capacity change from 0 to 8192 [ 190.393996][ T9139] loop9: detected capacity change from 0 to 128 [ 190.539629][ T9143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1190'. [ 190.555841][ T9139] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.598757][ T9139] ext4 filesystem being mounted at /167/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 190.618445][ T9148] warn_alloc: 3 callbacks suppressed [ 190.618520][ T9148] syz.0.1192: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 190.640191][ T28] audit: type=1326 audit(1772525107.129:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 190.655775][ T9148] CPU: 1 UID: 0 PID: 9148 Comm: syz.0.1192 Not tainted syzkaller #0 PREEMPT(full) [ 190.655872][ T9148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 190.655915][ T9148] Call Trace: [ 190.655946][ T9148] [ 190.655997][ T9148] __dump_stack+0x1d/0x30 [ 190.656091][ T9148] dump_stack_lvl+0x95/0xd0 [ 190.656166][ T9148] dump_stack+0x15/0x1b [ 190.656246][ T9148] warn_alloc+0x145/0x1c0 [ 190.656369][ T9148] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 190.656548][ T9148] ? perf_trace_run_bpf_submit+0xac/0x110 [ 190.656653][ T9148] ? xskq_create+0x36/0xe0 [ 190.656716][ T9148] ? perf_trace_kmalloc+0xeb/0x130 [ 190.656835][ T9148] vmalloc_user_noprof+0x7d/0xb0 [ 190.656937][ T9148] ? xskq_create+0x80/0xe0 [ 190.657000][ T9148] xskq_create+0x80/0xe0 [ 190.657088][ T9148] xsk_init_queue+0x70/0xb0 [ 190.657166][ T9148] xsk_setsockopt+0x3f5/0x640 [ 190.657344][ T9148] ? __pfx_xsk_setsockopt+0x10/0x10 [ 190.657450][ T9148] __sys_setsockopt+0x184/0x200 [ 190.657547][ T9148] __x64_sys_setsockopt+0x64/0x80 [ 190.657741][ T9148] x64_sys_call+0x2327/0x3020 [ 190.657909][ T9148] do_syscall_64+0x12c/0x370 [ 190.657981][ T9148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.658054][ T9148] RIP: 0033:0x7f408e6dc799 [ 190.658107][ T9148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.658244][ T9148] RSP: 002b:00007f408d12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 190.658308][ T9148] RAX: ffffffffffffffda RBX: 00007f408e955fa0 RCX: 00007f408e6dc799 [ 190.658358][ T9148] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 190.658482][ T9148] RBP: 00007f408e772bd9 R08: 0000000000000004 R09: 0000000000000000 [ 190.658606][ T9148] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.658647][ T9148] R13: 00007f408e956038 R14: 00007f408e955fa0 R15: 00007fff489f6a38 [ 190.658710][ T9148] [ 190.660884][ T9148] Mem-Info: [ 190.790586][ T9132] syz.4.1185 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 190.882267][ T9148] active_anon:28197 inactive_anon:25 isolated_anon:0 [ 190.882267][ T9148] active_file:14194 inactive_file:2513 isolated_file:0 [ 190.882267][ T9148] unevictable:0 dirty:0 writeback:0 [ 190.882267][ T9148] slab_reclaimable:3827 slab_unreclaimable:55417 [ 190.882267][ T9148] mapped:30619 shmem:17964 pagetables:3960 [ 190.882267][ T9148] sec_pagetables:0 bounce:0 [ 190.882267][ T9148] kernel_misc_reclaimable:0 [ 190.882267][ T9148] free:1742219 free_pcp:16990 free_cma:0 [ 190.932210][ T9148] Node 0 active_anon:112816kB inactive_anon:4kB active_file:56776kB inactive_file:10024kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122516kB dirty:48kB writeback:0kB shmem:71824kB kernel_stack:4448kB pagetables:15852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 190.961135][ T9148] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 190.988992][ T28] audit: type=1326 audit(1772525107.129:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 191.010302][ T9148] lowmem_reserve[]: 0 2879 7857 7857 [ 191.020257][ T9132] CPU: 1 UID: 0 PID: 9132 Comm: syz.4.1185 Not tainted syzkaller #0 PREEMPT(full) [ 191.020292][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.020307][ T9132] Call Trace: [ 191.020313][ T9132] [ 191.020399][ T9132] __dump_stack+0x1d/0x30 [ 191.020434][ T9132] dump_stack_lvl+0x95/0xd0 [ 191.020464][ T9132] dump_stack+0x15/0x1b [ 191.020493][ T9132] dump_header+0x80/0x240 [ 191.020521][ T9132] oom_kill_process+0x295/0x350 [ 191.020628][ T9132] out_of_memory+0x97d/0xb80 [ 191.020739][ T9132] try_charge_memcg+0x62e/0xa10 [ 191.020789][ T9132] obj_cgroup_charge_pages+0x23/0xc0 [ 191.020839][ T9132] __memcg_kmem_charge_page+0x9e/0x170 [ 191.020877][ T9132] __alloc_frozen_pages_noprof+0x18a/0x360 [ 191.020921][ T9132] alloc_pages_bulk_noprof+0x4aa/0x530 [ 191.020984][ T9132] ? policy_nodemask+0x417/0x5e0 [ 191.021079][ T9132] ? __alloc_frozen_pages_noprof+0x2a4/0x360 [ 191.021108][ T9132] alloc_pages_bulk_mempolicy_noprof+0x352/0xea0 [ 191.021276][ T9132] ? alloc_pages_mpol+0x217/0x260 [ 191.021335][ T9132] __vmalloc_node_range_noprof+0x87c/0x12b0 [ 191.021379][ T9132] __kvmalloc_node_noprof+0x3d4/0x650 [ 191.021409][ T9132] ? futex_hash_allocate+0x190/0x9d0 [ 191.021444][ T9132] ? futex_hash_allocate+0x190/0x9d0 [ 191.021648][ T9132] futex_hash_allocate+0x190/0x9d0 [ 191.021687][ T9132] ? cap_task_prctl+0x13f/0x6e0 [ 191.021716][ T9132] futex_hash_prctl+0xd8/0xf0 [ 191.021752][ T9132] __se_sys_prctl+0xa3d/0x13f0 [ 191.021834][ T9132] __x64_sys_prctl+0x67/0x80 [ 191.021944][ T9132] x64_sys_call+0x2533/0x3020 [ 191.021971][ T9132] do_syscall_64+0x12c/0x370 [ 191.022041][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.022107][ T9132] RIP: 0033:0x7f525c30c799 [ 191.022124][ T9132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.022149][ T9132] RSP: 002b:00007f525ad3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 191.022168][ T9132] RAX: ffffffffffffffda RBX: 00007f525c586090 RCX: 00007f525c30c799 [ 191.022182][ T9132] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 191.022238][ T9132] RBP: 00007f525c3a2bd9 R08: 0000000000000000 R09: 0000000000000000 [ 191.022252][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.022264][ T9132] R13: 00007f525c586128 R14: 00007f525c586090 R15: 00007ffd81ac5028 [ 191.022284][ T9132] [ 191.022377][ T9132] memory: usage 296280kB, limit 307200kB, failcnt 658 [ 191.114276][ T28] audit: type=1326 audit(1772525107.129:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 191.293037][ T9132] memory+swap: usage 273108kB, limit 9007199254740988kB, failcnt 0 [ 191.311520][ T9148] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 191.326028][ T9132] kmem: usage 238948kB, limit 9007199254740988kB, failcnt 0 [ 191.352959][ T9148] lowmem_reserve[]: 0 0 4978 4978 [ 191.358289][ T9148] Node 0 Normal free:4095372kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:112816kB inactive_anon:4kB active_file:56776kB inactive_file:10024kB unevictable:0kB writepending:48kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:57736kB local_pcp:34108kB free_cma:0kB [ 191.398024][ T9132] Memory cgroup stats for /syz4: [ 191.398443][ T9132] cache 0 [ 191.414768][ T9132] rss 73728 [ 191.420002][ T9132] shmem 0 [ 191.423001][ T9132] mapped_file 0 [ 191.426786][ T9148] lowmem_reserve[]: 0 0 0 0 [ 191.431515][ T9132] dirty 0 [ 191.434488][ T9132] writeback 0 [ 191.436312][ T9148] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) [ 191.438093][ T9132] workingset_refault_anon 96 [ 191.438032][ T9148] 1*2048kB [ 191.455967][ T9132] workingset_refault_file 557 [ 191.464166][ T9132] swap 221184 [ 191.466379][ T9148] (M) 3*4096kB (M) = 15360kB [ 191.472130][ T9148] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 191.476012][ T9132] swapcached 471040 [ 191.516050][ T9148] Node 0 Normal: 1596*4kB (UME) 659*8kB (UM) 164*16kB (UME) 320*32kB (UME) 314*64kB (UME) 234*128kB (UM) 179*256kB (UME) 138*512kB (UME) 123*1024kB (UM) 60*2048kB (UME) 924*4096kB (UM) = 4224584kB [ 191.537563][ T4937] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.564372][ T9159] audit: audit_backlog=65 > audit_backlog_limit=64 [ 191.570996][ T9159] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 191.578959][ T9159] audit: backlog limit exceeded [ 191.583782][ T9148] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 191.597421][ T9132] pgpgin 210676 [ 191.600931][ T9132] pgpgout 210650 [ 191.604849][ T9148] 34765 total pagecache pages [ 191.616009][ T28] audit: type=1326 audit(1772525107.129:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 191.642788][ T9148] 10 pages in swap cache [ 191.656231][ T9148] Free swap = 124392kB [ 191.675977][ T9132] pgfault 196222 [ 191.679580][ T9132] pgmajfault 72 [ 191.686245][ T9148] Total swap = 124996kB [ 191.690452][ T9148] 2097051 pages RAM [ 191.694292][ T28] audit: type=1326 audit(1772525107.129:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9145 comm="syz.2.