last executing test programs: 10m43.75032105s ago: executing program 32 (id=766): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000300, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0xfffff9, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="646f74732c6e66732c646f733178666c6f7070792c6e6f646f74732c6e66733d6e6f7374616c655f726f00006c7573682c007c32e6ed807e489371f36801ce050bf44a544254090f402f7118d54d9ab682086b2837a98d2ba3e5fdafcfdc2299feec75ae06d3eafa38e22c3acf88", @ANYRESHEX], 0x1, 0x122c, &(0x7f0000000200)="$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") (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, 0x0, &(0x7f0000000100)) 8m10.463240118s ago: executing program 33 (id=2242): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x3de8, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x80000000, 0x101, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x7fff, 0x6, 0x2, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0xb, 0x1, 0x2f2, 0x3, 0x8001, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1004, 0x401, 0xc0000000, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x2, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x40000008, 0x809, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x5, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x7ff, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x4, 0x1b2a, 0x81, 0x9, 0x1c, 0x4, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x9, 0x3, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x3, 0x3, 0xd7c3, 0x2, 0x1, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x6, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x3, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x61fe, 0x9, 0x6, 0x7, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7e54, 0xa, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x2, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff}, 0x9, 0xbc, 0xdf72c67}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x490}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000002) 8m5.589567071s ago: executing program 0 (id=2396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) inotify_init1(0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) readv(r2, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) sched_setaffinity(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x4, 0x0) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f8000000160001002bbd7000fedbdf250a010101000000000000000000000000fe8800000000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000004d533000000ac1414100000000000000000000000000800100000000000b507000000000000000000000000000006000000000000000900000000000000faffffffffffffffffffffff000000000300000000000000020000000000000002000000000000000100000000000000faffffffffffffff0000000001000100f9ffffff2abd70000000000002000206010000000000000008"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) 8m2.541211275s ago: executing program 0 (id=2444): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c88c}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250900000008000300", @ANYRES32=r2, @ANYBLOB="05000700120000000800010002000000050007001100000099787d2c931e08fec723769da1fe9192cf5a9b03db840def99d0c2a8486ab6158cb4ef7e0f7f237c04b9e91cb6498395059803c194f2f682fc9e9df80f15f22c1607e52b3dcf05fa2a3eb884bb3e57b672162bd02c5cbc3b3ca73672058d1462ba826fb81dbbd839f8aa5c6e669227"], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r5 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, 0x0, 0x20000000) connect$inet6(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xffffffffffffffff, r6, 0xe, &(0x7f0000000040)="111539bef9277ae42a88e7f064c8253d670fade4cd9f0fe2bc10fcd17536ebf7e79e82e10c563ab55eb5ef43fef9bd33fe5782d09836dc4a906cbeaee95803114b79e7ef2df5c6926b8051846d48cbf64e69914b6d56a346eefbc91f0b7271f229ec370829580b79126c3870ed1cfb3ef099c8885e7203c90697feaec53534116dc277e6b239361ab65978e2040ae06750c0cef433956cb10e2c7bf3b9d3574d2f5182dbe605e77fbe8ea77d95609270d38060d1e7acd11533cb56d364e15e6c53edd27d50dd69a05de7a0f862fd453037bc847dc0db997b0519fed3b91c35") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r7, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13) ioctl$GIO_CMAP(r7, 0x4b70, &(0x7f0000000140)) 8m2.345136375s ago: executing program 0 (id=2446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r2, @ANYBLOB="080004006401010408000800ec00000008000200e0000065080001007f00000108"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 8m2.124532047s ago: executing program 0 (id=2449): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val}]}, 0xfa, 0x4cc, &(0x7f00000016c0)="$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") (fail_nth: 2) 8m1.349116389s ago: executing program 0 (id=2452): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3284821, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0x0, 0xee01) 8m0.641046707s ago: executing program 0 (id=2458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c88c}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250900000008000300", @ANYRES32=r2, @ANYBLOB="05000700120000000800010002000000050007001100000099787d2c931e08fec723769da1fe9192cf5a9b03db840def99d0c2a8486ab6158cb4ef7e0f7f237c04b9e91cb6498395059803c194f2f682fc9e9df80f15f22c1607e52b3dcf05fa2a3eb884bb3e57b672162bd02c5cbc3b3ca73672058d1462ba826fb81dbbd839f8aa5c6e669227"], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r5 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, 0x0, 0x20000000) connect$inet6(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xffffffffffffffff, r6, 0xe, &(0x7f0000000040)="111539bef9277ae42a88e7f064c8253d670fade4cd9f0fe2bc10fcd17536ebf7e79e82e10c563ab55eb5ef43fef9bd33fe5782d09836dc4a906cbeaee95803114b79e7ef2df5c6926b8051846d48cbf64e69914b6d56a346eefbc91f0b7271f229ec370829580b79126c3870ed1cfb3ef099c8885e7203c90697feaec53534116dc277e6b239361ab65978e2040ae06750c0cef433956cb10e2c7bf3b9d3574d2f5182dbe605e77fbe8ea77d95609270d38060d1e7acd11533cb56d364e15e6c53edd27d50dd69a05de7a0f862fd453037bc847dc0db997b0519fed3b91c35") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r7], 0x13) 7m45.573575328s ago: executing program 34 (id=2458): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c88c}, 0x40090) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250900000008000300", @ANYRES32=r2, @ANYBLOB="05000700120000000800010002000000050007001100000099787d2c931e08fec723769da1fe9192cf5a9b03db840def99d0c2a8486ab6158cb4ef7e0f7f237c04b9e91cb6498395059803c194f2f682fc9e9df80f15f22c1607e52b3dcf05fa2a3eb884bb3e57b672162bd02c5cbc3b3ca73672058d1462ba826fb81dbbd839f8aa5c6e669227"], 0x34}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5", 0x81}], 0x1}, 0x0) r4 = creat(&(0x7f0000000080)='./bus\x00', 0x154) r5 = socket(0x2b, 0x80801, 0x1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, 0x0, 0x20000000) connect$inet6(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x10, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xffffffffffffffff, r6, 0xe, &(0x7f0000000040)="111539bef9277ae42a88e7f064c8253d670fade4cd9f0fe2bc10fcd17536ebf7e79e82e10c563ab55eb5ef43fef9bd33fe5782d09836dc4a906cbeaee95803114b79e7ef2df5c6926b8051846d48cbf64e69914b6d56a346eefbc91f0b7271f229ec370829580b79126c3870ed1cfb3ef099c8885e7203c90697feaec53534116dc277e6b239361ab65978e2040ae06750c0cef433956cb10e2c7bf3b9d3574d2f5182dbe605e77fbe8ea77d95609270d38060d1e7acd11533cb56d364e15e6c53edd27d50dd69a05de7a0f862fd453037bc847dc0db997b0519fed3b91c35") ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r8, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32=r7], 0x13) 6m25.107870307s ago: executing program 6 (id=3383): bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d7, 0x0) ioctl$sock_bt_hci(r1, 0x800448f0, 0x0) r2 = accept4(r1, &(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000740)=0x80, 0x80000) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x200c1) process_vm_writev(0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/232, 0xe8}, {&(0x7f0000000180)=""/110, 0x6e}], 0x10000000000002eb, &(0x7f00000003c0), 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005201206", 0x2e}], 0x1}, 0x48000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) request_key(&(0x7f0000000040)='encrypted\x00', &(0x7f0000000000)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x1, 0x3, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x1, 0x8590, 0x6}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r7, @ANYBLOB="000127bd7000fcdbdf2503000000080003000000000008000400ff0700004800018008000300ac14141908000300e0000002060005004e2100000600010002000000050002000800000014000400ff01000000000000000000000000000108000300e000000208000300030000003c000680080003006401010008000300ac141424080003007f000001060005004e200000080006000f000000", @ANYRES32=r8, @ANYBLOB="460009000a000000f77eede42b986d9a163929cd3988bdfa4169f1cab673e0fa981b1741d2f16b4ab70cd9270f0f5c2d3f5c"], 0xb8}, 0x1, 0x0, 0x0, 0x20008040}, 0x8000) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x4}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0xb7, 0xcb7, 0xfffffffe}}, 0xe8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x3d, 0x35c, &(0x7f00000011c0)="$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") 6m24.365338958s ago: executing program 6 (id=3385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0xffffffffffffff37) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800400000100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x2008, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000140)={0x7, {{0xa, 0x4e22, 0xffffff9d, @private1, 0x5}}, 0x1, 0x2, [{{0xa, 0x4e20, 0x6, @private2, 0xcf7}}, {{0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}]}, 0x190) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4e22, 0x0, 0x4e21, 0x6, 0x2, 0xa0, 0xe0, 0x2e, 0x0, 0xffffffffffffffff}, {0x10001, 0x3, 0x4, 0xfffffffffffffffc, 0x7fffffff, 0x9, 0xffffffffffffffff, 0xf8b}, {0xa9, 0xd1b3, 0x1000, 0x4}, 0x626a, 0x6e6bb5, 0x2, 0x0, 0x2, 0x3}, {{@in=@empty, 0x4d5, 0xff}, 0xa, @in6=@mcast1, 0x3502, 0x3, 0x3, 0x5, 0xefa5, 0x7, 0x8}}, 0xe8) 6m24.213523856s ago: executing program 6 (id=3388): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x40000000, 0x0, [{0x3, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x19, 0x1, "0000e10b0000000026086700"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e01000000be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x80000) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f0000000340)=""/8) 6m24.213043686s ago: executing program 6 (id=3389): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) socket$kcm(0x2b, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001000010700930000ffffffff0a000000060001001000000008000a00", @ANYRES32=r0], 0x24}}, 0x24008000) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 6m24.073311704s ago: executing program 6 (id=3392): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockname(r2, 0x0, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, 0x0, 0x80fe) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x9, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000240)={r4, 0x200, 0x8, 0xcdf1, 0x0, 0x9}, &(0x7f00000002c0)=0x14) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, r0, 0xb) io_setup(0x1581, 0x0) socket$kcm(0xa, 0x2, 0x11) recvmsg$can_j1939(r2, &(0x7f0000003dc0)={&(0x7f0000000140)=@l2={0x1f, 0x0, @none}, 0x80, 0x0}, 0x12000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}, 0x10, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001440)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f00000000c0)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x8}]}}}]}, 0x40}, 0x1, 0xba01, 0x0, 0x240c8800}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close(0x3) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) sendmsg(r3, 0x0, 0x42) 6m22.945187414s ago: executing program 6 (id=3402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x5d) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf", @ANYRES32=r5, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) socket$inet6(0xa, 0xa, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0x9}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 6m22.913617716s ago: executing program 35 (id=3402): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x5d) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf", @ANYRES32=r5, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) syz_open_dev$loop(0x0, 0x3, 0xa004) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCSIGNAL(r8, 0x8010550e, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) socket$inet6(0xa, 0xa, 0xc) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd30, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0x9}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2m29.805948459s ago: executing program 2 (id=5291): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m29.733208063s ago: executing program 2 (id=5292): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, 0x0, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8571, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x0, 0xfffffffc, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffdfc}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2m23.241483723s ago: executing program 2 (id=5301): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001400)}, 0x8) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) close(0x3) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="2b0e2dbd7000fddbce9cdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40980000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) recvmmsg(r3, 0x0, 0x0, 0x20, 0x0) close_range(r2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'fo\x00', 0x1, 0x0, 0x6}, 0x2c) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(r9, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m20.169453898s ago: executing program 2 (id=5309): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) r5 = syz_io_uring_setup(0x6d58, &(0x7f0000000180)={0x0, 0xfbfb, 0x10, 0x0, 0x174}, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340)) io_uring_enter(r5, 0x5404, 0x8f54, 0x83, &(0x7f0000000380)={[0x8]}, 0x8) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 2m20.114860701s ago: executing program 2 (id=5310): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0x5, 0x9, 0x60, @private2, @mcast2, 0x7, 0x10, 0x3, 0x1}}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xa4d, 0x7, 0x70e1, 0x405, 0x1, 0xf2, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0xa}, 0x50) 2m19.577182199s ago: executing program 2 (id=5316): capset(&(0x7f0000000080)={0x20071026}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x7}, 0x100, 0xa88, 0xae, 0x5, 0x0, 0x7ffc, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) fchmod(r5, 0x8) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) 2m19.541942321s ago: executing program 36 (id=5316): capset(&(0x7f0000000080)={0x20071026}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0x7, 0x7}, 0x100, 0xa88, 0xae, 0x5, 0x0, 0x7ffc, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) fchmod(r5, 0x8) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) 1m5.532868613s ago: executing program 1 (id=5711): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 1m5.41287984s ago: executing program 1 (id=5713): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0x9cb1, 0x800000, 0x43a1bd7a, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2800088, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESHEX=r1], 0x95, 0x2c9, &(0x7f00000008c0)="$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") r2 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x2, @perf_bp={0x0}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) ioctl$RNDADDENTROPY(r3, 0x5207, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x56e60cb920c3db7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000440)={{}, {0x0, 0x989680}}, &(0x7f00000004c0)) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000140)="110000000200000000000c000000", 0xe) connect$vsock_stream(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r6, &(0x7f0000000600), 0x0, 0x3, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f0000000040)="030000001ec0040000071a8001", 