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192adbc799 code=0x7ffc0000 [ 191.701825][ T9132] inactive_anon 32768 [ 191.723402][ T9146] loop2: detected capacity change from 0 to 256 [ 191.737571][ T9148] 0 pages HighMem/MovableOnly [ 191.742634][ T9148] 81603 pages reserved [ 191.761405][ T9146] FAT-fs (loop2): Directory bread(block 64) failed [ 191.768171][ T9146] FAT-fs (loop2): Directory bread(block 65) failed [ 191.774860][ T9146] FAT-fs (loop2): Directory bread(block 66) failed [ 191.796010][ T9132] active_anon 73728 [ 191.810082][ T9132] inactive_file 0 [ 191.823064][ T9132] active_file 0 [ 191.829638][ T9146] FAT-fs (loop2): Directory bread(block 67) failed [ 191.849510][ T9146] FAT-fs (loop2): Directory bread(block 68) failed [ 191.859368][ T9132] unevictable 0 [ 191.862904][ T9132] hierarchical_memory_limit 314572800 [ 191.875166][ T9146] FAT-fs (loop2): Directory bread(block 69) failed [ 191.884926][ T9132] hierarchical_memsw_limit 9223372036854771712 [ 191.906511][ T9146] FAT-fs (loop2): Directory bread(block 70) failed [ 191.931497][ T9132] total_cache 0 [ 191.935141][ T9146] FAT-fs (loop2): Directory bread(block 71) failed [ 191.942085][ T9132] total_rss 73728 [ 191.949611][ T9146] FAT-fs (loop2): Directory bread(block 72) failed [ 191.952298][ T9132] total_shmem 0 [ 191.960898][ T9146] FAT-fs (loop2): Directory bread(block 73) failed [ 191.971820][ T9132] total_mapped_file 0 [ 191.985578][ T9132] total_dirty 0 [ 191.990457][ T9132] total_writeback 0 [ 191.994317][ T9132] total_workingset_refault_anon 96 [ 191.999546][ T9132] total_workingset_refault_file 557 [ 192.004827][ T9132] total_swap 221184 [ 192.014093][ T9146] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 192.021949][ T9146] vhci_hcd vhci_hcd.2: invalid port number 96 [ 192.080662][ T9146] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 192.272286][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1198'. [ 192.314882][ T9132] total_swapcached 471040 [ 192.333940][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 192.349479][ T9132] total_pgpgin 210676 [ 192.372542][ T9132] total_pgpgout 210650 [ 192.390732][ T9132] total_pgfault 196222 [ 192.417354][ T9132] total_pgmajfault 72 [ 192.446231][ T9132] total_inactive_anon 32768 [ 192.498579][ T9132] total_active_anon 73728 [ 192.513923][ T9182] loop0: detected capacity change from 0 to 512 [ 192.514281][ T9132] total_inactive_file 0 [ 192.541442][ T9182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002] [ 192.549626][ T9182] System zones: 1-12 [ 192.554254][ T9182] ------------[ cut here ]------------ [ 192.559766][ T9182] EA inode 11 i_nlink=2 [ 192.559795][ T9182] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.0.1199/9182 [ 192.573235][ T9132] total_active_file 0 [ 192.574858][ T9182] Modules linked in: [ 192.582734][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) [ 192.592150][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.602343][ T9182] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 192.609121][ T9182] Code: 54 5a 99 ff 4c 8d 2d 3d ea 5d 05 49 8d 7e 40 e8 c4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 f8 eb b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 af 44 dd 03 66 66 66 66 66 66 2e [ 192.629018][ T9182] RSP: 0018:ffffc90001eab778 EFLAGS: 00010246 [ 192.635158][ T9182] RAX: ffff888104daac38 RBX: ffff88810a644608 RCX: ffffffff81bffae8 [ 192.642525][ T9132] total_unevictable 0 [ 192.643266][ T9182] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de510 [ 192.655183][ T9182] RBP: 000000000000000b R08: 000188810a6445bb R09: 0000000000000000 [ 192.663299][ T9182] R10: ffffc90001eab6a8 R11: 0001c90001eab6a8 R12: ffff88810a6445b8 [ 192.668977][ T9132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset= [ 192.671349][ T9182] R13: ffffffff871de510 R14: ffff88810a644570 R15: 0000000000000001 [ 192.676985][ T9132] / [ 192.679018][ T9182] FS: 00007f408d12f6c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 192.698560][ T9182] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.705226][ T9182] CR2: 00007f408e6c5900 CR3: 000000012f1b2000 CR4: 00000000003506f0 [ 192.713291][ T9182] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.721419][ T9182] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 192.728770][ T9132] ,mems_allowed=0,oom_memcg=/syz4 [ 192.729456][ T9182] Call Trace: [ 192.729519][ T9132] ,task_memcg= [ 192.729530][ T9182] [ 192.744237][ T9182] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 192.746098][ T9132] /syz4 [ 192.750366][ T9182] ? errseq_check+0x2c/0x50 [ 192.757760][ T9182] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 192.763506][ T9182] ext4_evict_inode+0xa1f/0xd60 [ 192.765366][ T9132] ,task=syz.4.1185,pid=9128,uid=0 [ 192.768500][ T9182] ? __pfx_ext4_evict_inode+0x10/0x10 [ 192.775510][ T9132] Memory cgroup out of memory: Killed process 9132 (syz.4.1185) total-vm:100576kB, anon-rss:1336kB, file-rss:26520kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 192.778963][ T9182] evict+0x2af/0x510 [ 192.800045][ T9182] ? __ext4_msg+0x1aa/0x1c0 [ 192.804595][ T9182] iput+0x41a/0x580 [ 192.808538][ T9182] ext4_process_orphan+0x1a9/0x1c0 [ 192.813793][ T9182] ext4_orphan_cleanup+0x6a8/0xa00 [ 192.818984][ T9182] ext4_fill_super+0x3408/0x37c0 [ 192.823967][ T9182] ? set_blocksize+0x14c/0x270 [ 192.828844][ T9182] ? setup_bdev_super+0x30e/0x370 [ 192.834046][ T9182] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.839469][ T9182] get_tree_bdev_flags+0x291/0x300 [ 192.844771][ T9182] ? __pfx_ext4_fill_super+0x10/0x10 [ 192.850137][ T9182] get_tree_bdev+0x1f/0x30 [ 192.854668][ T9182] ext4_get_tree+0x1c/0x30 [ 192.859151][ T9182] vfs_get_tree+0x57/0x1d0 [ 192.863669][ T9182] do_new_mount+0x288/0x8d0 [ 192.868270][ T9182] path_mount+0x4d0/0xbc0 [ 192.872721][ T9182] __se_sys_mount+0x28c/0x2e0 [ 192.877554][ T9182] __x64_sys_mount+0x67/0x80 [ 192.882187][ T9182] x64_sys_call+0x2d61/0x3020 [ 192.886964][ T9182] do_syscall_64+0x12c/0x370 [ 192.891757][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.897835][ T9182] RIP: 0033:0x7f408e6dda0a [ 192.902303][ T9182] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.921998][ T9182] RSP: 002b:00007f408d12ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 192.930546][ T9182] RAX: ffffffffffffffda RBX: 00007f408d12eee0 RCX: 00007f408e6dda0a [ 192.938672][ T9182] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f408d12eea0 [ 192.943858][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 192.946715][ T9182] RBP: 0000200000000180 R08: 00007f408d12eee0 R09: 0000000000800700 [ 192.963624][ T9182] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 192.971684][ T9182] R13: 00007f408d12eea0 R14: 000000000000046c R15: 0000200000000000 [ 192.979790][ T9182] [ 192.982846][ T9182] ---[ end trace 0000000000000000 ]--- [ 193.008096][ T9182] EXT4-fs (loop0): 1 orphan inode deleted [ 193.016131][ T9182] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.081756][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.150854][ T9197] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54712 sclass=netlink_route_socket pid=9197 comm=syz.0.1205 [ 193.184524][ T9197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1205'. [ 193.240876][ T9198] loop9: detected capacity change from 0 to 8192 [ 193.278827][ T9202] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 193.286794][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1207'. [ 193.295762][ T9202] dummy0: entered promiscuous mode [ 193.300985][ T9202] dummy0: entered allmulticast mode [ 193.307118][ T9202] bridge0: port 1(dummy0) entered blocking state [ 193.313695][ T9202] bridge0: port 1(dummy0) entered disabled state [ 193.321298][ T9202] bridge0: port 1(dummy0) entered blocking state [ 193.327676][ T9202] bridge0: port 1(dummy0) entered forwarding state [ 193.385756][ T9202] loop0: detected capacity change from 0 to 512 [ 193.392649][ T9202] /dev/loop0: Can't open blockdev [ 193.529396][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1208'. [ 193.583666][ T9207] loop6: detected capacity change from 0 to 128 [ 193.873146][ T9218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1222'. [ 193.883291][ T9218] hub 9-0:1.0: USB hub found [ 193.888222][ T9218] hub 9-0:1.0: 8 ports detected [ 194.180272][ T9224] loop0: detected capacity change from 0 to 512 [ 194.230309][ T9223] loop9: detected capacity change from 0 to 128 [ 194.248548][ T9223] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 194.279933][ T9223] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 194.335083][ T9229] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1215'. [ 194.473877][ T9225] xt_hashlimit: size too large, truncated to 1048576 [ 194.908402][ T9242] loop6: detected capacity change from 0 to 128 [ 194.972984][ T9244] loop9: detected capacity change from 0 to 512 [ 195.182133][ T9244] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1218: inode has both inline data and extents flags [ 195.199535][ T9244] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 195.205957][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 195.221756][ C1] EXT4-fs (loop9): initial error at time 1772525111: ext4_orphan_get:1391: inode 15 [ 195.231183][ C1] EXT4-fs (loop9): last error at time 1772525111: ext4_orphan_get:1391: inode 15 [ 195.240894][ T9244] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1218: couldn't read orphan inode 15 (err -117) [ 195.276204][ T9244] loop9: lost filesystem error report for type 5 error -117 [ 195.281267][ T9244] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.373718][ T28] kauditd_printk_skb: 168 callbacks suppressed [ 195.373764][ T28] audit: type=1326 audit(1772525111.859:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 195.444994][ T28] audit: type=1326 audit(1772525111.859:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 195.468930][ T28] audit: type=1326 audit(1772525111.859:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 195.669633][ T4937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.983487][ T28] audit: type=1326 audit(1772525111.859:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.066658][ T9268] FAULT_INJECTION: forcing a failure. [ 196.066658][ T9268] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 196.086506][ T28] audit: type=1326 audit(1772525111.859:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.117551][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.9.1237 Tainted: G W syzkaller #0 PREEMPT(full) [ 196.117657][ T9268] Tainted: [W]=WARN [ 196.117665][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 196.117684][ T9268] Call Trace: [ 196.117690][ T9268] [ 196.117697][ T9268] __dump_stack+0x1d/0x30 [ 196.117734][ T9268] dump_stack_lvl+0x95/0xd0 [ 196.117786][ T9268] dump_stack+0x15/0x1b [ 196.117810][ T9268] should_fail_ex+0x263/0x280 [ 196.117840][ T9268] should_fail_alloc_page+0xf2/0x100 [ 196.117873][ T9268] __alloc_frozen_pages_noprof+0x108/0x360 [ 196.117903][ T9268] alloc_pages_mpol+0xb3/0x260 [ 196.117983][ T9268] ? obj_cgroup_charge_account+0x122/0x1a0 [ 196.118046][ T9268] alloc_pages_noprof+0x8f/0x130 [ 196.118071][ T9268] get_free_pages_noprof+0xc/0x40 [ 196.118146][ T9268] selinux_genfs_get_sid+0x33/0x180 [ 196.118178][ T9268] inode_doinit_with_dentry+0x5fd/0x7a0 [ 196.118241][ T9268] selinux_d_instantiate+0x27/0x40 [ 196.118274][ T9268] security_d_instantiate+0x76/0x90 [ 196.118298][ T9268] d_make_persistent+0x4f/0x110 [ 196.118329][ T9268] __debugfs_create_file+0x14e/0x2b0 [ 196.118370][ T9268] debugfs_create_file_full+0x3f/0x60 [ 196.118393][ T9268] ? __pfx_macsec_setup+0x10/0x10 [ 196.118476][ T9268] ref_tracker_dir_debugfs+0x10e/0x220 [ 196.118511][ T9268] alloc_netdev_mqs+0x1a7/0xa40 [ 196.118598][ T9268] rtnl_create_link+0x239/0x720 [ 196.118624][ T9268] rtnl_newlink_create+0x174/0x650 [ 196.118643][ T9268] ? security_capable+0x7b/0x90 [ 196.118665][ T9268] ? netlink_ns_capable+0x86/0xa0 [ 196.118690][ T9268] rtnl_newlink+0x10a0/0x1330 [ 196.118792][ T9268] ? __memcg_slab_free_hook+0x154/0x250 [ 196.118821][ T9268] ? __rcu_read_unlock+0x4e/0x70 [ 196.118917][ T9268] ? avc_has_perm_noaudit+0xab/0x130 [ 196.118941][ T9268] ? cred_has_capability+0x224/0x2a0 [ 196.118965][ T9268] ? selinux_capable+0x31/0x40 [ 196.119026][ T9268] ? security_capable+0x7b/0x90 [ 196.119088][ T9268] ? ns_capable+0x7c/0xb0 [ 196.119119][ T9268] ? __pfx_rtnl_newlink+0x10/0x10 [ 196.119151][ T9268] rtnetlink_rcv_msg+0x64b/0x720 [ 196.119184][ T9268] netlink_rcv_skb+0x123/0x220 [ 196.119208][ T9268] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 196.119321][ T9268] rtnetlink_rcv+0x1c/0x30 [ 196.119444][ T9268] netlink_unicast+0x5c0/0x690 [ 196.119469][ T9268] netlink_sendmsg+0x5c8/0x6f0 [ 196.119499][ T9268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.119533][ T9268] ____sys_sendmsg+0x5af/0x600 [ 196.119563][ T9268] ___sys_sendmsg+0x195/0x1e0 [ 196.119604][ T9268] __x64_sys_sendmsg+0xd4/0x160 [ 196.119648][ T9268] x64_sys_call+0x194c/0x3020 [ 196.119673][ T9268] do_syscall_64+0x12c/0x370 [ 196.119692][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.119721][ T9268] RIP: 0033:0x7f7c4a22c799 [ 196.119754][ T9268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.119769][ T9268] RSP: 002b:00007f7c48c87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.119877][ T9268] RAX: ffffffffffffffda RBX: 00007f7c4a4a5fa0 RCX: 00007f7c4a22c799 [ 196.119970][ T9268] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 196.119981][ T9268] RBP: 00007f7c48c87090 R08: 0000000000000000 R09: 0000000000000000 [ 196.119993][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.120004][ T9268] R13: 00007f7c4a4a6038 R14: 00007f7c4a4a5fa0 R15: 00007ffe32078728 [ 196.120022][ T9268] [ 196.123082][ T9268] bridge0: entered promiscuous mode [ 196.129389][ T9269] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1229'. [ 196.140392][ T28] audit: type=1326 audit(1772525111.859:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.221821][ T9268] bridge0: port 1(macsec1) entered blocking state [ 196.226268][ T28] audit: type=1326 audit(1772525111.859:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.229223][ T9268] bridge0: port 1(macsec1) entered disabled state [ 196.235460][ T28] audit: type=1326 audit(1772525111.859:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.250720][ T9268] macsec1: entered allmulticast mode [ 196.285722][ T9269] loop2: detected capacity change from 0 to 512 [ 196.291600][ T9268] bridge0: entered allmulticast mode [ 196.316332][ T9269] EXT4-fs: Ignoring removed nobh option [ 196.352758][ T28] audit: type=1326 audit(1772525111.859:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.394476][ T9269] EXT4-fs: Ignoring removed bh option [ 196.397145][ T28] audit: type=1326 audit(1772525111.859:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9238 comm="syz.9.1218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4a22c799 code=0x7ffc0000 [ 196.533446][ T9269] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 196.599807][ T9280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'. [ 196.627741][ T9269] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1229: invalid indirect mapped block 256 (level 1) [ 196.672284][ T9281] loop4: detected capacity change from 0 to 1024 [ 196.672784][ T9282] hub 9-0:1.0: USB hub found [ 196.680049][ T9268] macsec1: left allmulticast mode [ 196.689608][ T9282] hub 9-0:1.0: 8 ports detected [ 196.690014][ T9281] journal_path: Lookup failure for './file0/file0' [ 196.699129][ T9269] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 196.702893][ T9269] EXT4-fs (loop2): Remounting filesystem read-only [ 196.712080][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 196.712105][ C0] EXT4-fs (loop2): initial error at time 1772525113: ext4_free_branches:1023: inode 13 [ 196.712144][ C0] EXT4-fs (loop2): last error at time 1772525113: ext4_free_branches:1023: inode 13 [ 196.712227][ T9268] bridge0: left allmulticast mode [ 196.750710][ T9281] EXT4-fs: error: could not find journal device path [ 196.760113][ T9268] bridge0: left promiscuous mode [ 196.770389][ T9269] EXT4-fs (loop2): 1 truncate cleaned up [ 196.776651][ T9269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.798046][ T9269] ext4: Unknown parameter '' [ 196.829400][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.881780][ T9286] cgroup: noprefix used incorrectly [ 196.942499][ T9290] tipc: Started in network mode [ 196.947680][ T9290] tipc: Node identity 4, cluster identity 4711 [ 196.954297][ T9290] tipc: Node number set to 4 [ 197.063573][ T9300] EXT4-fs (loop4): 1 truncate cleaned up [ 197.079256][ T9300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.136854][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.185908][ T9306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 197.193194][ T9306] IPv6: NLM_F_CREATE should be set when creating new route [ 197.579094][ T9315] set_capacity_and_notify: 2 callbacks suppressed [ 197.579117][ T9315] loop4: detected capacity change from 0 to 8192 [ 197.649722][ T9319] loop6: detected capacity change from 0 to 8192 [ 197.841077][ T9328] loop0: detected capacity change from 0 to 512 [ 197.945589][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 197.957765][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 197.957872][ T3314] Tainted: [W]=WARN [ 197.957878][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.957892][ T3314] Call Trace: [ 197.957900][ T3314] [ 197.957907][ T3314] __dump_stack+0x1d/0x30 [ 197.957940][ T3314] dump_stack_lvl+0x95/0xd0 [ 197.957979][ T3314] dump_stack+0x15/0x1b [ 197.958034][ T3314] dump_header+0x80/0x240 [ 197.958061][ T3314] oom_kill_process+0x295/0x350 [ 197.958087][ T3314] out_of_memory+0x97d/0xb80 [ 197.958189][ T3314] try_charge_memcg+0x62e/0xa10 [ 197.958241][ T3314] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 197.958285][ T3314] __swap_cache_prepare_and_add+0x386/0x530 [ 197.958448][ T3314] swap_cache_alloc_folio+0xa2/0x120 [ 197.958479][ T3314] swap_cluster_readahead+0x26e/0x3d0 [ 197.958516][ T3314] swapin_readahead+0xde/0x840 [ 197.958594][ T3314] ? _raw_spin_unlock+0x9/0x30 [ 197.958620][ T3314] ? swap_put_entries_cluster+0x385/0x3a0 [ 197.958655][ T3314] ? __rcu_read_unlock+0x4e/0x70 [ 197.958683][ T3314] ? swap_cache_get_folio+0x26f/0x280 [ 197.958725][ T3314] do_swap_page+0x309/0x2210 [ 197.958813][ T3314] ? __rcu_read_lock+0x36/0x50 [ 197.958836][ T3314] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 197.958868][ T3314] handle_mm_fault+0xb40/0x3020 [ 197.958911][ T3314] ? vma_start_read+0x1c7/0x2c0 [ 197.959018][ T3314] do_user_addr_fault+0x62f/0x1050 [ 197.959062][ T3314] ? trace_page_fault_user+0x1f/0xe0 [ 197.959161][ T3314] exc_page_fault+0x62/0xa0 [ 197.959193][ T3314] asm_exc_page_fault+0x26/0x30 [ 197.959220][ T3314] RIP: 0033:0x7f192bb77bfd [ 197.959243][ T3314] Code: 49 81 f8 00 ca 9a 3b 72 1c 31 d2 49 81 c0 00 36 65 c4 4c 89 45 c0 ff c2 49 81 f8 ff c9 9a 3b 77 ea 89 d2 eb 02 31 d2 48 01 ca <48> 89 16 4c 89 46 08 48 83 c4 48 5b 41 5c 41 5d 41 5e 41 5f 5d c3 [ 197.959264][ T3314] RSP: 002b:00007ffe488c9f40 EFLAGS: 00010206 [ 197.959281][ T3314] RAX: 0000000000000000 RBX: 00007f192bb71038 RCX: 00000000000000c5 [ 197.959294][ T3314] RDX: 00000000000000c5 RSI: 00007ffe488ca060 RDI: 0000000000000001 [ 197.959309][ T3314] RBP: 00007ffe488c9fb0 R08: 0000000034ce58d8 R09: 7fffffffffffffff [ 197.959322][ T3314] R10: 3fffffffffffffff R11: 0000000000000202 R12: 4000000000000000 [ 197.959410][ T3314] R13: 0000000000000010 R14: 00007f192bb71000 R15: 