0xd) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC], 0x2000, 0x0) 1m4.449660392s ago: executing program 1 (id=5725): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0x8, 0x4}, {0xe, 0x4}, {0xd, 0x3}, {0x7}]}]}}, &(0x7f0000000f40)=""/4077, 0x46, 0xfed, 0x1, 0x8, 0x0, @void, @value=0xd000000}, 0x28) 1m4.357376187s ago: executing program 1 (id=5726): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20019f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4400}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb2993000) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f00000011c0), 0xfffffffffffffffe) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f0000b02fa3ea080007100000", @ANYRES32=r4, @ANYBLOB="80007200"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0xa77b, 0xed, 0xa, 0x10000, 0x0, 0x9, 0x1, 0x800, 0x0}, &(0x7f0000000280)=0x20) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000ac0)={r6, @in6={{0xa, 0x4e22, 0x6, @private1, 0x80000001}}}, &(0x7f0000000b80)=0x84) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1143430, &(0x7f0000000a80)=ANY=[@ANYRES64, @ANYRESOCT], 0xa, 0x0, &(0x7f0000000a80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x46030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100100, 0x2, 0x0, 0x0, 0xfffdfdffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 1m2.705427276s ago: executing program 1 (id=5730): r0 = getpgid(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='sched\x00') getpriority(0x1, r0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x9, 0x2003) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000400)={'dvmrp0\x00', {0x2, 0x0, @private}}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="ed", 0x1}, {0x0}], 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r2}, 0x8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000003f40), 0xfe, 0x28c, &(0x7f0000004240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="b4000000000000006b11300b5228edd06fbe3400", @ANYRES32=0x1, @ANYBLOB="0000000000000000850000000400000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xd9, &(0x7f0000000200)=""/217, 0x41000, 0x8, '\x00', r4}, 0x94) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000580)=0x4) 1m1.569551297s ago: executing program 1 (id=5735): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1000, 0x2000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x4, 0x4}, 0x10) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc']) 1m1.548445788s ago: executing program 37 (id=5735): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1000, 0x2000) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x0, 0x4, 0x4}, 0x10) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='acl,fsc']) 28.567643423s ago: executing program 7 (id=5969): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") r0 = open(&(0x7f0000000080)='./file1\x00', 0x64a42, 0x86) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) r1 = socket$nl_generic(0x10, 0x3, 0x10) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffff7ec]}, 0x0, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002d80)={r3, r2, 0x25, 0x8, @void}, 0x10) fcntl$setlease(r3, 0x400, 0x1) 28.348512824s ago: executing program 7 (id=5973): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xa, &(0x7f00000001c0)={0x6, 0x40}, &(0x7f0000000280)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0x8) poll(&(0x7f0000000300)=[{r1, 0x6465e38fd7d2bc75}, {r1, 0x2126}], 0x2, 0x404) shutdown(r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r4) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0xc0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000000)=0x5) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@nobarrier}, {@discard}, {@resgid}, {@resuid}]}, 0x0, 0x513, &(0x7f0000000780)="$eJzs3E9sFNUfAPDvbLu0/PvRHyIKolbR2EhsoaBwMFGMJh40MWKiHpu2EKRQQ0siBHW54NGQeDcevXrwql6I4WTiFY8mhoQYLoAJcc3szrTb7e6WLdsthc8nafe9mZ157+2bmX1/diaAh9Zg+i+phq9GxJaIKNS/YbD6cuvG+fHbN86PR6lcPvJ3UtnsZhrPZLuJjVlkqBDxehpIFqc7c/bcibGpqcnTWXxk9uSnIzNnz710vD9bcujQgf37Dr4y+nL7hWqQXlqumzu/mN614+2PL7073psvz1OrLUcr69rIxmAMNspKxfNt7Gct2FwTTnpXMSO0JT3+0+oqVs7/LdETrSqv1MWcASutXC6X+5qvLpXrXVi0BFizon+1cwCsjvyLPu3/5n+NGgLt9HvXkuuHqx2gtNy3sr+IpysL83GQYl3/tpMGI+Kj0j/fpn/RbByiZ4USBwAeSj8fzluCde2/gerMyJ0zl19LX/+XzaEMRMT/I2JrRDwSEdsi4tGI2B4Rj0XE43X7T5su5RbpD9bF59Kfm4QqXOtQURtK23+vZnNb8+2/BRkY6MlimyPyBvPk3uwzGYpi39HjU5P7WqTxy5u/f91sXaX9l+48awOm6WdtwazJXbjWWzdANzE2O3ZPha5x/ULEzt768ie9EcncTEASETsiYmcb+x2oCR9/8ftdc5HiwvfVtn/ryl+r3HAerQPzTOXvIl6I5M6tG+dLsaD+51NMFsxPnhw7Nnls8tTo3PzkSH9MTe4dSY+CvQ3TuPLbxfeapb9k+X/8s36Ttw7+dKRjnYK0/jfUHP+Rz9/Ol38giUjm5mtn2k/j4h9fNZ1bXbr+Gx//65IPKuG8X/rZ2Ozs6X0R65J3Fi8fnd82j6evUaqWf2h34/N/a7ZN+kk8ERHpQfxkRDwV1R5imvdnIuLZiNjdovy/vvHcJ22Xv9Bihx2Uln+i7vpXrfkF9T8/X98skGRzgw1W9ZwoXr3d5OLRuv6LWf0fqMSGsm0aX/+SBZeIZjnNv+3SJf925BMEAACA+18hIjbVjCVtikJheLg6BrQtNhSmpmdm9xydPnNqIl0XMRDFQj7SVR0PLib5+OdATXy0Lr4/Gzf+pmd9JT48Pj01saolBzZWzvmkMBzxYU/N+Z/6y+9O4MG3xDzag/rbP2CJ8z9txG+/1MXMAF1197+jufz5imYE6Lqa87/ZHf6lZfzuC1gDPK8FmLf0g35cM2DtKy86l8um/eAh0tZ3+R4PAYQHSW+8Pxfu0n2HwH1iuX35LzucD6Crlrivv6/pjfR3FSj3NV7VH4vfHP2td9gTy8vG+gZprUogbVmtSurrl7NV/jSFpu+JQns77Itl1mn+xJhsydF7/DRKp2eObb+rg7+dQD5o1uka/KH5eXqlr0Xt3Hug65ciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFfFfAAAA//9PmNtI") r6 = openat(r5, &(0x7f0000000180)='./file0\x00', 0x101000, 0x51) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) readv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/184, 0xb8}], 0x1) 26.745546621s ago: executing program 7 (id=5977): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x20000e0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030f000000fcfffffffcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22e000000200000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 26.621614617s ago: executing program 7 (id=5979): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(r0, &(0x7f0000001740)=[{&(0x7f0000000000)=""/95, 0x5f}, {&(0x7f0000000240)=""/161, 0xa1}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/233, 0xe9}, {&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000001640)=""/109, 0x6d}, {&(0x7f00000016c0)=""/98, 0x62}], 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000018000380140000800800034000000002"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) 26.237454428s ago: executing program 7 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) socket$kcm(0x10, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file1\x00', 0x8, &(0x7f00000000c0)=ANY=[], 0xfe, 0x567, &(0x7f0000000b00)="$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") linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x400) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") readlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)=""/130, 0x82) io_setup(0x30, &(0x7f00000001c0)) 23.529123184s ago: executing program 7 (id=5997): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_clone(0x22008500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r6], 0xfdef) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb011c18000000000000000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r8, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000880), 0x6400, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x8b5e10c0888804f6, 0x2c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x1, 0x0, 0x5, 0x1, 0x80, 0x4}, @ringbuf_query, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2f}}, @ringbuf_query, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0xfff, 0x8, &(0x7f0000000780)=""/8, 0x41100, 0x28, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000000800)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x1, 0x8c, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0xffffffffffffffff, r9, r10], &(0x7f0000000980)=[{0x2, 0x2, 0x4, 0x2}, {0x4, 0x3, 0x9, 0x9}, {0x0, 0x2, 0x5, 0x6}, {0x3, 0x5, 0xb, 0x5}, {0x1, 0x2, 0x2, 0x6}, {0x5, 0x3, 0xa, 0x8}, {0x5, 0x4, 0xe, 0xc}], 0x10, 0x5}, 0x94) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x1, 0x86) fchdir(r12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$eJzs3b9qU2EYB+A3/9pUh2RwEsEDOjiVtleQIhXETkoGddBiW5AkFCwEWsXQySvwSrwOF+/ACxC66VA4cnJS00JqG0yaUp9n6Qvn+/V9T/KFTOfL6zud1ubO7vbBh+9RrRai2IhG4TCiHsXIzAcAcN38StM4THPjJcvFac0EAEzXBb//Fy5xJABgyp49f/FkdX197WmSVCM6n7rNQuR/8+ur2/E22rEVS1GLo4j0j7x+9Hh9LcpJph73O71uM0t2Xn2NSp7/EdHPL0ct6qPzy0nuRL7XbVbixqB/I8uvRC1ujc6vjMhHcy4e3Dsx/2LU4tub2Il2bEaWHeY/LifJw/Tzz/cvs4mzfKHXbc731w2lpRm8PQAAAAAAAAAAAAAAAAAAAAAAXFOLSZIkafolTdO0d+r8ndJR//picqx++nyePH/W+UC9E+frLCVJcnxY8DBfjtvlKM/w1gEAAAAAAAAAAAAAAAAAAODK2N3bb22021vvJlocP9Y/+f/8r0WUBqO1CxFXYJ5+sZDNczm97saYvRpjtoji3n4ra5LtgdZGIc5JVae0SdIR2690ZmpuQt3nbl5scem8l2VQFCKiMtixf19cjMqEPykAAAAAAAAAAAAAAAAAAMAlGz70O+LiwQwGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAZGP7+/xhFbxC+YGrGtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/4HcAAAD//+xqeWQ=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 23.42192506s ago: executing program 38 (id=5997): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_clone(0x22008500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r6], 0xfdef) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb011c18000000000000000c0000000c00000002000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r8, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61122400000000006113340000000000bf10000000000000150002006f3007783d030100000000008701000000000000bc26000000000000bf67000000000000560300000ee600f06702000003000000140300000ee600f0bf050000000000000f610000000000006507f4ff02000400070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586e3f640f9f7e9a73b761ad4f0952a70046270d2b6436fdeecd791614ed46de741eb8cf91c046ef9beca574b350021c7ec6ef130f53748068ca432dae4e248b22b9ad8b2811f67916a1764578cba4b069037bfb3362d5691ac397f7e207145d970f0d97867552629b146645c785fb77dbeca38e49a9d5221f1f45f0a25890d04d91a15a05ae7e7ed6252c3d6c1973fb858de1da70d67317e7872b0603ce47ed2c1520e71b527bb42aa2e20e1e85df73736ed0a782ab7e7278dd54358cfdf6313d40f926332623625b49626481054787ab2dff85a9bebd6b317f26c691a65aa97bb3d1506a3a565e9c7ea5ad4611d2d77ee8a5c1b23814a26b6a20061fbb65bdd03770fa849f2a29ba69f90625f42592a70ba890f7a92878ae73574c3a233ee5954119931a1905210715fa77a8795f2fbec3797cb90f59fe8a4abec25f40c87bf25b750bbaa"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000880), 0x6400, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x8b5e10c0888804f6, 0x2c, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ldst={0x1, 0x1, 0x0, 0x5, 0x1, 0x80, 0x4}, @ringbuf_query, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2f}}, @ringbuf_query, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0xfff, 0x8, &(0x7f0000000780)=""/8, 0x41100, 0x28, '\x00', r4, 0x0, r8, 0x8, &(0x7f0000000800)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x1, 0x8c, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000940)=[0xffffffffffffffff, r9, r10], &(0x7f0000000980)=[{0x2, 0x2, 0x4, 0x2}, {0x4, 0x3, 0x9, 0x9}, {0x0, 0x2, 0x5, 0x6}, {0x3, 0x5, 0xb, 0x5}, {0x1, 0x2, 0x2, 0x6}, {0x5, 0x3, 0xa, 0x8}, {0x5, 0x4, 0xe, 0xc}], 0x10, 0x5}, 0x94) r11 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x1, 0x86) fchdir(r12) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRES64, @ANYRES8, @ANYRESDEC, @ANYRES64], 0x2, 0x245, &(0x7f00000007c0)="$eJzs3b9qU2EYB+A3/9pUh2RwEsEDOjiVtleQIhXETkoGddBiW5AkFCwEWsXQySvwSrwOF+/ACxC66VA4cnJS00JqG0yaUp9n6Qvn+/V9T/KFTOfL6zud1ubO7vbBh+9RrRai2IhG4TCiHsXIzAcAcN38StM4THPjJcvFac0EAEzXBb//Fy5xJABgyp49f/FkdX197WmSVCM6n7rNQuR/8+ur2/E22rEVS1GLo4j0j7x+9Hh9LcpJph73O71uM0t2Xn2NSp7/EdHPL0ct6qPzy0nuRL7XbVbixqB/I8uvRC1ujc6vjMhHcy4e3Dsx/2LU4tub2Il2bEaWHeY/LifJw/Tzz/cvs4mzfKHXbc731w2lpRm8PQAAAAAAAAAAAAAAAAAAAAAAXFOLSZIkafolTdO0d+r8ndJR//picqx++nyePH/W+UC9E+frLCVJcnxY8DBfjtvlKM/w1gEAAAAAAAAAAAAAAAAAAODK2N3bb22021vvJlocP9Y/+f/8r0WUBqO1CxFXYJ5+sZDNczm97saYvRpjtoji3n4ra5LtgdZGIc5JVae0SdIR2690ZmpuQt3nbl5scem8l2VQFCKiMtixf19cjMqEPykAAAAAAAAAAAAAAAAAAMAlGz70O+LiwQwGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAZGP7+/xhFbxC+YGrGtwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB/4HcAAAD//+xqeWQ=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 11.469789412s ago: executing program 9 (id=6128): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x9, 0x16, 0x20, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44004}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_open_dev$vcsa(&(0x7f00000000c0), 0xf0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x88) munmap(&(0x7f00005de000/0x4000)=nil, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18) 8.628547806s ago: executing program 9 (id=6150): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) write$snapshot(r0, &(0x7f0000000200)="a9ab4e", 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa340}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCB={0x5}, @IFLA_MACSEC_ES={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000040) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") 6.12557411s ago: executing program 3 (id=6179): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4040080) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000030605000001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0xf0}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xf5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x56, 0x8, 0x0, 0x0}}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000780)=ANY=[], 0xfce) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.posix_acl_access\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="34010000190000082cbd7000fedbdf2580201000fc04c80500100000ee000880ef16262ad7b9770cd1d441f08946c7aedfd931de66e749c7c2ec9fccdd50762554db34c72cc0a2b06649afcf3e5633bef7aa2a9ff75c42c4c2a77de16fe811546f7a78601c1d2babf398e60d1c68598aa41513d1f1ca9f3ba52eaa1a6bbe57fa8b71f900cce8145b37b693e37d4622afcd9933891ed0c81f5f4a2055e1fc3f909fb442aade5fe9e272691ebc06d4d0616539312b3a9824018597211ed07911a743e248aa32432ca5a79222456768cd44d8e86614ac9853d8e7782b986efd9cbebeb7b7098fff099735eaf87f725e2e2000d555ab6211c7ae8dff754b32ea3ff874b4830f0372f73b537d0000080002000a01010208000700ac14142906001c004e24000008001e000104000005001b0011000000"], 0x134}, 0x1, 0x0, 0x0, 0x860c1}, 0x40844) 5.871903664s ago: executing program 3 (id=6184): r0 = socket$inet6(0xa, 0x3, 0xfa) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000380)=0x3, 0x4) sendto$inet6(r0, 0x0, 0xfffffffffffffd2f, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x900}, 0x1c) 5.792625338s ago: executing program 3 (id=6187): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000009940)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2, 0x803, 0x2) r1 = io_uring_setup(0x2694, &(0x7f0000000200)={0x0, 0x10a9, 0x1800, 0x0, 0x1da}) r2 = syz_io_uring_setup(0x6bb5, &(0x7f0000000140)={0x0, 0xd73d, 0x20, 0x3, 0x0, 0x0, r1}, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f00000000c0)) syz_io_uring_setup(0x3c5d, &(0x7f0000000000)={0x0, 0x0, 0x27, 0x2, 0x2, 0x0, r2}, 0x0, 0x0, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x200, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2004, 0x10000000000}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) unshare(0x2e000200) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) sendto(r0, &(0x7f0000000140)="120000001200e7ef007b00000000000000a9", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009580)=[{{0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/245, 0xf5}, {0x0}, {&(0x7f0000002d40)=""/211, 0xd3}, {&(0x7f0000002f00)=""/226, 0xe2}, {&(0x7f0000003000)=""/250, 0xfa}, {0x0}], 0x7}, 0xe868}, {{&(0x7f0000003300)=@can, 0x80, &(0x7f0000003440)=[{&(0x7f0000003380)=""/52, 0x34}, {&(0x7f00000033c0)=""/87, 0x57}], 0x2, &(0x7f0000003480)=""/207, 0xcf}, 0xffffff46}, {{&(0x7f0000003580)=@tipc=@id, 0x80, &(0x7f00000047c0)}, 0x4000000}, {{&(0x7f0000004840)=@nl=@proc, 0x80, 0x0, 0x0, &(0x7f0000005cc0)=""/4096, 0x1000}, 0xc}, {{0x0, 0x0, &(0x7f0000008fc0), 0x0, &(0x7f0000009040)=""/13, 0xd}, 0xc53}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000009180)=""/241, 0xf1}, 0x1}, {{&(0x7f0000009280)=@can, 0x80, &(0x7f0000009540)}, 0x5}], 0x7, 0x12163, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d61", 0xba}, {0x0}], 0x2}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000097c0), r0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$msr(r6, &(0x7f00000010c0)=""/4096, 0x1000) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, &(0x7f0000000340)=0x14) vmsplice(r7, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x40001) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x1, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) syz_mount_image$vfat(&(0x7f00000098c0), &(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRES64=r3], 0x1, 0x385, &(0x7f00000006c0)="$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") 4.336968717s ago: executing program 3 (id=6193): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x203bce, 0x10100, 0x3, 0x100}, 0x0, &(0x7f0000000100), 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8571, 0x8000]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabbd, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) set_mempolicy(0x6005, 0x0, 0x4) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140)={0x0, 0xfffffffc, 0xf}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffdfc}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 3.35316403s ago: executing program 9 (id=6198): socket$unix(0x1, 0x5, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x321b01, 0x85, 0x8}, 0x18) acct(&(0x7f0000000180)='./file0/../file0\x00') symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') r1 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x410, 0x2000000, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000680)='cpu!