0000000000008fe6 [ 197.959446][ T3314] [ 197.959488][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 367 [ 198.206239][ T9328] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 198.214518][ T9328] EXT4-fs (loop0): orphan cleanup on readonly fs [ 198.221754][ T3314] memory+swap: usage 149604kB, limit 9007199254740988kB, failcnt 0 [ 198.231016][ T9328] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.246092][ T3314] kmem: usage 149216kB, limit 9007199254740988kB, failcnt 0 [ 198.253604][ T9328] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 198.263706][ T3314] Memory cgroup stats for /syz2: [ 198.263929][ T3314] cache 0 [ 198.292170][ T3314] rss 0 [ 198.388026][ T9336] loop4: detected capacity change from 0 to 512 [ 198.460245][ T9328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1249: corrupted inode contents [ 198.520664][ T3314] shmem 0 [ 198.529438][ T3314] mapped_file 0 [ 198.533267][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.533663][ T9328] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #16: comm syz.0.1249: mark_inode_dirty error [ 198.542921][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 198.542941][ C0] EXT4-fs (loop0): initial error at time 1772525115: ext4_do_update_inode:5569: inode 16 [ 198.542975][ C0] EXT4-fs (loop0): last error at time 1772525115: ext4_do_update_inode:5569: inode 16 [ 198.584915][ T3314] dirty 0 [ 198.591966][ T3314] writeback 4096 [ 198.609521][ T3314] workingset_refault_anon 89 [ 198.626147][ T3314] workingset_refault_file 1022 [ 198.641471][ T3314] swap 315392 [ 198.652634][ T3314] swapcached 364544 [ 198.657140][ T3314] pgpgin 151530 [ 198.660675][ T3314] pgpgout 151527 [ 198.664321][ T3314] pgfault 159049 [ 198.668678][ T3314] pgmajfault 64 [ 198.672286][ T3314] inactive_anon 4096 [ 198.676641][ T3314] active_anon 0 [ 198.680574][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.680912][ T9328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1249: corrupted inode contents [ 198.873745][ T3314] inactive_file 8192 [ 198.877896][ T3314] active_file 0 [ 198.881616][ T3314] unevictable 0 [ 198.885329][ T3314] hierarchical_memory_limit 314572800 [ 198.891500][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 198.898688][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.899084][ T9328] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.1249: mark_inode_dirty error [ 198.920357][ T3314] total_cache 0 [ 198.923956][ T3314] total_rss 0 [ 198.927715][ T3314] total_shmem 0 [ 198.931519][ T3314] total_mapped_file 0 [ 198.935656][ T3314] total_dirty 0 [ 198.939728][ T3314] total_writeback 4096 [ 198.944129][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.944856][ T9328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1249: corrupted inode contents [ 198.966769][ T3314] total_workingset_refault_anon 89 [ 198.971984][ T3314] total_workingset_refault_file 1022 [ 198.981103][ T3314] total_swap 315392 [ 198.985086][ T3314] total_swapcached 364544 [ 198.990038][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 198.990389][ T9328] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 199.008856][ T3314] total_pgpgin 151530 [ 199.013133][ T3314] total_pgpgout 151527 [ 199.017871][ T3314] total_pgfault 159049 [ 199.022163][ T3314] total_pgmajfault 64 [ 199.026616][ T3314] total_inactive_anon 4096 [ 199.031332][ T9328] loop0: lost filesystem error report for type 5 error -117 [ 199.031862][ T9328] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #16: comm syz.0.1249: corrupted inode contents [ 199.052208][ T3314] total_active_anon 0 [ 199.056515][ T3314] total_inactive_file 8192 [ 199.061004][ T3314] total_active_file 0 [ 199.065318][ T3314] total_unevictable 0 [ 199.069951][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 199.070450][ T9328] EXT4-fs error (device loop0): ext4_truncate:4587: inode #16: comm syz.0.1249: mark_inode_dirty error [ 199.094797][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1234,pid=9291,uid=0 [ 199.110230][ T3314] Memory cgroup out of memory: Killed process 9291 (syz.2.1234) total-vm:98528kB, anon-rss:1220kB, file-rss:26564kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 199.128666][ T9328] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 199.129161][ T9328] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 199.229074][ T9339] __nla_validate_parse: 2 callbacks suppressed [ 199.229094][ T9339] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1252'. [ 199.265213][ T9328] loop0: lost filesystem error report for type 5 error -117 [ 199.267476][ T9328] EXT4-fs (loop0): 1 truncate cleaned up [ 199.283910][ T9339] erspan0: entered promiscuous mode [ 199.293467][ T9328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-0000002a0000 ro without journal. Quota mode: writeback. [ 199.418340][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-0000002a0000. [ 199.514420][ T9345] loop2: detected capacity change from 0 to 8192 [ 199.532582][ T9345] vfat: Unknown parameter 'þ€' [ 199.701331][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1256'. [ 199.722490][ T9348] netlink: 'syz.6.1256': attribute type 1 has an invalid length. [ 199.734466][ T9348] netlink: 'syz.6.1256': attribute type 2 has an invalid length. [ 199.742903][ T9348] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1256'. [ 199.809975][ T9356] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1259'. [ 199.828914][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1259'. [ 199.858732][ T9356] bond2: option xmit_hash_policy: invalid value (64) [ 199.874617][ T9356] bond2 (unregistering): Released all slaves [ 200.283461][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1255'. [ 200.332477][ T9370] bond2: entered promiscuous mode [ 200.333912][ T9368] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1263'. [ 200.338639][ T9370] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.354235][ T9368] hub 9-0:1.0: USB hub found [ 200.359149][ T9368] hub 9-0:1.0: 8 ports detected [ 200.371145][ T9374] bridge1: entered promiscuous mode [ 200.378308][ T9374] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 200.401723][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 200.401747][ T28] audit: type=1400 audit(1772525116.889:1092): avc: denied { write } for pid=9369 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 200.442106][ T9370] macvlan2: entered promiscuous mode [ 200.447992][ T9370] macvlan2: entered allmulticast mode [ 200.455506][ T9370] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 200.721975][ T9380] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 200.761086][ T9381] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 200.915583][ T9380] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.927559][ T9380] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 200.959679][ T9386] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 200.983991][ T9386] bond1: (slave gretap2): making interface the new active one [ 200.984514][ T28] audit: type=1400 audit(1772525117.469:1093): avc: denied { setopt } for pid=9379 comm="syz.4.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.011470][ T9386] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 201.026842][ T9380] macvlan2: entered promiscuous mode [ 201.032353][ T9380] macvlan2: entered allmulticast mode [ 201.038673][ T9380] bond1: entered promiscuous mode [ 201.043867][ T9380] gretap2: entered promiscuous mode [ 201.049798][ T9380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.092512][ T9380] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 201.104646][ T9380] bond1: left promiscuous mode [ 201.109543][ T9380] gretap2: left promiscuous mode [ 201.291415][ T9397] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1270'. [ 201.301380][ T9397] hub 9-0:1.0: USB hub found [ 201.306176][ T9397] hub 9-0:1.0: 8 ports detected [ 201.500776][ T28] audit: type=1400 audit(1772525373.989:1094): avc: denied { write } for pid=9408 comm="syz.9.1274" path="socket:[25680]" dev="sockfs" ino=25680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 202.184498][ T9424] geneve2: entered promiscuous mode [ 202.614341][ T9420] loop4: detected capacity change from 0 to 8192 [ 202.688973][ T9431] loop0: detected capacity change from 0 to 512 [ 202.696015][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 202.852598][ T9431] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.958767][ T9439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43040 sclass=netlink_route_socket pid=9439 comm=syz.2.1284 [ 202.989517][ T9439] xfrm0 speed is unknown, defaulting to 1000 [ 203.150565][ T9439] xfrm0 speed is unknown, defaulting to 1000 [ 203.267565][ T9440] loop2: detected capacity change from 0 to 512 [ 203.327543][ T9440] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 203.335646][ T9440] System zones: 0-2, 18-18, 34-34 [ 203.370532][ T9440] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 203.385790][ T9440] EXT4-fs (loop2): Remounting filesystem read-only [ 203.392515][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 203.392549][ C1] EXT4-fs (loop2): initial error at time 1772525375: ext4_mb_generate_buddy:1315 [ 203.392580][ C1] EXT4-fs (loop2): last error at time 1772525375: ext4_mb_generate_buddy:1315 [ 203.420419][ T9440] EXT4-fs (loop2): 1 truncate cleaned up [ 203.452165][ T9431] EXT4-fs (loop0): 1 truncate cleaned up [ 203.456785][ T354] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 203.467270][ T9440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.471039][ T354] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 203.482721][ T9440] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.493728][ T354] Quota error (device loop2): write_blk: dquota write failed [ 203.520110][ T9431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.530341][ T9447] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1285'. [ 203.541940][ T354] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 203.552067][ T354] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 203.562805][ T354] Quota error (device loop2): write_blk: dquota write failed [ 203.572781][ T9447] hub 9-0:1.0: USB hub found [ 203.580151][ T354] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 203.595814][ T9447] hub 9-0:1.0: 8 ports detected [ 203.601006][ T354] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 203.615776][ T354] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 203.628423][ T354] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 203.672877][ T9454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=58 sclass=netlink_audit_socket pid=9454 comm=syz.9.1288 [ 203.789271][ T9460] tipc: Started in network mode [ 203.808794][ T9460] tipc: Node identity 4, cluster identity 4711 [ 203.823556][ T9460] tipc: Node number set to 4 [ 203.849750][ T9462] loop4: detected capacity change from 0 to 1024 [ 203.886368][ T9462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 203.921363][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.930502][ T9462] System zones: 0-1, 3-36 [ 203.950566][ T9462] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1291: bad orphan inode 134217728 [ 203.971550][ T9462] loop4: lost filesystem error report for type 5 error -117 [ 203.972306][ T9462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.023870][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.280853][ T9470] FAULT_INJECTION: forcing a failure. [ 204.280853][ T9470] name failslab, interval 1, probability 0, space 0, times 0 [ 204.295027][ T9470] CPU: 0 UID: 0 PID: 9470 Comm: syz.0.1292 Tainted: G W syzkaller #0 PREEMPT(full) [ 204.295073][ T9470] Tainted: [W]=WARN [ 204.295107][ T9470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 204.295120][ T9470] Call Trace: [ 204.295125][ T9470] [ 204.295132][ T9470] __dump_stack+0x1d/0x30 [ 204.295161][ T9470] dump_stack_lvl+0x95/0xd0 [ 204.295236][ T9470] dump_stack+0x15/0x1b [ 204.295257][ T9470] should_fail_ex+0x263/0x280 [ 204.295293][ T9470] should_failslab+0x8c/0xb0 [ 204.295318][ T9470] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 204.295347][ T9470] ? __alloc_skb+0x2d6/0x690 [ 204.295426][ T9470] __alloc_skb+0x2d6/0x690 [ 204.295455][ T9470] ? __alloc_skb+0x200/0x690 [ 204.295484][ T9470] netlink_alloc_large_skb+0xbf/0xf0 [ 204.295518][ T9470] netlink_sendmsg+0x40c/0x6f0 [ 204.295548][ T9470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.295649][ T9470] ____sys_sendmsg+0x5af/0x600 [ 204.295755][ T9470] ___sys_sendmsg+0x195/0x1e0 [ 204.295809][ T9470] __x64_sys_sendmsg+0xd4/0x160 [ 204.295851][ T9470] x64_sys_call+0x194c/0x3020 [ 204.295885][ T9470] do_syscall_64+0x12c/0x370 [ 204.295923][ T9470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.295945][ T9470] RIP: 0033:0x7f408e6dc799 [ 204.295961][ T9470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.295990][ T9470] RSP: 002b:00007f408d0ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.296053][ T9470] RAX: ffffffffffffffda RBX: 00007f408e956180 RCX: 00007f408e6dc799 [ 204.296067][ T9470] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 204.296079][ T9470] RBP: 00007f408d0ed090 R08: 0000000000000000 R09: 0000000000000000 [ 204.296092][ T9470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.296108][ T9470] R13: 00007f408e956218 R14: 00007f408e956180 R15: 00007fff489f6a38 [ 204.296177][ T9470] [ 205.781560][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.284705][ T9491] netlink: 'syz.2.1297': attribute type 7 has an invalid length. [ 206.296802][ T9491] netlink: 'syz.2.1297': attribute type 7 has an invalid length. [ 206.312714][ T9491] loop2: detected capacity change from 0 to 512 [ 206.320651][ T9491] EXT4-fs: Ignoring removed nobh option [ 206.456683][ T9491] EXT4-fs: Ignoring removed orlov option [ 206.776809][ T9491] EXT4-fs error (device loop2): __ext4_iget:5378: inode #11: block 1: comm syz.2.1297: invalid block [ 206.805415][ T9505] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1300'. [ 206.817969][ T9491] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 206.818135][ T9491] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1297: couldn't read orphan inode 11 (err -117) [ 206.827377][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 206.827403][ C1] EXT4-fs (loop2): initial error at time 1772525379: __ext4_iget:5378: inode 11: block 1 [ 206.827440][ C1] EXT4-fs (loop2): last error at time 1772525379: __ext4_iget:5378: inode 11: block 1 [ 206.856240][ T9498] hub 9-0:1.0: USB hub found [ 206.873466][ T9491] loop2: lost filesystem error report for type 5 error -117 [ 206.876902][ T9508] loop0: detected capacity change from 0 to 128 [ 206.887974][ T9498] hub 9-0:1.0: 8 ports detected [ 206.897271][ T9491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.938557][ T9508] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.088538][ T9514] loop4: detected capacity change from 0 to 512 [ 207.102155][ T9514] EXT4-fs: Ignoring removed nobh option [ 207.114322][ T9514] EXT4-fs (loop4): blocks per group (36) and clusters per group (8192) inconsistent [ 207.177263][ T9508] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 207.265540][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.311119][ T5258] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.552361][ T9518] loop2: detected capacity change from 0 to 256 [ 207.585845][ T9518] vfat: Unknown parameter 'shortn' [ 207.933946][ T9529] warn_alloc: 1 callbacks suppressed [ 207.942457][ T9529] syz.0.1311: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 207.979389][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1312'. [ 208.062144][ T9529] CPU: 0 UID: 0 PID: 9529 Comm: syz.0.1311 Tainted: G W syzkaller #0 PREEMPT(full) [ 208.062252][ T9529] Tainted: [W]=WARN [ 208.062259][ T9529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.062277][ T9529] Call Trace: [ 208.062286][ T9529] [ 208.062296][ T9529] __dump_stack+0x1d/0x30 [ 208.062369][ T9529] dump_stack_lvl+0x95/0xd0 [ 208.062402][ T9529] dump_stack+0x15/0x1b [ 208.062423][ T9529] warn_alloc+0x145/0x1c0 [ 208.062486][ T9529] ? finish_task_switch+0x7d/0x280 [ 208.062512][ T9529] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 208.062539][ T9529] ? preempt_schedule_irq+0x2d/0x50 [ 208.062568][ T9529] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 208.062623][ T9529] ? xskq_create+0x36/0xe0 [ 208.062674][ T9529] ? preempt_schedule_notrace+0x32/0x50 [ 208.062707][ T9529] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 208.062754][ T9529] ? perf_tp_event+0x161f/0x1660 [ 208.062788][ T9529] ? perf_trace_kmalloc+0x11f/0x130 [ 208.062849][ T9529] vmalloc_user_noprof+0x7d/0xb0 [ 208.062875][ T9529] ? xskq_create+0x80/0xe0 [ 208.062908][ T9529] xskq_create+0x80/0xe0 [ 208.062934][ T9529] xsk_init_queue+0x70/0xb0 [ 208.062958][ T9529] xsk_setsockopt+0x3f5/0x640 [ 208.063001][ T9529] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.063121][ T9529] __sys_setsockopt+0x184/0x200 [ 208.063153][ T9529] __x64_sys_setsockopt+0x64/0x80 [ 208.063184][ T9529] x64_sys_call+0x2327/0x3020 [ 208.063254][ T9529] do_syscall_64+0x12c/0x370 [ 208.063275][ T9529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.063301][ T9529] RIP: 0033:0x7f408e6dc799 [ 208.063322][ T9529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.063346][ T9529] RSP: 002b:00007f408d12f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.063394][ T9529] RAX: ffffffffffffffda RBX: 00007f408e955fa0 RCX: 00007f408e6dc799 [ 208.063407][ T9529] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 208.063453][ T9529] RBP: 00007f408e772bd9 R08: 0000000000000004 R09: 0000000000000000 [ 208.063466][ T9529] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.063479][ T9529] R13: 00007f408e956038 R14: 00007f408e955fa0 R15: 00007fff489f6a38 [ 208.063498][ T9529] [ 208.296483][ T9529] Mem-Info: [ 208.299704][ T9529] active_anon:33592 inactive_anon:1 isolated_anon:0 [ 208.299704][ T9529] active_file:14221 inactive_file:2419 isolated_file:0 [ 208.299704][ T9529] unevictable:0 dirty:165 writeback:0 [ 208.299704][ T9529] slab_reclaimable:3837 slab_unreclaimable:55644 [ 208.299704][ T9529] mapped:35357 shmem:23190 pagetables:3767 [ 208.299704][ T9529] sec_pagetables:0 bounce:0 [ 208.299704][ T9529] kernel_misc_reclaimable:0 [ 208.299704][ T9529] free:1809693 free_pcp:21863 free_cma:0 [ 208.346410][ T9529] Node 0 active_anon:134368kB inactive_anon:4kB active_file:56884kB inactive_file:9676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141428kB dirty:660kB writeback:0kB shmem:92760kB kernel_stack:4432kB pagetables:15068kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 208.375700][ T9529] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 208.428121][ T9529] lowmem_reserve[]: 0 