=0\x00|!') r2 = syz_io_uring_setup(0x4ad6, &(0x7f00000001c0)={0x0, 0xc4a8, 0x400, 0x2, 0x24d}, &(0x7f0000000240), &(0x7f00000006c0), &(0x7f00000002c0)) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r3], 0x108}}], 0x2, 0xc040) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="da2a85e0658f478aae8800b01b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a4000300"], 0x118}, 0x1, 0x0, 0x0, 0x24000104}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="180800000000fdff0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b707000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090800000000007baaf0ff00000000bd8900000000000007080000f8ffffffbfa400000000000007070000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf21000000000000560700000000000085000000aa000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sk_skb=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000300)=[0x6, 0x7], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.907951314s ago: executing program 5 (id=6202): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x29b, &(0x7f0000000ac0)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file2\x00') 2.561209612s ago: executing program 5 (id=6205): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x400001, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.185129452s ago: executing program 9 (id=6206): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) (async) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) (async) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) (async) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 2.166098083s ago: executing program 3 (id=6207): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newqdisc={0x148, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x8, 0x3, 0x9, 0x16, 0x20, 0x6}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x44004}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_open_dev$vcsa(&(0x7f00000000c0), 0xf0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x1, {{0xa, 0x0, 0x0, @mcast1, 0x3}}}, 0x88) munmap(&(0x7f00005de000/0x4000)=nil, 0x4000) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4018}, 0x18) 1.629294622s ago: executing program 5 (id=6209): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000011}) r5 = syz_io_uring_setup(0x6d58, 0x0, &(0x7f0000000200), &(0x7f00000002c0), &(0x7f0000000340)) io_uring_enter(r5, 0x5404, 0x8f54, 0x83, &(0x7f0000000380)={[0x8]}, 0x8) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 857.319964ms ago: executing program 9 (id=6211): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800800101"], 0x48) (async) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) r0 = socket$inet6(0xa, 0x802, 0x0) (rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@allocspi={0x144, 0x16, 0x1, 0x0, 0xffffffff, {{{@in6=@rand_addr=' \x01\x00', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000, 0x0, 0x3, 0x0, 0x0, 0x80, 0xa0}, {@in6=@private0, 0x4d5, 0x33}, @in=@remote, {0x0, 0xffffffffffff0000, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff, 0xffffffffffffffed, 0x4}, {0x0, 0x0, 0x2, 0x7}, {0x82, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x4, 0x1a0b1}, [@algo_aead={0x4c, 0x12, {{'gcm-aes-ce\x00'}, 0x0, 0xa0}}]}, 0x144}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000080)="ff02040000ffff000000003ea68d771895d71ecd650e6262d4b1614326608169e1dd5923a28653b5f0e8d2b6fcf0bd26bd67798e17056cd9a04f53d078166af9c5d13fad06bdc55b", 0x48) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) (async) r3 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r3}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_gettime(r4, 0x0) (async) r5 = epoll_create1(0x80000) epoll_pwait2(r5, &(0x7f0000000040)=[{}], 0x1, 0x0, &(0x7f0000000240)={[0xd]}, 0x8) (async, rerun: 64) close(0x3) (async, rerun: 64) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) (async) syz_mount_image$iso9660(&(0x7f00000002c0), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f00000000c0)={[{@showassoc}, {@nocompress, 0x0}, {@map_acorn}, {@nocompress}, {@map_normal}, {@showassoc, 0x41}, {@showassoc}, {@map_normal}]}, 0xfd, 0x645, &(0x7f0000001000)="$eJzs3U1v28gdx/EfZdlWXCAo2mIRBNlkNukCDpoqkrxxYKSHshQlcyuJAkkXNlBgkW7shRE52yYp0Piy8KUPwPYN9FLspYdeey/Qc99FjwUW7a1AD2VBUrJk69GJbLeb78dwOCL/nPkPqXBASyQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABkOdVSqWyp4bW2ts14TjXwmxOWZ7Ut6m5WuDu1XclKflUo6Fo269q3+ovfSf65rRvZqxsqJJOCDr/2ztcffTOf660/IaHXobNW+OLV4dPHnc7u8zkncsEea7jnys2wYt1teaHvNe26a7zQNxvr66X7m7XQ1LyGG+6Ekds0TuDmIj8wq85dU97YWDNuccffatWrdsOVspkPv1spldbNh8vd3X//w2LobHqNhteqpysmi5OYh+bzH2chrt00Zm+/s7s2LckkqDxLUGVaUKVUqZTLlUp5/cHGg4elUn5oRukUDUXM/U2L/zPzO3gDbyiXjP9/s6SGCmppS9syI38cVRXIV3PM8q7e+P/+fXdiu4Pjf2+Uv9ZffF3p+H8ze3Vz3Pg/Jhcjk64waok1Zv7r/bzQKx3qqR6ro4529Xw+9d6aX4bn+JOT6lJe8hTKl6embNXlynTnGG1oXesq6SNtqqZQRjV5ashVqB2FiuSqme6TQK5sRfIVyGhVju7KqKwNbWhNRq6K2pGvLbVUV1W2/hXH8Z72k+0+6Z0gdYNUniWoMiFo3Pj/k8+y9ynj/9uud/yaJQa4dHH3/P+Mbp1PNgAAAAAA4DxY6V/frfSz+3clxap5Dbd02WkBAAAAAIA5Sj/5v5FMFpPSu7LGnP/HF58bAAAAAACYDyu9xs6StLLYnbWnff0n3tUsXwJYOOf0AAAAAADAHKSf/99ckuL03mu3ZB3fCYWLAAAAAAAA+Ir49cA99vO9e+zGvY/1c5LC9rL1538sK1i0jtrb37YO7GSJfdCNGfoGQFS7bl3t3qg3nSxJSl857qLVfzCAlf4Wshdf7k27178VnEpgaaH354uhBP4kaSCB9Xy3Ln2u97KY97rtPjnMKV2StbJS8xpu0fEbj8qy7au5yN2Ofv5s/xdScNzPvf3ObvHjTztP0lyOkllHB0ken51IJzd6Y/RzeZnebyG95mJUj6+o1mvyN63mipW2W+r1f0H2QW6woUk7oN/mL3U7i7m9kk1XDnt7IO1/Iel/uZjusn7v07tDWP0syqd7PmpHjMmikGZxJ4u5s3onm/Ty62bxnQWpUhzeB8FgFpXBLKZvC+ufQ9tiShbJtlhLsvhLUtGYLNbOlsXQHgGAy7LXH4XSm5gP32P/9Lj7Oke56aP790+28vJ3cXbB4YKU7342MbGVgpIj+moWs6T0wJq/PuKIXuqOKwWNOaKX3mB0S9r6Y/8ZSN20h7L4dxzHj8ppu789Nap+kazwxdh2w0ZlIdmE918e/DS9AX7ik91Pdp9VKmvrpQ9KpQcVLabd6E4YewAAI0x/xs7UCOuD47PqJ39/PyudGPG+cfyVgqI+1qfq6Inu9R4hcGt0rSsDX0O4N3zWmsRekU7F/n5R98ae1aVj6UC9lePY3oUPp88A+7Fr57wXAAC4WLenjMOzjP/3eufdq9dHnnefHMtPPyF4XGz5grcEAABvDzf40lqJfmUFgdf+qLyxUbajTdcEvvNDE3jVumu8VuQGzqbdqrumHfiR7/gN0w607FXd0IRb7bYfRKbmB6bth952+uR30330e+g27VbkOWG74dqhaxy/FdlOZKpe6Jj21g8aXrjpBunKYdt1vJrn2JHnt0zobwWOWzQmdN2BQK/qtiKv5iXFlmkHXtMOdsyP/MZW0zVVN3QCrx35WYW9trxWzQ+aabVFxWd+0CEAAF9FL14dPn3c6ew+n1A40vSYbmFpVIWX3UcAAHASozQAAAAAAAAAAAAAAAAAAAAAAP/7Zrn+70yFxVEXC0rHc352daZ6LM07sbMUcq+/+l8nxFw5ntPb/IMxR5fQU2WF/PxrviLNftnoHArf28u26NiYZOHIRcvH+yI///8OSeHZH8YsiuM4nrz68sltuDSpgycLeUnPl95gF1zO8QjAxflvAAAA///xwUUi") 782.968028ms ago: executing program 8 (id=6212): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000840)=ANY=[], 0xe2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0xfffffffe, 0x4}, 0x8}, 0x94) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3}, 0x18) sendfile(r2, r2, 0x0, 0x3) sendmmsg(r2, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0xec00}}], 0x1, 0x4) getsockname(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1804895801000080b4267062298c71000000000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x70, '\x00', r3, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 709.557712ms ago: executing program 8 (id=6214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000fffffff00600000505000100070000003c00078018001480140002"], 0x64}}, 0x4800) 708.993312ms ago: executing program 9 (id=6215): r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001400)}, 0x8) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYRES8=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) (fail_nth: 4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000340)=ANY=[]) close(0x3) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r5) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0xe2b, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40980000}, 0xc, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x4000) recvmmsg(r3, 0x0, 0x0, 0x20, 0x0) close_range(r2, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket(0xb, 0x4, 0x1) 704.923652ms ago: executing program 4 (id=6216): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008890) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x0, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x5, &(0x7f0000000100)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 685.514843ms ago: executing program 8 (id=6217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(0x0, 0xfffffffffffffcf6, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x50, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x18243) ioctl$SG_IO(r2, 0x2285, &(0x7f00000004c0)={0x0, 0xfffffffffffffffd, 0x9, 0x4, @buffer={0x0, 0x71, &(0x7f00000000c0)=""/113}, &(0x7f0000000140)="0cd965332e5bc0fd7a", &(0x7f00000003c0)=""/190, 0xfff, 0x2, 0x3, &(0x7f0000000480)}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x8010}, 0x40804) 618.779927ms ago: executing program 4 (id=6218): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd27, 0x7ffc, {0x0, 0x0, 0x0, r2, {0x8, 0x1}, {0x0, 0x2}, {0x8, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x26040028}, 0x800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'pimreg\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x800) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@errors_remount}, {@discard}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@delalloc}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") 613.818047ms ago: executing program 8 (id=6219): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0x4, &(0x7f0000000440)=ANY=[@ANYRES64=r2, @ANYRES8, @ANYRESHEX=r1, @ANYBLOB="7b4658cbb0d3f994e82518d3129e390c913cb559f34dd3e2b992898484a9705fcdf419ec013283f876491a7be1bb5d8018345385bf71f1b09220ef92cbdf9d2d04a05acd7bbdc033e7169e5eaafa0255902534f4393ff3182f9709a6aa45445eb60370", @ANYBLOB="b7f52a7b013ce95080ff63150de4b80a625ddbc1121c078c4aad756eef3221cd458d48aa110b085bcbf11f06e7f79633187da50a6da0f92217df59fb2da27d9e6ac73be4dac9097b0f36705fa1b4f1f28ce5613d9ea7c9c8973b51e64937c53659d3aa01beff25fdddaea7b03945c1ead1c2f7223e04a628d669de73d9c814b1cf5055777b0f3d2904c316c1e87b5beb78dd7d4595bb640b664b56340c92", @ANYRES32=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x10007}, 0x94) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r2, @ANYRES32=r1]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x4010045, &(0x7f0000000140)={0x11, 0xf6, r4, 0x1, 0x80}, 0x14) r6 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2c, 0x4, 0x0, 0x0, 0x0, 0x9, 0xc0184, 0x5c1c40005312cc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0xb7c}, 0x122c, 0x0, 0x43a1bd76, 0x9, 0x5, 0x4, 0x2, 0x0, 0x6da8, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xc, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000100000338000000000000001800000000000000200000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', r4, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) stat(0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x400c804) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="7401000010000100feffffff000100263cdf0f618ee1d1d0cf00e0000002080000000000000000000000fc28bc2ae9d869780100000000000000000000ba56bd75b0788a000000010601", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="ff020000000000000000000000000001000004d46c0000002001000000000000000000000000000200080000000000009201000000000000060000000000000002000000000000001c25080000000000020000000000000093fcffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002bbd700004350000020003006000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240009000f00000000000000cbed0000000000000900000000000000000100000000000010000a0025bd700027bd70007833000008001f0001000000"], 0x174}, 0x1, 0x0, 0x0, 0x8801}, 0x0) fallocate(r8, 0x2, 0xd0b, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r9 = socket(0xa, 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000032c0)=ANY=[@ANYRES16=r9, @ANYRES8=r8, @ANYRES16=r6, @ANYRESDEC=r8], 0x40}}, 0x4000005) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) 416.904248ms ago: executing program 4 (id=6220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0xf5ffffff, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x800) 361.86097ms ago: executing program 4 (id=6221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x3}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000680)=""/4, 0x4a, 0x4, 0x1, 0x20000000}, 0x28) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x3}], 'Iw'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1760"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, &(0x7f0000000680)=""/4, 0x4a, 0x4, 0x1, 0x20000000}, 0x28) (async) 333.862032ms ago: executing program 5 (id=6222): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff00, 0x3}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRES32=0x1, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xffffffe0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 268.668395ms ago: executing program 8 (id=6223): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fbdbdf2515090100000001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) 267.922246ms ago: executing program 8 (id=6224): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x7, 0x0, 0xffffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000200000800040001200000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400000000000000050000f500", @ANYRES32=0x0, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e000300000003000000050017"], 0x50}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) socket$netlink(0x10, 0x3, 0xa) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f0000000240)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0xa, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) 204.332769ms ago: executing program 4 (id=6225): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fbdbdf2515090100000001"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) (fail_nth: 1) 203.823619ms ago: executing program 5 (id=6226): unshare(0x40400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x3eb3, &(0x7f0000000040)={0x0, 0xe955, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.340719ms ago: executing program 5 (id=6227): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4040080) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000030605000001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r1, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0xf0}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xf5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x0, 0x56, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa12ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x939b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000780)=ANY=[], 0xfce) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='system.posix_acl_access\x00') r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x860c1}, 0x40844) 12.001159ms ago: executing program 4 (id=6228): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008890) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x0, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x5, &(0x7f0000000100)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 0s ago: executing program 3 (id=6229): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mmap(&(0x7f00007d3000/0x3000)=nil, 0x3000, 0x2, 0x28011, r1, 0xe7ce3000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000080)=""/175, 0xaf}}, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xa0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x400}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0xfffffffffffffffc, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) getrlimit(0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) write$sndseq(r8, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0x65757100, 0x3, {0x1, 0xfc}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000000)={[{@noload}]}, 0x0, 0x5e5, &(0x7f0000000ac0)="$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") shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r8], 0x4c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): 89.224797][T12672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.544972][T22776] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 689.567248][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5610'. [ 689.583436][T22780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=22780 comm=syz.1.5611 [ 689.656934][T22784] loop9: detected capacity change from 0 to 512 [ 689.681173][T22784] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 689.774461][T22784] EXT4-fs (loop9): 1 truncate cleaned up [ 689.800062][T22784] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 690.483311][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 690.612431][T22805] 9pnet_virtio: no channels available for device õl802154 [ 690.922998][T22811] loop1: detected capacity change from 0 to 164 [ 693.029835][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 693.029887][ T28] audit: type=1400 audit(2000000325.919:5126): avc: denied { lock } for pid=22812 comm="syz.7.5623" path="socket:[74593]" dev="sockfs" ino=74593 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 693.720827][T22814] netlink: 'syz.7.5623': attribute type 13 has an invalid length. [ 694.400291][T22826] loop9: detected capacity change from 0 to 2048 [ 694.679682][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 695.690674][T22826] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.710252][T22826] EXT4-fs error (device loop9): ext4_map_blocks:791: inode #12: block 2: comm syz.9.5622: lblock 0 mapped to illegal pblock 2 (length 1) [ 695.724477][ T28] audit: type=1400 audit(2000000328.609:5127): avc: denied { read } for pid=22815 comm="syz.9.5622" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 695.967979][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.023734][T22847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22847 comm=syz.9.5631 [ 696.345393][T22858] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 696.392460][T22858] bond1 (unregistering): Released all slaves [ 697.036092][T22867] loop1: detected capacity change from 0 to 764 [ 697.047811][T22867] Symlink component flag not implemented [ 697.053843][T22867] Symlink component flag not implemented (15) [ 697.064091][T22870] 9pnet_virtio: no channels available for device õl802154 [ 697.149694][T22875] FAULT_INJECTION: forcing a failure. [ 697.149694][T22875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.176326][T22875] CPU: 1 UID: 0 PID: 22875 Comm: syz.9.5638 Tainted: G W syzkaller #0 PREEMPT(full) [ 697.176360][T22875] Tainted: [W]=WARN [ 697.176366][T22875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 697.176378][T22875] Call Trace: [ 697.176385][T22875] [ 697.176393][T22875] __dump_stack+0x1d/0x30 [ 697.176419][T22875] dump_stack_lvl+0x95/0xd0 [ 697.176485][T22875] dump_stack+0x15/0x1b [ 697.176511][T22875] should_fail_ex+0x263/0x280 [ 697.176541][T22875] should_fail+0xb/0x20 [ 697.176647][T22875] should_fail_usercopy+0x1a/0x20 [ 697.176691][T22875] _copy_from_user+0x1c/0xb0 [ 697.176710][T22875] __sys_bpf+0x183/0x7e0 [ 697.176748][T22875] __x64_sys_bpf+0x41/0x50 [ 697.176776][T22875] x64_sys_call+0x10cb/0x3020 [ 697.176885][T22875] do_syscall_64+0x12c/0x3b0 [ 697.176911][T22875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.176936][T22875] RIP: 0033:0x7f65926dc819 [ 697.176955][T22875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.177081][T22875] RSP: 002b:00007f659112f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.177102][T22875] RAX: ffffffffffffffda RBX: 00007f6592955fa0 RCX: 00007f65926dc819 [ 697.177115][T22875] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 697.177128][T22875] RBP: 00007f659112f090 R08: 0000000000000000 R09: 0000000000000000 [ 697.177195][T22875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.177209][T22875] R13: 00007f6592956038 R14: 00007f6592955fa0 R15: 00007ffe1cc233d8 [ 697.177234][T22875] [ 697.536994][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.546032][T22879] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.555179][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.564196][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.573226][T22879] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.582309][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.591313][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.600366][T22879] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.609352][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 697.620760][T22879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5637'. [ 699.642799][T22888] loop9: detected capacity change from 0 to 512 [ 700.602130][T22890] FAULT_INJECTION: forcing a failure. [ 700.602130][T22890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.571832][T22890] CPU: 0 UID: 0 PID: 22890 Comm: syz.1.5641 Tainted: G W syzkaller #0 PREEMPT(full) [ 701.571922][T22890] Tainted: [W]=WARN [ 701.571930][T22890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 701.571943][T22890] Call Trace: [ 701.571950][T22890] [ 701.571958][T22890] __dump_stack+0x1d/0x30 [ 701.571985][T22890] dump_stack_lvl+0x95/0xd0 [ 701.572012][T22890] dump_stack+0x15/0x1b [ 701.572069][T22890] should_fail_ex+0x263/0x280 [ 701.572133][T22890] should_fail+0xb/0x20 [ 701.572164][T22890] should_fail_usercopy+0x1a/0x20 [ 701.572186][T22890] _copy_from_user+0x1c/0xb0 [ 701.572221][T22890] ___sys_sendmsg+0xc1/0x1e0 [ 701.572256][T22890] __x64_sys_sendmsg+0xd4/0x160 [ 701.572287][T22890] x64_sys_call+0x194c/0x3020 [ 701.572375][T22890] do_syscall_64+0x12c/0x3b0 [ 701.572408][T22890] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 701.572516][T22890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.572538][T22890] RIP: 0033:0x7fbcda9ac819 [ 701.572566][T22890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.572587][T22890] RSP: 002b:00007fbcd9407028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.572614][T22890] RAX: ffffffffffffffda RBX: 00007fbcdac25fa0 RCX: 00007fbcda9ac819 [ 701.572627][T22890] RDX: 0000000000004080 RSI: 0000200000000380 RDI: 0000000000000004 [ 701.572640][T22890] RBP: 00007fbcd9407090 R08: 0000000000000000 R09: 0000000000000000 [ 701.572652][T22890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 701.572664][T22890] R13: 00007fbcdac26038 R14: 00007fbcdac25fa0 R15: 00007fff9a96ba38 [ 701.572752][T22890] [ 701.755075][T22888] EXT4-fs warning (device loop9): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop9. [ 701.941317][T22895] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 702.051532][T22904] loop1: detected capacity change from 0 to 764 [ 702.133890][T22911] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 702.160692][T22911] loop1: detected capacity change from 0 to 512 [ 702.296166][T22911] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.5647: EA inode hash validation failed [ 702.312259][T22911] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.5647: corrupted inode contents [ 702.324715][T22911] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.325488][T22911] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.5647: mark_inode_dirty error [ 702.334685][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 702.334713][ C0] EXT4-fs (loop1): initial error at time 2000000335: ext4_do_update_inode:5690: inode 15 [ 702.334747][ C0] EXT4-fs (loop1): last error at time 2000000335: ext4_do_update_inode:5690: inode 15 [ 702.372325][T22911] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.373572][T22911] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.5647: corrupted inode contents [ 702.394953][T22911] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.395366][T22911] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.5647: mark_inode_dirty error [ 702.416710][T22911] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.420017][T22911] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.5647: mark inode dirty (error -117) [ 702.477096][T22915] bond8: entered allmulticast mode [ 702.479698][T22911] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 702.486402][T22911] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 702.504843][T22911] EXT4-fs (loop1): 1 orphan inode deleted [ 702.511181][T22911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.649049][T12672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.726824][T22925] loop1: detected capacity change from 0 to 1024 [ 702.740623][T22925] EXT4-fs: Ignoring removed bh option [ 702.760580][T22925] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 702.778590][T22925] EXT4-fs (loop1): orphan cleanup on readonly fs [ 702.785776][T22925] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.5651: Bad quota inum: 4294934528, type: 0 [ 702.798269][T22925] loop1: lost filesystem error report for type 5 error -117 [ 702.799475][T22925] EXT4-fs (loop1): Remounting filesystem read-only [ 702.799606][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 702.820161][ C1] EXT4-fs (loop1): initial error at time 2000000335: ext4_quota_enable:7221 [ 702.829102][ C1] EXT4-fs (loop1): last error at time 2000000335: ext4_quota_enable:7221 [ 702.838063][T22925] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 702.853891][T22925] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 702.862157][T22925] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 702.886418][T22925] macvlan0: left promiscuous mode [ 702.899793][T22925] gre2: left promiscuous mode [ 702.906221][T22925] ip6gre1: left promiscuous mode [ 702.913378][T22925] bond2: left promiscuous mode [ 702.920602][T22925] macsec1: left promiscuous mode [ 702.930102][T22925] __nla_validate_parse: 21 callbacks suppressed [ 702.930130][T22925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5651'. [ 702.956389][T12672] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.068515][T22932] loop1: detected capacity change from 0 to 512 [ 703.082601][T22935] 9pnet_virtio: no channels available for device õl802154 [ 703.100834][T22932] ext3: Bad value for 'stripe' [ 703.243657][ T28] audit: type=1400 audit(2000000336.139:5128): avc: denied { setopt } for pid=22934 comm="syz.3.5654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 703.357288][T22942] bond10: entered allmulticast mode [ 703.431813][T22946] bridge_slave_0: left allmulticast mode [ 703.444999][T22946] bridge_slave_0: left promiscuous mode [ 703.462652][T22946] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.474469][T22946] bridge_slave_1: left allmulticast mode [ 703.480579][T22946] bridge_slave_1: left promiscuous mode [ 703.486751][T22946] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.496066][T22946] team_slave_0: left promiscuous mode [ 703.502058][T22946] team_slave_0: left allmulticast mode [ 703.514389][T22946] team0: Port device team_slave_0 removed [ 703.527034][T22946] team_slave_1: left promiscuous mode [ 703.539913][T22946] team_slave_1: left allmulticast mode [ 703.553977][T22946] team0: Port device team_slave_1 removed [ 703.566495][T22946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.582967][T22946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.612253][T22946] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 703.881408][T22960] loop7: detected capacity change from 0 to 512 [ 703.905509][T22960] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 703.941992][T22960] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 703.959578][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 703.966030][ C0] EXT4-fs (loop7): initial error at time 2000000336: ext4_mb_generate_buddy:1317 [ 703.975183][ C0] EXT4-fs (loop7): last error at time 2000000336: ext4_mb_generate_buddy:1317 [ 704.001439][T22960] Quota error (device loop7): write_blk: dquota write failed [ 704.024973][T22960] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 704.102924][T22960] Quota error (device loop7): write_blk: dquota write failed [ 704.111032][T22966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5662'. [ 704.122244][T22960] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 704.143568][T22960] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5661: Failed to acquire dquot type 1 [ 704.166468][T22960] loop7: lost filesystem error report for type 5 error -28 [ 704.166671][T22960] EXT4-fs (loop7): 1 truncate cleaned up [ 704.200039][T22960] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 704.446987][T22979] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5661'. [ 705.356366][T22989] 9pnet_virtio: no channels available for device õl802154 [ 705.424104][T22995] batadv_slave_1: entered promiscuous mode [ 705.443819][T22995] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5671'. [ 705.476330][T22995] batadv_slave_1 (unregistering): left promiscuous mode [ 705.585937][T23001] random: crng reseeded on system resumption [ 705.742593][ T8756] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 705.755585][ T28] audit: type=1400 audit(2000000338.649:5129): avc: denied { ioctl } for pid=23000 comm="syz.8.5674" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 706.222567][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.264938][ T8756] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 706.286647][T23004] SELinux: Context ›Y7»ôj [ 706.286647][T23004] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 706.286647][T23004] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm &8›UÛ‚VŠƒß‹œNÃ’œ2ù)GxÆVÔ%‘5œõxeRM4r4c¥îÿJsÏHU&Ÿ“ä§'p…Œ2EMMàk&‰Îc«bUƒÎÈ,ä,ÏÖÝÁâÂfÓ@Õï8¿ÅøœÎœ¶bÁˆD™¨%$¬œÓfÚ=½š¾÷8®@ì§k¤I|íþ€w íOç£x&KCH;ÁÝx-ÍK³²oå4˜i!ÿÿOi%Ú‚2 úë´F"2‹E,P] èôkÇ? is not valid (left unmapped). [ 706.434307][T23004] SELinux: Context *mþkXI·Æ$h·x4Û«½K•M¤ is not valid (left unmapped). [ 706.612527][T23001] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5674'. [ 706.680898][T23004] SELinux: Context 5¶}“¨M3ëpÿX:¦Ü]žQ?×ðÖ§á¡p©ýáè«{ãÕO)BÓ °Rÿ¹D»ºP_NÃ[½£`æ´3©?"