2879 7857 7857 [ 208.433682][ T9529] Node 0 DMA32 free:2944564kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948192kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 208.508745][ T9529] lowmem_reserve[]: 0 0 4978 4978 [ 208.516035][ T9529] Node 0 Normal free:4278848kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:129148kB inactive_anon:4kB active_file:57348kB inactive_file:9676kB unevictable:0kB writepending:660kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:88680kB local_pcp:64608kB free_cma:0kB [ 208.615746][ T9529] lowmem_reserve[]: 0 0 0 0 [ 208.620509][ T9529] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 208.633480][ T9529] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 4*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944564kB [ 208.649751][ T9529] Node 0 Normal: 691*4kB (UE) 228*8kB (U) 99*16kB (UME) 226*32kB (UME) 235*64kB (UME) 186*128kB (UE) 242*256kB (UME) 162*512kB (UME) 152*1024kB (UM) 97*2048kB (UME) 910*4096kB (UM) = 4278812kB [ 208.668974][ T9529] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 208.689542][ T9529] 43186 total pagecache pages [ 208.694336][ T9529] 14 pages in swap cache [ 208.698993][ T9529] Free swap = 124496kB [ 208.703179][ T9529] Total swap = 124996kB [ 208.709840][ T9529] 2097051 pages RAM [ 208.713699][ T9529] 0 pages HighMem/MovableOnly [ 208.718475][ T9529] 81603 pages reserved [ 208.725412][ T9543] loop4: detected capacity change from 0 to 8192 [ 209.326931][ T9552] geneve2: entered promiscuous mode [ 209.360598][ T9554] loop0: detected capacity change from 0 to 128 [ 209.416339][ T9556] loop4: detected capacity change from 0 to 512 [ 209.423045][ T9556] EXT4-fs: Ignoring removed bh option [ 209.430445][ T9556] EXT4-fs: Ignoring removed oldalloc option [ 209.438225][ T9556] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 209.476106][ T9556] EXT4-fs (loop4): 1 truncate cleaned up [ 209.486474][ T9556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.530184][ T9556] pim6reg1: tun_chr_ioctl cmd 1074812118 [ 209.565032][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 209.565051][ T28] audit: type=1326 audit(1772525381.999:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.652106][ T28] audit: type=1326 audit(1772525382.049:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.703938][ T28] audit: type=1326 audit(1772525382.049:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.760973][ T9567] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 209.776318][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.796130][ T28] audit: type=1326 audit(1772525382.049:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.826090][ T9567] SELinux: failed to load policy [ 209.832758][ T28] audit: type=1326 audit(1772525382.049:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.856827][ T28] audit: type=1326 audit(1772525382.049:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.884157][ T28] audit: type=1326 audit(1772525382.099:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.908160][ T28] audit: type=1326 audit(1772525382.099:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.932763][ T28] audit: type=1326 audit(1772525382.119:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 209.956740][ T28] audit: type=1326 audit(1772525382.119:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9553 comm="syz.0.1319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f408e6dc799 code=0x7ffc0000 [ 210.396263][ T3493] IPVS: starting estimator thread 0... [ 210.496225][ T9580] IPVS: using max 2160 ests per chain, 108000 per kthread [ 211.306140][ T9594] loop4: detected capacity change from 0 to 8192 [ 211.385297][ T9593] netlink: 'syz.2.1332': attribute type 4 has an invalid length. [ 211.430530][ T9595] netlink: 'syz.2.1332': attribute type 4 has an invalid length. [ 211.743299][ T9597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1333'. [ 211.772736][ T9597] hub 9-0:1.0: USB hub found [ 211.791766][ T9597] hub 9-0:1.0: 8 ports detected [ 212.190739][ T9609] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1335'. [ 212.201306][ T9609] netlink: zone id is out of range [ 212.207184][ T9609] netlink: zone id is out of range [ 212.215808][ T9609] netlink: zone id is out of range [ 212.385378][ T9609] netlink: set zone limit has 8 unknown bytes [ 212.720549][ T9619] netlink: 'syz.6.1341': attribute type 10 has an invalid length. [ 212.736056][ T9619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'. [ 212.772910][ T9619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.826963][ T9619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.880825][ T9619] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 212.900891][ T9630] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1344'. [ 212.911747][ T9629] loop0: detected capacity change from 0 to 512 [ 212.934833][ T9630] hub 9-0:1.0: USB hub found [ 212.945801][ T9630] hub 9-0:1.0: 8 ports detected [ 212.961921][ T9629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.986152][ T9629] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.065618][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.277435][ T9640] loop0: detected capacity change from 0 to 8192 [ 213.319377][ T9646] netlink: 'syz.6.1349': attribute type 7 has an invalid length. [ 213.327881][ T9646] netlink: 'syz.6.1349': attribute type 7 has an invalid length. [ 213.448375][ T9647] loop2: detected capacity change from 0 to 1764 [ 213.456357][ T9647] iso9660: Unknown parameter 'utF8' [ 213.536057][ T6384] IPVS: starting estimator thread 0... [ 213.653244][ T9650] loop4: detected capacity change from 0 to 256 [ 213.660085][ T9648] IPVS: using max 2352 ests per chain, 117600 per kthread [ 214.326568][ T9662] FAULT_INJECTION: forcing a failure. [ 214.326568][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 214.346163][ T9658] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 214.376348][ T9658] SELinux: failed to load policy [ 214.395702][ T9662] CPU: 0 UID: 0 PID: 9662 Comm: syz.0.1353 Tainted: G W syzkaller #0 PREEMPT(full) [ 214.395779][ T9662] Tainted: [W]=WARN [ 214.395785][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.395800][ T9662] Call Trace: [ 214.395808][ T9662] [ 214.395868][ T9662] __dump_stack+0x1d/0x30 [ 214.395895][ T9662] dump_stack_lvl+0x95/0xd0 [ 214.395924][ T9662] dump_stack+0x15/0x1b [ 214.395951][ T9662] should_fail_ex+0x263/0x280 [ 214.395980][ T9662] should_failslab+0x8c/0xb0 [ 214.396068][ T9662] __kmalloc_noprof+0xb8/0x4e0 [ 214.396090][ T9662] ? security_sb_alloc+0x48/0x100 [ 214.396115][ T9662] ? alloc_super+0x3d/0x580 [ 214.396197][ T9662] security_sb_alloc+0x48/0x100 [ 214.396225][ T9662] alloc_super+0x10d/0x580 [ 214.396289][ T9662] sget_fc+0x24e/0x6e0 [ 214.396315][ T9662] ? __pfx_set_anon_super_fc+0x10/0x10 [ 214.396426][ T9662] ? __pfx_hugetlbfs_fill_super+0x10/0x10 [ 214.396463][ T9662] get_tree_nodev+0x2a/0x100 [ 214.396567][ T9662] hugetlbfs_get_tree+0x1c4/0x1f0 [ 214.396606][ T9662] vfs_get_tree+0x57/0x1d0 [ 214.396642][ T9662] vfs_cmd_create+0x8a/0x140 [ 214.396677][ T9662] vfs_fsconfig_locked+0x6f/0x210 [ 214.396731][ T9662] __se_sys_fsconfig+0x684/0x7d0 [ 214.396767][ T9662] __x64_sys_fsconfig+0x67/0x80 [ 214.396800][ T9662] x64_sys_call+0xd6e/0x3020 [ 214.396883][ T9662] do_syscall_64+0x12c/0x370 [ 214.396905][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.396926][ T9662] RIP: 0033:0x7f408e6dc799 [ 214.396944][ T9662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.396967][ T9662] RSP: 002b:00007f408d12f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 214.397070][ T9662] RAX: ffffffffffffffda RBX: 00007f408e955fa0 RCX: 00007f408e6dc799 [ 214.397088][ T9662] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 214.397103][ T9662] RBP: 00007f408d12f090 R08: 0000000000000000 R09: 0000000000000000 [ 214.397117][ T9662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.397129][ T9662] R13: 00007f408e956038 R14: 00007f408e955fa0 R15: 00007fff489f6a38 [ 214.397214][ T9662] [ 215.214513][ T9672] loop2: detected capacity change from 0 to 1024 [ 215.221377][ T9672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 215.236115][ T9672] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.254203][ T9672] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 215.284393][ T9672] System zones: 0-1, 3-36 [ 215.291696][ T9672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.309663][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 215.309683][ T28] audit: type=1400 audit(1772525387.799:1122): avc: denied { create } for pid=9676 comm="syz.6.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.368299][ T28] audit: type=1400 audit(1772525387.859:1123): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.391845][ T3314] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 215.417803][ T3314] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 215.426592][ T28] audit: type=1400 audit(1772525387.879:1124): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 215.538053][ T9682] loop0: detected capacity change from 0 to 1024 [ 215.570012][ T364] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.582251][ T9682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 215.594483][ T9682] System zones: 0-1, 3-36 [ 215.617322][ T9683] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.640397][ T364] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.661285][ T9682] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.1360: bad orphan inode 134217728 [ 215.682439][ T9682] loop0: lost filesystem error report for type 5 error -117 [ 215.697947][ T364] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.725680][ T9682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.787796][ T364] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.811992][ T9690] loop4: detected capacity change from 0 to 8192 [ 215.874258][ T28] audit: type=1400 audit(1772525388.359:1125): avc: denied { write } for pid=9681 comm="syz.0.