ê¦Mp$‰=J™9[ÕƒÈCZ &†åœZw8 lX&ôD;tæd ‹Bå°IøÝ›~ø¬©L [ 706.794589][T23004] uSÄ‹ÊkxIŒR¾¤I$4"©l«ÑXö7f9áÙ¬ÜÊb–«BÑÄ|72Ÿ*©—‚k‘Œ‘NMø§žªÝñ is not valid (left unmapped). [ 706.872660][T23004] SELinux: Context åWé½Xó®’Eë•Ó][Oü:ѸÍ÷÷o‡ß­OöìªÌbZDî¢fq :Å~€t6µuY¼x’´ð(ÇxœìÏÁ©1ЛðùŽ;;°×6áÆ~,Ä [ 706.872660][T23004] lÆNÄ is not valid (left unmapped). [ 707.033056][T23009] loop9: detected capacity change from 0 to 764 [ 707.078486][T23009] Symlink component flag not implemented [ 707.087340][T23017] loop1: detected capacity change from 0 to 764 [ 707.110385][T23018] netlink: 'syz.8.5678': attribute type 16 has an invalid length. [ 707.119977][T23009] Symlink component flag not implemented (15) [ 707.145522][T23017] FAULT_INJECTION: forcing a failure. [ 707.145522][T23017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 707.172012][T23018] netlink: 'syz.8.5678': attribute type 17 has an invalid length. [ 707.195893][T23017] CPU: 0 UID: 0 PID: 23017 Comm: syz.1.5679 Tainted: G W syzkaller #0 PREEMPT(full) [ 707.195982][T23017] Tainted: [W]=WARN [ 707.195988][T23017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 707.195999][T23017] Call Trace: [ 707.196005][T23017] [ 707.196013][T23017] __dump_stack+0x1d/0x30 [ 707.196110][T23017] dump_stack_lvl+0x95/0xd0 [ 707.196132][T23017] dump_stack+0x15/0x1b [ 707.196159][T23017] should_fail_ex+0x263/0x280 [ 707.196193][T23017] should_fail_alloc_page+0xf2/0x100 [ 707.196319][T23017] __alloc_frozen_pages_noprof+0x108/0x350 [ 707.196429][T23017] alloc_pages_mpol+0xb3/0x260 [ 707.196488][T23017] alloc_pages_noprof+0x8f/0x140 [ 707.196587][T23017] ? __pfx_isofs_lookup+0x10/0x10 [ 707.196608][T23017] isofs_lookup+0x3c/0x920 [ 707.196633][T23017] ? d_alloc_parallel+0xc01/0xce0 [ 707.196665][T23017] ? __rcu_read_unlock+0x4e/0x70 [ 707.196788][T23017] ? __d_lookup+0x316/0x340 [ 707.196823][T23017] ? __pfx_isofs_lookup+0x10/0x10 [ 707.196881][T23017] path_openat+0xbf0/0x2050 [ 707.196939][T23017] do_file_open+0x16c/0x290 [ 707.196981][T23017] do_sys_openat2+0x94/0x130 [ 707.197006][T23017] __x64_sys_openat+0xf2/0x120 [ 707.197045][T23017] x64_sys_call+0x1e39/0x3020 [ 707.197135][T23017] do_syscall_64+0x12c/0x3b0 [ 707.197162][T23017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.197197][T23017] RIP: 0033:0x7fbcda9ac819 [ 707.197214][T23017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.197231][T23017] RSP: 002b:00007fbcd9407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 707.197251][T23017] RAX: ffffffffffffffda RBX: 00007fbcdac25fa0 RCX: 00007fbcda9ac819 [ 707.197267][T23017] RDX: 0000000000101142 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 707.197284][T23017] RBP: 00007fbcd9407090 R08: 0000000000000000 R09: 0000000000000000 [ 707.197356][T23017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.197371][T23017] R13: 00007fbcdac26038 R14: 00007fbcdac25fa0 R15: 00007fff9a96ba38 [ 707.197390][T23017] [ 707.519607][T23021] netlink: 'syz.7.5677': attribute type 2 has an invalid length. [ 707.591353][T23021] loop7: detected capacity change from 0 to 128 [ 707.608989][T23021] vfat: Unknown parameter '™œÀ<[£Ð{ú®!Ñ–'O“¦Y:˜0G-V3f_/QϲJªÔÇN' [ 707.705199][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5684'. [ 707.726229][T23033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5683'. [ 707.762678][T23026] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 707.813913][T23035] bond10: entered allmulticast mode [ 707.983983][ T28] audit: type=1400 audit(2000000340.879:5130): avc: denied { shutdown } for pid=23056 comm="syz.9.5691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 708.051723][T23057] loop9: detected capacity change from 0 to 512 [ 708.063269][T23057] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 708.107403][T23057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 708.130951][T23057] EXT4-fs (loop9): orphan cleanup on readonly fs [ 708.138223][T23057] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.5691: bad orphan inode 3 [ 708.147276][T23077] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5697'. [ 708.150107][T23057] loop9: lost filesystem error report for type 5 error -117 [ 708.157661][T23057] EXT4-fs (loop9): Remounting filesystem read-only [ 708.161687][T23080] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5698'. [ 708.165151][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 708.187202][ C0] EXT4-fs (loop9): initial error at time 2000000341: ext4_orphan_get:1423 [ 708.196054][ C0] EXT4-fs (loop9): last error at time 2000000341: ext4_orphan_get:1423 [ 708.205903][T23057] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 708.405378][T23103] loop1: detected capacity change from 0 to 764 [ 708.405384][T23065] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 708.682478][T23119] loop1: detected capacity change from 0 to 256 [ 708.744109][T23119] vfat: Unknown parameter '' [ 708.789778][T23065] chnl_net:caif_netlink_parms(): no params data found [ 708.816450][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 708.894732][T23065] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.901970][T23065] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.909186][T23065] bridge_slave_0: entered allmulticast mode [ 708.915635][T23065] bridge_slave_0: entered promiscuous mode [ 708.922646][T23065] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.930090][T23065] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.937268][T23065] bridge_slave_1: entered allmulticast mode [ 708.943873][T23065] bridge_slave_1: entered promiscuous mode [ 708.997530][T23065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.012305][T23130] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 709.022268][T23065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.034345][T23143] loop9: detected capacity change from 0 to 764 [ 709.067839][T23065] team0: Port device team_slave_0 added [ 709.082765][T23147] openvswitch: netlink: Missing key (keys=40, expected=80) [ 709.091505][T23065] team0: Port device team_slave_1 added [ 709.127502][T23065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.139890][T23065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.191144][T23065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.210549][T23065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.223524][T23065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 709.250843][T23065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.261991][T23147] syzkaller1: entered promiscuous mode [ 709.267666][T23147] syzkaller1: entered allmulticast mode [ 709.276158][T23148] loop9: detected capacity change from 0 to 512 [ 709.305470][T23148] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.319717][T23148] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 709.339523][T23065] hsr_slave_0: entered promiscuous mode [ 709.345796][T23065] hsr_slave_1: entered promiscuous mode [ 709.351773][T23065] debugfs: 'hsr0' already exists in 'hsr' [ 709.357509][T23065] Cannot create hsr debugfs directory [ 709.402726][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.819746][T23166] loop9: detected capacity change from 0 to 164 [ 709.844830][T23169] loop1: detected capacity change from 0 to 512 [ 709.852389][T23169] EXT4-fs: Ignoring removed oldalloc option [ 710.183027][T23169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 710.203458][T23169] EXT4-fs (loop1): orphan cleanup on readonly fs [ 710.211164][T23169] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 710.226321][T23169] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 710.400854][T23169] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #13: comm syz.1.5726: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 710.427880][T23065] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 710.435773][T23169] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 710.437520][T23065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.454202][T23169] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5726: couldn't read orphan inode 13 (err -117) [ 710.466051][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 710.466090][ C1] EXT4-fs (loop1): last error at time 2000000343: ext4_ext_check_inode:521: inode 13 [ 710.486609][T23065] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 710.495761][T23169] loop1: lost filesystem error report for type 5 error -117 [ 710.497719][T23065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.515831][T23169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 710.529172][T23065] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 710.550071][T23065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.557866][T23065] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 710.567440][T23065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 710.620522][T23174] loop7: detected capacity change from 0 to 512 [ 710.649326][T23174] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 710.791401][T23174] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 710.815793][T23065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.830245][T23174] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.5727: bad orphan inode 4 [ 710.861479][T23065] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.871573][T23174] loop7: lost filesystem error report for type 5 error -117 [ 710.871872][T23174] EXT4-fs (loop7): 1 orphan inode deleted [ 710.884924][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 710.884944][ C1] EXT4-fs (loop7): initial error at time 2000000343: ext4_orphan_get:1423 [ 710.884964][ C1] EXT4-fs (loop7): last error at time 2000000343: ext4_orphan_get:1423 [ 710.928637][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.935833][T17402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.997578][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.004808][T17390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.065508][T23174] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 711.242624][T23065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 711.281354][T12672] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 711.293352][T12672] EXT4-fs error (device loop1): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 12 [ 711.484310][T23065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.888900][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 711.961832][T23211] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5732'. [ 711.971580][T23065] veth0_vlan: entered promiscuous mode [ 711.979538][T23065] veth1_vlan: entered promiscuous mode [ 711.985661][T23211] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5732'. [ 712.000485][T23211] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5732'. [ 712.012956][T23065] veth0_macvtap: entered promiscuous mode [ 712.031504][T23065] veth1_macvtap: entered promiscuous mode [ 712.049835][T23065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.076085][T23065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.098246][T17391] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.125364][T17391] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.141753][T17391] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.168663][T17391] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.291932][T23209] tipc: Failed to remove unknown binding: 66,1,1/0:4167342022/4167342024 [ 712.309933][T23209] tipc: Failed to remove unknown binding: 66,1,1/0:4167342022/4167342024 [ 712.336725][T23218] set_capacity_and_notify: 1 callbacks suppressed [ 712.336741][T23218] loop3: detected capacity change from 0 to 256 [ 712.377505][T23218] vfat: Unknown parameter '' [ 712.389511][T23188] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.456894][T23220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5736'. [ 712.563194][T23226] SELinux: failed to load policy [ 713.810990][T23243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.936515][T23252] ip_vti0: entered promiscuous mode [ 713.957600][T23252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5744'. [ 714.053096][ T3050] 8021q: adding VLAN 0 to HW filter on device eth21 [ 714.298867][T23238] 9pnet_virtio: no channels available for device õl802154 [ 714.301879][T17390] dvmrp6: left allmulticast mode [ 714.369924][T23281] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5747'. [ 714.385564][T17390] ip6gretap0 (unregistering): left promiscuous mode [ 714.435534][T23285] loop7: detected capacity change from 0 to 512 [ 714.447929][T23285] EXT4-fs: Ignoring removed bh option [ 714.454707][T23285] EXT4-fs: Ignoring removed mblk_io_submit option [ 714.465901][T23285] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.5746: corrupted in-inode xattr: e_value size too large [ 714.480804][T23285] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 714.483985][T23285] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5746: couldn't read orphan inode 15 (err -117) [ 714.493262][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 714.493292][ C0] EXT4-fs (loop7): initial error at time 2000000347: ext4_iget_extra_inode:5128: inode 15 [ 714.493334][ C0] EXT4-fs (loop7): last error at time 2000000347: ext4_iget_extra_inode:5128: inode 15 [ 714.532009][T23285] loop7: lost filesystem error report for type 5 error -117 [ 714.534170][T23285] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.691011][T17390] smc: removing net device bond0 with user defined pnetid SYZ2 [ 714.810563][T17390] bond0 (unregistering): Released all slaves [ 714.822227][T17390] bond1 (unregistering): Released all slaves [ 715.782460][T17390] bond2 (unregistering): Released all slaves [ 715.791423][T17390] bond3 (unregistering): Released all slaves [ 715.799858][T17390] bond4 (unregistering): Released all slaves [ 715.808127][T17390] bond5 (unregistering): Released all slaves [ 715.817261][ T3050] 8021q: adding VLAN 0 to HW filter on device eth22 [ 716.835925][T23230] Q±6ã`Ò˜ speed is unknown, defaulting to 1000 [ 717.626890][T17390] tipc: Disabling bearer [ 717.638547][T17390] tipc: Left network mode [ 717.649754][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.677867][T23312] 9pnet_virtio: no channels available for device õl802154 [ 717.698218][T23316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.731809][T23316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.747224][T20180] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 717.778690][T23325] ipip0: entered promiscuous mode [ 717.782720][T20180] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 717.793374][T23325] ipip0: entered allmulticast mode [ 717.794604][T23325] team0: Device ipip0 is of different type [ 717.832728][T23329] netlink: 'syz.9.5755': attribute type 10 has an invalid length. [ 718.005449][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5758'. [ 718.015748][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5758'. [ 719.159794][T17390] hsr_slave_0: left promiscuous mode [ 719.165581][T17390] hsr_slave_1: left promiscuous mode [ 719.216638][T17390] smc: removing net device veth1_to_bridge with user defined pnetid SYZ2 [ 719.245021][T17400] smc: removing ib device lyz2 [ 719.257982][T23329] batadv0: left allmulticast mode [ 719.263142][T23329] batadv0: left promiscuous mode [ 719.268292][T23329] bridge0: port 3(batadv0) entered disabled state [ 719.277103][T23329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.299424][T23329] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 719.318911][ T3050] 8021q: adding VLAN 0 to HW filter on device eth23 [ 719.433697][T23230] chnl_net:caif_netlink_parms(): no params data found [ 719.598696][T23230] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.752481][T23230] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.780528][T23230] bridge_slave_0: entered allmulticast mode [ 719.807109][T23230] bridge_slave_0: entered promiscuous mode [ 719.823973][T23377] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5764'. [ 719.824058][T23230] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.845024][T23230] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.852400][T23230] bridge_slave_1: entered allmulticast mode [ 719.867831][T23378] loop3: detected capacity change from 0 to 1764 [ 719.868925][T23230] bridge_slave_1: entered promiscuous mode [ 719.874743][T23378] iso9660: Unknown parameter 'fowner<00000000000000000000' [ 719.977810][T23388] 9pnet_virtio: no channels available for device õl802154 [ 720.051240][T23392] FAULT_INJECTION: forcing a failure. [ 720.051240][T23392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.077584][T23392] CPU: 1 UID: 0 PID: 23392 Comm: syz.7.5768 Tainted: G W syzkaller #0 PREEMPT(full) [ 720.077686][T23392] Tainted: [W]=WARN [ 720.077694][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 720.077708][T23392] Call Trace: [ 720.077715][T23392] [ 720.077724][T23392] __dump_stack+0x1d/0x30 [ 720.077815][T23392] dump_stack_lvl+0x95/0xd0 [ 720.077840][T23392] dump_stack+0x15/0x1b [ 720.077864][T23392] should_fail_ex+0x263/0x280 [ 720.077898][T23392] should_fail+0xb/0x20 [ 720.077956][T23392] should_fail_usercopy+0x1a/0x20 [ 720.077974][T23392] _copy_to_user+0x20/0xa0 [ 720.077993][T23392] simple_read_from_buffer+0xb5/0x130 [ 720.078046][T23392] proc_fail_nth_read+0x10e/0x150 [ 720.078079][T23392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.078217][T23392] vfs_read+0x1ab/0x7f0 [ 720.078244][T23392] ? __rcu_read_unlock+0x4e/0x70 [ 720.078271][T23392] ? __fget_files+0x184/0x1c0 [ 720.078296][T23392] ? mutex_lock+0x57/0x90 [ 720.078334][T23392] ksys_read+0xdc/0x1a0 [ 720.078435][T23392] __x64_sys_read+0x40/0x50 [ 720.078467][T23392] x64_sys_call+0x2886/0x3020 [ 720.078496][T23392] do_syscall_64+0x12c/0x3b0 [ 720.078523][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.078567][T23392] RIP: 0033:0x7f0d70d9d04e [ 720.078586][T23392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 720.078661][T23392] RSP: 002b:00007f0d6f836fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 720.078680][T23392] RAX: ffffffffffffffda RBX: 00007f0d6f8376c0 RCX: 00007f0d70d9d04e [ 720.078693][T23392] RDX: 000000000000000f RSI: 00007f0d6f8370a0 RDI: 0000000000000004 [ 720.078705][T23392] RBP: 00007f0d6f837090 R08: 0000000000000000 R09: 0000000000000000 [ 720.078749][T23392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 720.078761][T23392] R13: 00007f0d71056038 R14: 00007f0d71055fa0 R15: 00007ffe719867b8 [ 720.078779][T23392] [ 720.279477][ T3050] 8021q: adding VLAN 0 to HW filter on device eth24 [ 720.318882][T23230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.336355][T23230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.345871][ T28] audit: type=1400 audit(2000000353.229:5131): avc: denied { bind } for pid=23394 comm="syz.7.5769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 720.390257][T23230] team0: Port device team_slave_0 added [ 720.453406][T23230] team0: Port device team_slave_1 added [ 720.459147][T23395] veth0_vlan: entered allmulticast mode [ 720.476229][T23394] veth0_vlan: left allmulticast mode [ 720.494057][T23230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.508841][T23230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.510281][T23399] loop7: detected capacity change from 0 to 256 [ 720.543299][T23399] vfat: Unknown parameter '' [ 720.569613][T23230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.590404][T23230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.600210][T23230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.626218][T23230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.637739][T23399] dummy0: entered allmulticast mode [ 720.657782][T23398] dummy0: left allmulticast mode [ 720.685770][T23230] hsr_slave_0: entered promiscuous mode [ 720.699489][T23230] hsr_slave_1: entered promiscuous mode [ 720.712304][T23230] debugfs: 'hsr0' already exists in 'hsr' [ 720.721796][T23230] Cannot create hsr debugfs directory [ 720.758760][T23410] loop9: detected capacity change from 0 to 256 [ 720.777428][T23410] vfat: Unknown parameter '' [ 720.895058][ T28] audit: type=1400 audit(2000000353.789:5132): avc: granted { setsecparam } for pid=23419 comm="syz.8.5778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 720.927472][T23420] loop7: detected capacity change from 0 to 512 [ 720.951817][T23420] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 721.015530][T23430] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5780'. [ 721.024984][T23420] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 721.065100][T23430] netlink: 64 bytes leftover after parsing attributes in process `syz.9.5780'. [ 721.080625][T23420] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.5779: bad orphan inode 4 [ 721.091075][T23420] loop7: lost filesystem error report for type 5 error -117 [ 721.091300][T23420] EXT4-fs (loop7): 1 orphan inode deleted [ 721.104448][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 721.104474][ C1] EXT4-fs (loop7): initial error at time 2000000353: ext4_orphan_get:1423 [ 721.104493][ C1] EXT4-fs (loop7): last error at time 2000000353: ext4_orphan_get:1423 [ 721.248750][T23440] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5781'. [ 721.264830][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5778'. [ 721.274479][T23441] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5778'. [ 721.283957][T23441] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5778'. [ 721.549700][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 721.584410][T23230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 721.657975][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 721.707678][T23230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 721.897616][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 721.921846][T23230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 721.958498][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 721.992590][T23230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 722.027773][T23230] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 722.081718][T23420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 722.907781][T23230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.992238][T23230] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.031755][T17390] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.038906][T17390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.077287][T23476] ip6_vti0: entered promiscuous mode [ 723.082959][T23476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5785'. [ 723.103984][T17390] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.111078][T17390] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.132972][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.253748][T23230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.497158][T23230] veth0_vlan: entered promiscuous mode [ 723.517113][T23230] veth1_vlan: entered promiscuous mode [ 723.558848][T23230] veth0_macvtap: entered promiscuous mode [ 723.575189][T23230] veth1_macvtap: entered promiscuous mode [ 723.599488][T23230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 723.626200][T23230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.651404][T17400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.674873][T17400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.701768][T17400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.720335][T17400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.870552][T17399] Bluetooth: hci0: Frame reassembly failed (-84) [ 723.893946][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5790'. [ 724.152699][T23570] netlink: 'syz.8.5794': attribute type 10 has an invalid length. [ 724.173607][T23570] team0: Port device xfrm0 added [ 724.186877][T23569] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5794'. [ 724.400258][T23576] loop9: detected capacity change from 0 to 164 [ 724.556544][T23579] loop7: detected capacity change from 0 to 256 [ 724.672190][T20205] hid-generic 0004:0004:FFFF0001.0016: unknown main item tag 0x0 [ 724.746977][T20205] hid-generic 0004:0004:FFFF0001.0016: unknown main item tag 0x0 [ 725.687140][T20205] hid-generic 0004:0004:FFFF0001.0016: unknown main item tag 0x0 [ 725.698245][T20205] hid-generic 0004:0004:FFFF0001.0016: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 725.768220][T23626] fido_id[23626]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 725.949653][ T8640] Bluetooth: hci0: command 0x1003 tx timeout [ 725.956238][ T3527] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 726.015978][T23646] loop7: detected capacity change from 0 to 764 [ 726.026535][ T28] audit: type=1400 audit(2000000358.909:5133): avc: denied { map } for pid=23649 comm="syz.4.5802" path="socket:[77443]" dev="sockfs" ino=77443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 726.225193][T23653] ip6_vti0: entered promiscuous mode [ 726.290505][T23653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5799'. [ 726.399302][ T28] audit: type=1400 audit(2000000358.909:5134): avc: denied { read } for pid=23649 comm="syz.4.5802" path="socket:[77443]" dev="sockfs" ino=77443 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 726.445191][T23661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5803'. [ 726.901926][T23672] loop9: detected capacity change from 0 to 764 [ 726.909980][T23672] Symlink component flag not implemented [ 726.915689][T23672] Symlink component flag not implemented (15) [ 726.985947][T23677] loop4: detected capacity change from 0 to 512 [ 727.001883][T23671] loop7: detected capacity change from 0 to 164 [ 727.013231][T23677] ext3: Unknown parameter 'func' [ 727.087680][T23671] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82 [ 727.274978][T23671] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5807'. [ 727.368664][T23691] loop3: detected capacity change from 0 to 8192 [ 727.758577][T23724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.768127][ T3572] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 727.796128][ T3572] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 727.806034][T23724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.884961][T23735] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5816'. [ 727.907478][T23739] loop7: detected capacity change from 0 to 256 [ 727.926034][T23739] vfat: Unknown parameter '' [ 727.985733][T23739] dummy0: entered allmulticast mode [ 727.998700][T23744] FAULT_INJECTION: forcing a failure. [ 727.998700][T23744] name failslab, interval 1, probability 0, space 0, times 0 [ 728.026137][T23738] dummy0: left allmulticast mode [ 728.036935][T23744] CPU: 1 UID: 0 PID: 23744 Comm: syz.8.5818 Tainted: G W syzkaller #0 PREEMPT(full) [ 728.036972][T23744] Tainted: [W]=WARN [ 728.036981][T23744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 728.036995][T23744] Call Trace: [ 728.037002][T23744] [ 728.037011][T23744] __dump_stack+0x1d/0x30 [ 728.037049][T23744] dump_stack_lvl+0x95/0xd0 [ 728.037077][T23744] dump_stack+0x15/0x1b [ 728.037114][T23744] should_fail_ex+0x263/0x280 [ 728.037143][T23744] should_failslab+0x8c/0xb0 [ 728.037165][T23744] __kmalloc_noprof+0xb8/0x4d0 [ 728.037189][T23744] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 728.037238][T23744] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 728.037269][T23744] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 728.037296][T23744] ? selinux_capable+0x31/0x40 [ 728.037393][T23744] ? security_capable+0x7b/0x90 [ 728.037425][T23744] ? ns_capable+0x7c/0xb0 [ 728.037452][T23744] genl_rcv_msg+0x432/0x470 [ 728.037476][T23744] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 728.037525][T23744] netlink_rcv_skb+0x123/0x220 [ 728.037556][T23744] ? __pfx_genl_rcv_msg+0x10/0x10 [ 728.037592][T23744] genl_rcv+0x28/0x40 [ 728.037668][T23744] netlink_unicast+0x5a8/0x680 [ 728.037701][T23744] netlink_sendmsg+0x5c8/0x6f0 [ 728.037746][T23744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 728.037779][T23744] ____sys_sendmsg+0x563/0x5b0 [ 728.037812][T23744] ___sys_sendmsg+0x195/0x1e0 [ 728.037883][T23744] __x64_sys_sendmsg+0xd4/0x160 [ 728.037912][T23744] x64_sys_call+0x194c/0x3020 [ 728.037963][T23744] do_syscall_64+0x12c/0x3b0 [ 728.038051][T23744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.038074][T23744] RIP: 0033:0x7fd3379ac819 [ 728.038093][T23744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.038114][T23744] RSP: 002b:00007fd3363ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 728.038137][T23744] RAX: ffffffffffffffda RBX: 00007fd337c25fa0 RCX: 00007fd3379ac819 [ 728.038171][T23744] RDX: 571f68543cec8180 RSI: 0000200000000580 RDI: 0000000000000004 [ 728.038184][T23744] RBP: 00007fd3363ff090 R08: 0000000000000000 R09: 0000000000000000 [ 728.038208][T23744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.038223][T23744] R13: 00007fd337c26038 R14: 00007fd337c25fa0 R15: 00007fff38991ff8 [ 728.038244][T23744] [ 728.386773][T23762] loop7: detected capacity change from 0 to 512 [ 728.389190][T23765] FAULT_INJECTION: forcing a failure. [ 728.389190][T23765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.403994][T23762] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 728.411109][T23765] CPU: 1 UID: 0 PID: 23765 Comm: syz.3.5823 Tainted: G W syzkaller #0 PREEMPT(full) [ 728.411221][T23765] Tainted: [W]=WARN [ 728.411228][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 728.411241][T23765] Call Trace: [ 728.411248][T23765] [ 728.411256][T23765] __dump_stack+0x1d/0x30 [ 728.411288][T23765] dump_stack_lvl+0x95/0xd0 [ 728.411313][T23765] dump_stack+0x15/0x1b [ 728.411337][T23765] should_fail_ex+0x263/0x280 [ 728.411394][T23765] should_fail+0xb/0x20 [ 728.411502][T23765] should_fail_usercopy+0x1a/0x20 [ 728.411521][T23765] _copy_to_user+0x20/0xa0 [ 728.411550][T23765] simple_read_from_buffer+0xb5/0x130 [ 728.411628][T23765] proc_fail_nth_read+0x10e/0x150 [ 728.411661][T23765] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 728.411720][T23765] vfs_read+0x1ab/0x7f0 [ 728.411751][T23765] ? __rcu_read_unlock+0x4e/0x70 [ 728.411849][T23765] ? __fget_files+0x184/0x1c0 [ 728.411901][T23765] ? mutex_lock+0x57/0x90 [ 728.411984][T23765] ksys_read+0xdc/0x1a0 [ 728.412015][T23765] __x64_sys_read+0x40/0x50 [ 728.412047][T23765] x64_sys_call+0x2886/0x3020 [ 728.412100][T23765] do_syscall_64+0x12c/0x3b0 [ 728.412142][T23765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.412186][T23765] RIP: 0033:0x7f27fe15d04e [ 728.412203][T23765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 728.412220][T23765] RSP: 002b:00007f27fcbeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 728.412268][T23765] RAX: ffffffffffffffda RBX: 00007f27fcbef6c0 RCX: 00007f27fe15d04e [ 728.412284][T23765] RDX: 000000000000000f RSI: 00007f27fcbef0a0 RDI: 0000000000000009 [ 728.412297][T23765] RBP: 00007f27fcbef090 R08: 0000000000000000 R09: 0000000000000000 [ 728.412311][T23765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 728.412322][T23765] R13: 00007f27fe416038 R14: 00007f27fe415fa0 R15: 00007ffd6d977068 [ 728.412341][T23765] [ 728.628071][T23762] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 728.679994][T23772] Cannot find add_set index 1 as target [ 728.688517][T23762] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.5822: bad orphan inode 4 [ 728.699146][T23762] loop7: lost filesystem error report for type 5 error -117 [ 728.699370][T23762] EXT4-fs (loop7): 1 orphan inode deleted [ 728.706695][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 728.706721][ C0] EXT4-fs (loop7): initial error at time 2000000361: ext4_orphan_get:1423 [ 728.706741][ C0] EXT4-fs (loop7): last error at time 2000000361: ext4_orphan_get:1423 [ 728.736879][T23762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.759690][T23773] loop3: detected capacity change from 0 to 764 [ 728.771732][T23773] Symlink component flag not implemented [ 728.777414][T23773] Symlink component flag not implemented (15) [ 728.821261][T23783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5829'. [ 728.835240][T23783] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5829'. [ 728.970206][T23785] loop4: detected capacity change from 0 to 8192 [ 729.535418][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.633887][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 729.964539][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5849'. [ 730.088492][T23833] macsec1: entered promiscuous mode [ 730.093885][T23833] macsec1: entered allmulticast mode [ 730.115912][T23833] loop4: detected capacity change from 0 to 164 [ 730.423203][T23839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5852'. [ 731.021302][T23844] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5853'. [ 731.074909][T23844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.099264][T23844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.193779][T23848] loop3: detected capacity change from 0 to 4096 [ 731.219268][T23848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.616095][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.835076][T23866] 9pnet_virtio: no channels available for device õl802154 [ 731.867540][T23874] FAULT_INJECTION: forcing a failure. [ 731.867540][T23874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.910388][T23874] CPU: 1 UID: 0 PID: 23874 Comm: syz.3.5861 Tainted: G W syzkaller #0 PREEMPT(full) [ 731.910420][T23874] Tainted: [W]=WARN [ 731.910428][T23874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.910442][T23874] Call Trace: [ 731.910450][T23874] [ 731.910536][T23874] __dump_stack+0x1d/0x30 [ 731.910564][T23874] dump_stack_lvl+0x95/0xd0 [ 731.910593][T23874] dump_stack+0x15/0x1b [ 731.910615][T23874] should_fail_ex+0x263/0x280 [ 