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.945503][ T364] bridge_slave_1: left allmulticast mode [ 215.955839][ T364] bridge_slave_1: left promiscuous mode [ 215.968355][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.987556][ T364] bridge_slave_0: left allmulticast mode [ 215.993289][ T364] bridge_slave_0: left promiscuous mode [ 216.005380][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.100358][ T5258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.133879][ T364] geneve0 (unregistering): left promiscuous mode [ 216.161816][ T364] team0: Port device geneve0 removed [ 216.224438][ T364] bond0 (unregistering): Released all slaves [ 216.291665][ T9692] xfrm0 speed is unknown, defaulting to 1000 [ 216.368789][ T364] tipc: Left network mode [ 216.481630][ T9734] loop9: detected capacity change from 0 to 1764 [ 216.489227][ T9734] iso9660: Unknown parameter 'utF8' [ 216.719816][ T364] batadv0: left promiscuous mode [ 216.812178][ T364] hsr_slave_0: left promiscuous mode [ 216.894508][ T364] hsr_slave_1: left promiscuous mode [ 216.925748][ T28] audit: type=1326 audit(1772525389.409:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 216.970858][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.032153][ T364] batadv0: mtu less than device minimum [ 217.123888][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.134903][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.145827][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.156660][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.167805][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.242985][ T28] audit: type=1326 audit(1772525389.409:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 217.352751][ T28] audit: type=1326 audit(1772525389.449:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 217.395799][ T28] audit: type=1326 audit(1772525389.449:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 217.422945][ T364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.430228][ T28] audit: type=1326 audit(1772525389.469:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 217.456004][ T28] audit: type=1326 audit(1772525389.469:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9729 comm="syz.6.1369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f9970e8c799 code=0x7ffc0000 [ 217.487519][ T364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.495138][ T364] net_ratelimit: 14 callbacks suppressed [ 217.495152][ T364] batadv0: mtu less than device minimum [ 217.516189][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.527170][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.538167][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.548991][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.560089][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.571036][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.581977][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.592816][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.604074][ T364] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 217.733305][ T364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.753940][ T364] batman_adv: batadv0: Interface deactivated: dummy0 [ 217.763716][ T364] batman_adv: batadv0: Removing interface: dummy0 [ 217.780614][ T364] batman_adv: batadv0: Removing interface: ipvlan2 [ 217.791192][ T364] veth1_vlan: left promiscuous mode [ 217.796732][ T364] veth0_vlan: left promiscuous mode [ 217.925627][ T364] team_slave_1 (unregistering): left promiscuous mode [ 217.933071][ T364] team0 (unregistering): Port device team_slave_1 removed [ 217.953705][ T364] team_slave_0 (unregistering): left promiscuous mode [ 217.962999][ T364] team0 (unregistering): Port device team_slave_0 removed [ 218.151102][ T9692] chnl_net:caif_netlink_parms(): no params data found [ 218.205417][ T9769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1376'. [ 218.334291][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.343079][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.353129][ T9692] bridge_slave_0: entered allmulticast mode [ 218.360144][ T9692] bridge_slave_0: entered promiscuous mode [ 218.367414][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.374609][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.382795][ T9692] bridge_slave_1: entered allmulticast mode [ 218.392764][ T9692] bridge_slave_1: entered promiscuous mode [ 218.434031][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.468927][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.506295][ T9786] loop9: detected capacity change from 0 to 8192 [ 218.516095][ T364] IPVS: stop unused estimator thread 0... [ 218.633336][ T9692] team0: Port device team_slave_0 added [ 218.654678][ T9692] team0: Port device team_slave_1 added [ 218.677812][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.684800][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.715135][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.726792][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.733897][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.761610][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.798013][ T9692] hsr_slave_0: entered promiscuous mode [ 218.804399][ T9692] hsr_slave_1: entered promiscuous mode [ 218.810543][ T9692] debugfs: 'hsr0' already exists in 'hsr' [ 218.816585][ T9692] Cannot create hsr debugfs directory [ 219.055481][ T9840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1386'. [ 219.065062][ T9840] hub 9-0:1.0: USB hub found [ 219.070257][ T9840] hub 9-0:1.0: 8 ports detected [ 219.156606][ T9692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 219.178562][ T9853] loop4: detected capacity change from 0 to 256 [ 219.192823][ T9692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 219.202108][ T9853] vfat: Unknown parameter 'shottname' [ 219.217937][ T9692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 219.356616][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1392'. [ 219.430984][ T9692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.481958][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1393'. [ 219.601795][ T9880] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1393'. [ 219.927266][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.956841][ T9896] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.969873][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1395'. [ 219.998484][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.042699][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.049921][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.346717][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.354040][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.409725][ T9903] loop4: detected capacity change from 0 to 1024 [ 220.459301][ T9903] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.554983][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 220.564477][ T9914] hub 9-0:1.0: USB hub found [ 220.569743][ T9914] hub 9-0:1.0: 8 ports detected [ 220.595883][ T9896] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.621806][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.679344][ T9896] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.743697][ T9896] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.767188][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.808480][ T36] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.836455][ T36] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.871474][ T50] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.901269][ T50] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.136300][ T9692] veth0_vlan: entered promiscuous mode [ 221.163254][ T9692] veth1_vlan: entered promiscuous mode [ 221.217409][ T9692] veth0_macvtap: entered promiscuous mode [ 221.237684][ T9692] veth1_macvtap: entered promiscuous mode [ 221.287744][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.326441][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.390532][ T354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.419045][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1400'. [ 221.439234][ T354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.506241][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1400'. [ 221.581765][ T9967] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1400'. [ 221.640599][ T9969] loop4: detected capacity change from 0 to 8192 [ 221.711294][ T354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.727057][ T354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.735836][ T354] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.744668][ T354] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.753645][ T354] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.762623][ T354] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.783426][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 221.783445][ T28] audit: type=1400 audit(1772525394.269:1148): avc: denied { mounton } for pid=9692 comm="syz-executor" path="/root/syzkaller.aOeXEO/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 221.872371][ T28] audit: type=1400 audit(1772525394.349:1149): avc: denied { mount } for pid=9692 comm="syz-executor" name="/" dev="gadgetfs" ino=4584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 222.068505][ T28] audit: type=1400 audit(1772525394.389:1150): avc: denied { read } for pid=9975 comm="syz.0.