731.910685][T23874] should_fail+0xb/0x20 [ 731.910793][T23874] should_fail_usercopy+0x1a/0x20 [ 731.910815][T23874] _copy_from_iter+0xcf/0xea0 [ 731.910863][T23874] ? __alloc_skb+0x4f6/0x690 [ 731.910884][T23874] ? __alloc_skb+0x200/0x690 [ 731.910965][T23874] netlink_sendmsg+0x4ae/0x6f0 [ 731.911080][T23874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 731.911113][T23874] ____sys_sendmsg+0x563/0x5b0 [ 731.911145][T23874] ___sys_sendmsg+0x195/0x1e0 [ 731.911199][T23874] __x64_sys_sendmsg+0xd4/0x160 [ 731.911227][T23874] x64_sys_call+0x194c/0x3020 [ 731.911279][T23874] do_syscall_64+0x12c/0x3b0 [ 731.911304][T23874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.911393][T23874] RIP: 0033:0x7f27fe19c819 [ 731.911409][T23874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.911430][T23874] RSP: 002b:00007f27fcbef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.911449][T23874] RAX: ffffffffffffffda RBX: 00007f27fe415fa0 RCX: 00007f27fe19c819 [ 731.911463][T23874] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 731.911475][T23874] RBP: 00007f27fcbef090 R08: 0000000000000000 R09: 0000000000000000 [ 731.911488][T23874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.911503][T23874] R13: 00007f27fe416038 R14: 00007f27fe415fa0 R15: 00007ffd6d977068 [ 731.911599][T23874] [ 732.121834][T23870] loop9: detected capacity change from 0 to 164 [ 732.148025][T23884] netlink: 'syz.4.5863': attribute type 10 has an invalid length. [ 732.294090][T23884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.302593][T23884] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 732.309859][T23890] netlink: 'syz.4.5863': attribute type 10 has an invalid length. [ 732.360985][T23890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5863'. [ 732.398130][T23894] loop3: detected capacity change from 0 to 164 [ 732.670203][T23890] batadv0: entered promiscuous mode [ 732.748837][T23890] batadv0: entered allmulticast mode [ 732.821575][T23890] bond0: (slave batadv0): Releasing backup interface [ 732.883323][T23890] bridge0: port 3(batadv0) entered blocking state [ 732.937259][T23890] bridge0: port 3(batadv0) entered disabled state [ 733.367684][T23909] loop7: detected capacity change from 0 to 8192 [ 733.399652][T17394] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 733.408959][T17394] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 734.109094][ T5116] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 734.165395][T23933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.247690][ T5116] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 734.264120][T23933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.380041][T23945] ip6_vti0: entered promiscuous mode [ 734.410983][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5873'. [ 735.205501][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5877'. [ 735.293952][T23983] loop7: detected capacity change from 0 to 256 [ 735.309071][T23983] vfat: Unknown parameter '' [ 735.360883][T23983] dummy0: entered allmulticast mode [ 735.398636][T23982] dummy0: left allmulticast mode [ 735.719764][T23989] loop7: detected capacity change from 0 to 512 [ 735.722039][T23994] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5882'. [ 735.801262][T23989] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 735.842411][T23989] EXT4-fs (loop7): 1 truncate cleaned up [ 735.852048][T23989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 735.962144][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5880'. [ 736.525679][T24017] bond11: entered allmulticast mode [ 736.550085][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.653641][T24020] macsec1: entered promiscuous mode [ 736.659313][T24020] macsec1: entered allmulticast mode [ 736.697154][T24020] loop3: detected capacity change from 0 to 164 [ 737.644710][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5888'. [ 738.029291][T24032] netlink: 'syz.7.5893': attribute type 10 has an invalid length. [ 738.059929][T24028] loop4: detected capacity change from 0 to 8192 [ 738.074439][T24032] geneve1: entered promiscuous mode [ 738.123612][T24032] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 738.327912][T23230] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000b908) [ 738.337469][T24041] loop7: detected capacity change from 0 to 128 [ 738.368059][T23230] FAT-fs (loop4): Filesystem has been set read-only [ 738.375342][T24041] msdos: Bad value for 'gid' [ 738.380911][T24041] msdos: Bad value for 'gid' [ 738.395288][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5897'. [ 738.412212][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5897'. [ 738.421902][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5897'. [ 738.435175][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5897'. [ 738.444387][T24041] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5897'. [ 738.564014][T24049] loop4: detected capacity change from 0 to 512 [ 738.577833][T24049] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 738.656011][T24052] loop3: detected capacity change from 0 to 164 [ 738.802556][T24049] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 738.834106][T24049] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.5895: bad orphan inode 4 [ 738.887816][T24049] loop4: lost filesystem error report for type 5 error -117 [ 738.888879][T24049] EXT4-fs (loop4): 1 orphan inode deleted [ 738.896437][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 738.896456][ C1] EXT4-fs (loop4): initial error at time 2000000371: ext4_orphan_get:1423 [ 738.896480][ C1] EXT4-fs (loop4): last error at time 2000000371: ext4_orphan_get:1423 [ 739.048940][T24049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.426374][T24069] loop3: detected capacity change from 0 to 512 [ 740.451194][T24069] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 740.465163][T23230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.482348][T24069] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 740.513875][T24069] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.5901: bad orphan inode 4 [ 740.559796][T24069] loop3: lost filesystem error report for type 5 error -117 [ 740.579590][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 740.593358][ C1] EXT4-fs (loop3): initial error at time 2000000373: ext4_orphan_get:1423 [ 740.601910][ C1] EXT4-fs (loop3): last error at time 2000000373: ext4_orphan_get:1423 [ 740.627710][T24069] EXT4-fs (loop3): 1 orphan inode deleted [ 740.637007][T24069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 740.665746][T24071] loop7: detected capacity change from 0 to 8192 [ 741.122213][T24080] loop9: detected capacity change from 0 to 164 [ 742.079633][T24090] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5908'. [ 742.192303][T24096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5909'. [ 742.598878][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.944740][T24127] SELinux: failed to load policy [ 742.998661][T24131] xt_l2tp: v2 doesn't support IP mode [ 743.037054][T24131] netlink: 'syz.3.5923': attribute type 10 has an invalid length. [ 743.063023][T24131] ipvlan0: entered allmulticast mode [ 743.074524][T24131] veth0_vlan: entered allmulticast mode [ 743.076864][T24137] loop9: detected capacity change from 0 to 2048 [ 743.092550][T24131] team0: Device ipvlan0 failed to register rx_handler [ 743.154465][ T28] audit: type=1326 audit(2000000376.049:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24136 comm="syz.9.5926" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65926dc819 code=0x0 [ 743.203352][T24145] loop7: detected capacity change from 0 to 2048 [ 743.209915][T24146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.226785][T24148] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5930'. [ 743.229369][T24146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.253719][T24148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.271174][T24145] loop7: p4 < > [ 743.288293][ T3011] loop7: p4 < > [ 743.293326][T24148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.325650][ T3317] udevd[3317]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 743.334281][T24148] bond0 (unregistering): Released all slaves [ 743.348322][T24155] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5932'. [ 743.358466][ T3317] udevd[3317]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 743.448606][T24161] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.515781][T24161] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.551527][T24170] netlink: 204 bytes leftover after parsing attributes in process `syz.8.5939'. [ 743.569743][T24170] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5939'. [ 743.579029][T24172] loop4: detected capacity change from 0 to 8192 [ 743.594680][T24161] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.665301][T24161] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.739337][T17394] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.760793][T17394] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.770999][T24177] loop3: detected capacity change from 0 to 1024 [ 743.791757][T17394] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.802361][T24177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 743.811523][T17394] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.816150][T23230] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000b908) [ 743.861152][T23230] FAT-fs (loop4): Filesystem has been set read-only [ 743.898677][T24184] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5944'. [ 744.259304][T24194] tipc: Started in network mode [ 744.269908][T24194] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 744.279272][T24194] tipc: Enabling of bearer rejected, failed to enable media [ 744.442245][T24203] IPv6: NLM_F_CREATE should be specified when creating new route [ 744.748412][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.758681][T24204] loop7: detected capacity change from 0 to 32768 [ 744.807087][T24204] loop7: p1 p3 < > [ 744.926865][T24212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5954'. [ 745.009386][T24219] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5956'. [ 745.261410][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5964'. [ 745.273760][ T28] audit: type=1400 audit(2000000378.169:5136): avc: denied { remount } for pid=24235 comm="syz.8.5964" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 745.294423][T24236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=24236 comm=syz.8.5964 [ 745.359805][ T28] audit: type=1400 audit(2000000378.249:5137): avc: denied { unmount } for pid=15032 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 745.440701][T24247] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5968'. [ 745.491823][T24250] loop7: detected capacity change from 0 to 4096 [ 745.517860][T24250] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.554889][T24258] netlink: 'syz.8.5970': attribute type 16 has an invalid length. [ 745.562775][T24258] netlink: 'syz.8.5970': attribute type 17 has an invalid length. [ 745.584631][T24258] ip6_vti0: left promiscuous mode [ 745.611768][T24258] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.619673][T24258] tipc: Resetting bearer [ 745.625858][T24258] tipc: Resetting bearer [ 745.635256][T24258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.684049][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.737587][T24264] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 745.745140][T24264] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 745.752580][T24264] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 745.762021][T24264] xt_hashlimit: max too large, truncated to 1048576 [ 746.768162][T24271] loop7: detected capacity change from 0 to 512 [ 746.827145][T24271] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5973: invalid indirect mapped block 4294967295 (level 1) [ 746.853412][T24276] loop9: detected capacity change from 0 to 1764 [ 746.859742][T24271] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 746.867317][T24271] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5973: invalid indirect mapped block 4294967295 (level 1) [ 746.876565][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 746.876599][ C0] EXT4-fs (loop7): initial error at time 2000000379: ext4_free_branches:1023: inode 11 [ 746.876645][ C0] EXT4-fs (loop7): last error at time 2000000379: ext4_free_branches:1023: inode 11 [ 747.011067][T24271] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 747.011819][T24271] EXT4-fs (loop7): 2 truncates cleaned up [ 747.093538][T24271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.240348][T22364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 747.496984][T24287] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5979'. [ 747.517050][T24287] loop7: detected capacity change from 0 to 512 [ 747.545929][T24287] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.591726][T24287] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 747.606485][ T28] audit: type=1326 audit(2000000380.499:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24292 comm="syz.8.5981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd3379ac819 code=0x0 [ 747.699034][T24297] loop4: detected capacity change from 0 to 1024 [ 747.734161][T24297] EXT4-fs: Ignoring removed nobh option [ 747.742869][ T28] audit: type=1400 audit(2000000380.639:5139): avc: denied { rmdir } for pid=22364 comm="syz-executor" name="lost+found" dev="loop7" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 747.764683][T24297] EXT4-fs: Ignoring removed nomblk_io_submit option [ 747.776077][T22364] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 747.821004][T22364] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 747.842965][T24297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 747.869481][T24297] FAULT_INJECTION: forcing a failure. [ 747.869481][T24297] name failslab, interval 1, probability 0, space 0, times 0 [ 747.882324][T24297] CPU: 0 UID: 0 PID: 24297 Comm: syz.4.5983 Tainted: G W syzkaller #0 PREEMPT(full) [ 747.882355][T24297] Tainted: [W]=WARN [ 747.882361][T24297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 747.882374][T24297] Call Trace: [ 747.882380][T24297] [ 747.882403][T24297] __dump_stack+0x1d/0x30 [ 747.882435][T24297] dump_stack_lvl+0x95/0xd0 [ 747.882461][T24297] dump_stack+0x15/0x1b [ 747.882483][T24297] should_fail_ex+0x263/0x280 [ 747.882590][T24297] should_failslab+0x8c/0xb0 [ 747.882616][T24297] kmem_cache_alloc_noprof+0x66/0x3f0 [ 747.882636][T24297] ? __es_insert_extent+0x508/0xee0 [ 747.882659][T24297] __es_insert_extent+0x508/0xee0 [ 747.882685][T24297] ext4_es_cache_extent+0x37e/0x5a0 [ 747.882744][T24297] ext4_find_extent+0x341/0x790 [ 747.882840][T24297] ext4_ext_map_blocks+0x10d/0x2ea0 [ 747.883008][T24297] ? format_decode+0xae/0x540 [ 747.883040][T24297] ? vsnprintf+0x7ee/0x860 [ 747.883077][T24297] ext4_map_query_blocks+0xb2/0x550 [ 747.883176][T24297] ? ext4_es_lookup_extent+0x3a2/0x500 [ 747.883253][T24297] ext4_map_blocks+0x306/0x970 [ 747.883284][T24297] ext4_getblk+0x128/0x530 [ 747.883357][T24297] ext4_bread_batch+0x5c/0x320 [ 747.883380][T24297] __ext4_find_entry+0x852/0xdf0 [ 747.883414][T24297] ? kmem_cache_alloc_lru_noprof+0x1eb/0x400 [ 747.883438][T24297] ? __rcu_read_unlock+0x4e/0x70 [ 747.883530][T24297] ? d_alloc_parallel+0xc01/0xce0 [ 747.883590][T24297] ext4_lookup+0xcd/0x3a0 [ 747.883618][T24297] __lookup_slow+0x19d/0x260 [ 747.883644][T24297] lookup_slow+0x3c/0x60 [ 747.883683][T24297] path_lookupat+0x2f7/0x500 [ 747.883711][T24297] filename_lookup+0x190/0x390 [ 747.883744][T24297] filename_setxattr+0x56/0x410 [ 747.883813][T24297] ? do_getname+0x102/0x1c0 [ 747.883839][T24297] path_setxattrat+0x2be/0x310 [ 747.883886][T24297] __x64_sys_lsetxattr+0x71/0x90 [ 747.883911][T24297] x64_sys_call+0x1300/0x3020 [ 747.883965][T24297] do_syscall_64+0x12c/0x3b0 [ 747.884046][T24297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.884071][T24297] RIP: 0033:0x7f185168c819 [ 747.884086][T24297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.884104][T24297] RSP: 002b:00007f18500df028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 