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 222.225757][ T9983] sctp: [Deprecated]: syz.9.1403 (pid 9983) Use of int in maxseg socket option. [ 222.225757][ T9983] Use struct sctp_assoc_value instead [ 222.244179][ T28] audit: type=1400 audit(1772525394.709:1151): avc: denied { getopt } for pid=9982 comm="syz.9.1403" lport=58949 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.914189][T10001] hub 9-0:1.0: USB hub found [ 222.919009][T10001] hub 9-0:1.0: 8 ports detected [ 223.028116][ T50] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.120658][ T50] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.230308][ T50] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.329157][T10012] loop9: detected capacity change from 0 to 512 [ 223.383034][ T50] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.447196][T10012] EXT4-fs (loop9): orphan cleanup on readonly fs [ 223.458593][T10002] xfrm0 speed is unknown, defaulting to 1000 [ 223.500167][T10012] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #11: block 1: comm syz.9.1408: lblock 0 mapped to illegal pblock 1 (length 1) [ 223.595649][T10012] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.595949][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 223.611595][ C1] EXT4-fs (loop9): initial error at time 1772525396: ext4_map_blocks:776: inode 11: block 1 [ 223.621753][ C1] EXT4-fs (loop9): last error at time 1772525396: ext4_map_blocks:776: inode 11: block 1 [ 223.643476][T10012] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 223.684822][T10012] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.1408: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 223.730460][T10012] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 223.750832][T10012] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.9.1408: ea_inode dec ref err=-117 [ 223.784649][T10002] chnl_net:caif_netlink_parms(): no params data found [ 223.812010][T10012] EXT4-fs (loop9): 1 orphan inode deleted [ 223.819597][T10012] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 223.873887][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.881584][T10002] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.889688][T10002] bridge_slave_0: entered allmulticast mode [ 223.896750][T10002] bridge_slave_0: entered promiscuous mode [ 223.903750][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.911120][T10002] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.918438][T10002] bridge_slave_1: entered allmulticast mode [ 223.932626][T10002] bridge_slave_1: entered promiscuous mode [ 223.964205][T10002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.976374][T10002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.998079][T10002] team0: Port device team_slave_0 added [ 224.004875][T10002] team0: Port device team_slave_1 added [ 224.022262][T10002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.030812][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.057911][T10002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.071316][T10002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.101974][T10002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.130369][T10002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.152197][ T4937] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.201051][T10002] hsr_slave_0: entered promiscuous mode [ 224.218893][T10002] hsr_slave_1: entered promiscuous mode [ 224.224892][T10002] debugfs: 'hsr0' already exists in 'hsr' [ 224.246145][T10048] loop5: detected capacity change from 0 to 8192 [ 224.264311][T10054] __nla_validate_parse: 2 callbacks suppressed [ 224.264333][T10054] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1416'. [ 224.266476][T10002] Cannot create hsr debugfs directory [ 224.272351][T10054] hub 9-0:1.0: USB hub found [ 224.315785][T10054] hub 9-0:1.0: 8 ports detected [ 225.557583][T10079] loop5: detected capacity change from 0 to 1024 [ 226.588104][ T6384] ================================================================== [ 226.596253][ T6384] BUG: KCSAN: data-race in __mod_timer / __mod_timer [ 226.603034][ T6384] [ 226.605387][ T6384] write to 0xffff88811a4d64a0 of 8 bytes by task 9888 on cpu 1: [ 226.613047][ T6384] __mod_timer+0x670/0x9d0 [ 226.617517][ T6384] mod_timer+0x1f/0x30 [ 226.621651][ T6384] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 226.628897][ T6384] wg_packet_rx_poll+0x7f5/0x10f0 [ 226.633973][ T6384] __napi_poll+0x61/0x330 [ 226.638442][ T6384] napi_threaded_poll_loop+0x1b9/0x630 [ 226.644041][ T6384] napi_threaded_poll+0x15f/0x1f0 [ 226.649110][ T6384] kthread+0x22a/0x280 [ 226.653204][ T6384] ret_from_fork+0x150/0x360 [ 226.657841][ T6384] ret_from_fork_asm+0x1a/0x30 [ 226.662661][ T6384] [ 226.665011][ T6384] read to 0xffff88811a4d64a0 of 8 bytes by task 6384 on cpu 0: [ 226.672578][ T6384] __mod_timer+0x69/0x9d0 [ 226.676954][ T6384] mod_timer+0x1f/0x30 [ 226.681062][ T6384] wg_timers_any_authenticated_packet_traversal+0xd0/0x100 [ 226.688308][ T6384] wg_packet_tx_worker+0xeb/0x330 [ 226.693390][ T6384] process_scheduled_works+0x4de/0x9e0 [ 226.698888][ T6384] worker_thread+0x581/0x770 [ 226.703517][ T6384] kthread+0x22a/0x280 [ 226.707036][T10079] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 226.707623][ T6384] ret_from_fork+0x150/0x360 [ 226.707668][ T6384] ret_from_fork_asm+0x1a/0x30 [ 226.707702][ T6384] [ 226.707706][ T6384] value changed: 0x00000000ffffe904 -> 0x00000000ffffea81 [ 226.707718][ T6384] [ 226.707723][ T6384] Reported by Kernel Concurrency Sanitizer on: [ 226.707741][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: kworker/0:7 Tainted: G W syzkaller #0 PREEMPT(full) [ 226.707779][ T6384] Tainted: [W]=WARN [ 226.757900][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 226.767973][ T6384] Workqueue: wg-crypt-wg2 wg_packet_tx_worker [ 226.774074][ T6384] ================================================================== [ 226.800425][T10079] System zones: 0-1, 3-36 [ 226.833918][T10079] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1419: bad orphan inode 134217728 [ 226.850118][T10079] loop5: lost filesystem error report for type 5 error -117 [ 226.856008][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 226.869817][ C1] EXT4-fs (loop5): initial error at time 1772525399: ext4_orphan_get:1417 [ 226.878414][ C1] EXT4-fs (loop5): last error at time 1772525399: ext4_orphan_get:1417 [ 226.885078][T10079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.956603][ T50] team0: Port device geneve0 removed [ 227.048540][ T50] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 227.062042][ T50] bond0 (unregistering): Released all slaves [ 227.078916][ T50] bond1 (unregistering): Released all slaves [ 227.098580][ T50] bond2 (unregistering): Released all slaves [ 227.164495][ T50] hsr_slave_0: left promiscuous mode [ 227.180290][ T50] veth1_macvtap: left promiscuous mode [ 227.185878][ T50] veth0_macvtap: left promiscuous mode [ 227.196213][ T50] veth1_vlan: left promiscuous mode [ 227.201577][ T50] veth0_vlan: left promiscuous mode [ 227.330822][ T9692] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.639855][ T50] IPVS: stop unused estimator thread 0... [ 228.060878][T10002] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 228.070451][T10002] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 228.080155][T10002] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 228.089442][T10002] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 228.129125][T10002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.142866][T10002] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.153666][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.160801][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.180663][T10002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.191187][T10002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.204909][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.212051][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.283890][T10002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.423315][T10002] veth0_vlan: entered promiscuous mode [ 228.432437][T10002] veth1_vlan: entered promiscuous mode [ 228.454131][T10002] veth0_macvtap: entered promiscuous mode [ 228.463171][T10002] veth1_macvtap: entered promiscuous mode [ 228.479978][T10002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.492422][T10002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.504646][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.529854][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.539299][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.550856][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0