747.884173][T24297] RAX: ffffffffffffffda RBX: 00007f1851905fa0 RCX: 00007f185168c819 [ 747.884269][T24297] RDX: 0000200000001d00 RSI: 0000200000000240 RDI: 00002000000000c0 [ 747.884315][T24297] RBP: 00007f18500df090 R08: 0000000000000000 R09: 0000000000000000 [ 747.884328][T24297] R10: 0000000000000381 R11: 0000000000000246 R12: 0000000000000001 [ 747.884343][T24297] R13: 00007f1851906038 R14: 00007f1851905fa0 R15: 00007ffc56d0e378 [ 747.884361][T24297] [ 748.182845][T23230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.304835][T24308] loop3: detected capacity change from 0 to 128 [ 748.477574][T24316] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 749.052382][T24324] loop9: detected capacity change from 0 to 164 [ 749.490974][T17397] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.953087][T24294] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.024292][T24329] FAULT_INJECTION: forcing a failure. [ 750.024292][T24329] name failslab, interval 1, probability 0, space 0, times 0 [ 750.059203][T24329] CPU: 0 UID: 0 PID: 24329 Comm: syz.4.5993 Tainted: G W syzkaller #0 PREEMPT(full) [ 750.059236][T24329] Tainted: [W]=WARN [ 750.059244][T24329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 750.059266][T24329] Call Trace: [ 750.059273][T24329] [ 750.059282][T24329] __dump_stack+0x1d/0x30 [ 750.059312][T24329] dump_stack_lvl+0x95/0xd0 [ 750.059335][T24329] dump_stack+0x15/0x1b [ 750.059355][T24329] should_fail_ex+0x263/0x280 [ 750.059383][T24329] should_failslab+0x8c/0xb0 [ 750.059403][T24329] kmem_cache_alloc_noprof+0x66/0x3f0 [ 750.059422][T24329] ? alloc_empty_file+0x70/0x1e0 [ 750.059445][T24329] alloc_empty_file+0x70/0x1e0 [ 750.059468][T24329] alloc_file_pseudo+0xf6/0x190 [ 750.059499][T24329] __shmem_file_setup+0x226/0x260 [ 750.059525][T24329] shmem_zero_setup+0x66/0xe0 [ 750.059546][T24329] mmap_region+0x1987/0x20d0 [ 750.059600][T24329] do_mmap+0x9b2/0xbd0 [ 750.059622][T24329] ? selinux_mmap_file+0x5d/0x70 [ 750.059653][T24329] vm_mmap_pgoff+0x183/0x2d0 [ 750.059679][T24329] ksys_mmap_pgoff+0xc1/0x310 [ 750.059704][T24329] ? __x64_sys_mmap+0x49/0x70 [ 750.059727][T24329] x64_sys_call+0x14df/0x3020 [ 750.059757][T24329] do_syscall_64+0x12c/0x3b0 [ 750.059781][T24329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.059801][T24329] RIP: 0033:0x7f185168c819 [ 750.059817][T24329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.059833][T24329] RSP: 002b:00007f18500df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 750.059855][T24329] RAX: ffffffffffffffda RBX: 00007f1851905fa0 RCX: 00007f185168c819 [ 750.059871][T24329] RDX: 000000000300000b RSI: 0000000000200000 RDI: 0000200000000000 [ 750.059886][T24329] RBP: 00007f18500df090 R08: ffffffffffffffff R09: 00000000e4776000 [ 750.059899][T24329] R10: 0000000000204031 R11: 0000000000000246 R12: 0000000000000001 [ 750.059911][T24329] R13: 00007f1851906038 R14: 00007f1851905fa0 R15: 00007ffc56d0e378 [ 750.059932][T24329] [ 750.322227][T24333] SELinux: failed to load policy [ 750.553426][T17397] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.571994][T24342] __nla_validate_parse: 1 callbacks suppressed [ 750.572021][T24342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5999'. [ 750.693180][T17397] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.713891][T24359] netlink: 64 bytes leftover after parsing attributes in process `syz.9.6005'. [ 750.726234][T24358] 9pnet_virtio: no channels available for device õl802154 [ 750.772654][T17397] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.789311][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6008'. [ 750.813910][T24372] loop9: detected capacity change from 0 to 1024 [ 750.822350][T24372] EXT4-fs: inline encryption not supported [ 750.828320][T24372] EXT4-fs: Ignoring removed nobh option [ 750.929978][T24372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 750.938411][T24372] System zones: 0-1, 3-12 [ 751.000815][T24372] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 751.034616][T17397] bridge_slave_1: left allmulticast mode [ 751.084534][T17397] bridge_slave_1: left promiscuous mode [ 751.128154][T17397] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.167484][T17397] bridge_slave_0: left allmulticast mode [ 751.179155][T17397] bridge_slave_0: left promiscuous mode [ 751.198802][T17397] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.340135][T17397] ip6gretap0 (unregistering): left promiscuous mode [ 751.384081][T17397] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 751.396951][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.415451][T17397] bridge0 (unregistering): left promiscuous mode [ 751.470456][T17397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.480642][T17397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.490927][T17397] bond0 (unregistering): Released all slaves [ 751.510168][T17397] tipc: Left network mode [ 751.553984][T17397] hsr_slave_0: left promiscuous mode [ 751.569832][T17397] hsr_slave_1: left promiscuous mode [ 751.576241][T17397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.577230][T24398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6014'. [ 751.584203][T17397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.600494][T17397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.607970][T17397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.618885][T17397] veth1_macvtap: left promiscuous mode [ 751.624402][T17397] veth0_macvtap: left promiscuous mode [ 751.630081][T17397] veth1_vlan: left promiscuous mode [ 751.635753][T17397] veth0_vlan: left promiscuous mode [ 751.693301][T24400] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6015'. [ 751.702444][T24400] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6015'. [ 751.712198][T17397] team0 (unregistering): Port device team_slave_1 removed [ 751.722236][T17397] team0 (unregistering): Port device team_slave_0 removed [ 751.773673][T24400] bridge0: entered promiscuous mode [ 751.780140][T24400] ip6gretap0: entered promiscuous mode [ 751.790198][T24402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6016'. [ 751.794472][T24400] hsr2: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 751.847601][T24406] team_slave_0: entered promiscuous mode [ 751.853306][T24406] team_slave_1: entered promiscuous mode [ 751.859421][T24406] vlan2: entered promiscuous mode [ 751.864548][T24406] team0: entered promiscuous mode [ 751.874788][T24404] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6018'. [ 752.024096][T24431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 752.033343][T24431] netlink: 'syz.4.6024': attribute type 18 has an invalid length. [ 752.041529][T24431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6024'. [ 752.073643][T24351] chnl_net:caif_netlink_parms(): no params data found [ 752.111254][ T3050] 8021q: adding VLAN 0 to HW filter on device eth1 [ 752.194465][T24351] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.201768][T24351] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.209523][T24351] bridge_slave_0: entered allmulticast mode [ 752.216120][T24351] bridge_slave_0: entered promiscuous mode [ 752.225995][T24351] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.234253][T24351] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.241857][T24351] bridge_slave_1: entered allmulticast mode [ 752.248527][T24351] bridge_slave_1: entered promiscuous mode [ 752.267521][T24351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.278391][T24351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.307936][T24351] team0: Port device team_slave_0 added [ 752.314752][T24351] team0: Port device team_slave_1 added [ 752.343561][T24351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.357911][T24351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.384588][T24351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.396508][T24351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.407513][T24351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.460286][T24351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.535269][T24480] FAULT_INJECTION: forcing a failure. [ 752.535269][T24480] name failslab, interval 1, probability 0, space 0, times 0 [ 752.545109][T24351] hsr_slave_0: entered promiscuous mode [ 752.564874][T24351] hsr_slave_1: entered promiscuous mode [ 752.571225][T24351] debugfs: 'hsr0' already exists in 'hsr' [ 752.578021][T24351] Cannot create hsr debugfs directory [ 752.593680][T24480] CPU: 0 UID: 0 PID: 24480 Comm: syz.4.6035 Tainted: G W syzkaller #0 PREEMPT(full) [ 752.593715][T24480] Tainted: [W]=WARN [ 752.593741][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 752.593754][T24480] Call Trace: [ 752.593761][T24480] [ 752.593824][T24480] __dump_stack+0x1d/0x30 [ 752.593850][T24480] dump_stack_lvl+0x95/0xd0 [ 752.593884][T24480] dump_stack+0x15/0x1b [ 752.593919][T24480] should_fail_ex+0x263/0x280 [ 752.594008][T24480] should_failslab+0x8c/0xb0 [ 752.594027][T24480] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 752.594050][T24480] ? __alloc_skb+0x2d6/0x690 [ 752.594137][T24480] __alloc_skb+0x2d6/0x690 [ 752.594211][T24480] ? __alloc_skb+0x200/0x690 [ 752.594236][T24480] netlink_ack+0xfd/0x500 [ 752.594265][T24480] netlink_rcv_skb+0x192/0x220 [ 752.594384][T24480] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 752.594425][T24480] nfnetlink_rcv+0x167/0x1720 [ 752.594453][T24480] ? __kfree_skb+0x109/0x150 [ 752.594488][T24480] ? nlmon_xmit+0x4f/0x60 [ 752.594517][T24480] ? consume_skb+0x4b/0x130 [ 752.594544][T24480] ? nlmon_xmit+0x4f/0x60 [ 752.594576][T24480] ? dev_hard_start_xmit+0x36c/0x3a0 [ 752.594677][T24480] ? __dev_queue_xmit+0x1396/0x1ec0 [ 752.594707][T24480] ? __dev_queue_xmit+0x165/0x1ec0 [ 752.594754][T24480] ? ref_tracker_free+0x37d/0x3e0 [ 752.594788][T24480] ? __netlink_deliver_tap+0x4dc/0x500 [ 752.594879][T24480] netlink_unicast+0x5a8/0x680 [ 752.594906][T24480] netlink_sendmsg+0x5c8/0x6f0 [ 752.594935][T24480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 752.595010][T24480] ____sys_sendmsg+0x563/0x5b0 [ 752.595042][T24480] ___sys_sendmsg+0x195/0x1e0 [ 752.595082][T24480] __x64_sys_sendmsg+0xd4/0x160 [ 752.595186][T24480] x64_sys_call+0x194c/0x3020 [ 752.595216][T24480] do_syscall_64+0x12c/0x3b0 [ 752.595255][T24480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.595278][T24480] RIP: 0033:0x7f185168c819 [ 752.595294][T24480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 752.595312][T24480] RSP: 002b:00007f18500df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 752.595425][T24480] RAX: ffffffffffffffda RBX: 00007f1851905fa0 RCX: 00007f185168c819 [ 752.595440][T24480] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 752.595452][T24480] RBP: 00007f18500df090 R08: 0000000000000000 R09: 0000000000000000 [ 752.595464][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 752.595478][T24480] R13: 00007f1851906038 R14: 00007f1851905fa0 R15: 00007ffc56d0e378 [ 752.595498][T24480] [ 752.597571][ T3050] 8021q: adding VLAN 0 to HW filter on device eth2 [ 753.051995][T24502] loop3: detected capacity change from 0 to 512 [ 753.069532][T24488] loop4: detected capacity change from 0 to 512 [ 753.080358][T24502] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 753.115394][T24488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 753.139531][T24502] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 753.157557][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 753.164000][ C1] EXT4-fs (loop3): initial error at time 2000000386: ext4_mb_generate_buddy:1317 [ 753.173129][ C1] EXT4-fs (loop3): last error at time 2000000386: ext4_mb_generate_buddy:1317 [ 753.185168][T24488] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 753.203237][T24502] Quota error (device loop3): write_blk: dquota write failed [ 753.218441][T24488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 753.231799][T24502] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 753.241681][T24488] EXT4-fs (loop4): failed to initialize system zone (-117) [ 753.262656][ T3050] 8021q: adding VLAN 0 to HW filter on device eth3 [ 753.264511][T24502] Quota error (device loop3): write_blk: dquota write failed [ 753.271819][T24488] EXT4-fs (loop4): mount failed [ 753.276978][T24502] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 753.291913][T24502] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.6040: Failed to acquire dquot type 1 [ 753.303441][T24502] loop3: lost filesystem error report for type 5 error -28 [ 753.328060][T24502] EXT4-fs (loop3): 1 truncate cleaned up [ 753.363556][T24351] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 753.382320][T24351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.390342][T24502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.415330][T24351] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 753.440546][T24351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 753.452121][ T28] audit: type=1400 audit(2000000386.352:5140): avc: denied { execute_no_trans } for pid=24500 comm="syz.3.6040" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="hugetlbfs" ino=80736 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 753.469557][T24351] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 753.496679][T24351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 753.504510][T24351] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 753.546732][T24351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 753.566462][T24502] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 753.580561][T24520] loop9: detected capacity change from 0 to 8192 [ 753.608761][T24539] ip6_vti0: entered promiscuous mode [ 753.650994][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.721879][T24351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 753.768552][T24351] 8021q: adding VLAN 0 to HW filter on device team0 [ 753.791046][T24559] 9pnet_virtio: no channels available for device õ [ 753.804193][ T3050] 8021q: adding VLAN 0 to HW filter on device eth4 [ 753.820831][T17395] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.827934][T17395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 753.860569][T24567] loop4: detected capacity change from 0 to 512 [ 753.870354][T17397] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.877521][T17397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.907372][T24567] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 753.991858][T24567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.004715][T24567] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 754.092163][T23230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.120641][T24351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 754.199165][T24587] loop4: detected capacity change from 0 to 512 [ 754.227098][T24587] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 754.284618][T24587] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 754.305135][T24351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.333858][T24587] EXT4-fs (loop4): orphan cleanup on readonly fs [ 754.343485][T24587] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.6056: bad orphan inode 3 [ 754.353787][T24587] loop4: lost filesystem error report for type 5 error -117 [ 754.355201][T24587] EXT4-fs (loop4): Remounting filesystem read-only [ 754.362531][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 754.362564][ C1] EXT4-fs (loop4): initial error at time 2000000387: ext4_orphan_get:1423 [ 754.362592][ C1] EXT4-fs (loop4): last error at time 2000000387: ext4_orphan_get:1423 [ 754.393329][T24587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 754.411212][T24587] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.6056: dx entry: limit 0 != root limit 125 [ 754.437810][T24587] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.6056: Corrupt directory, running e2fsck is recommended [ 754.537079][T23230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 754.670927][T24651] loop4: detected capacity change from 0 to 512 [ 754.690602][T24351] veth0_vlan: entered promiscuous mode [ 754.703804][T24651] EXT4-fs: Ignoring removed oldalloc option [ 754.721426][T24351] veth1_vlan: entered promiscuous mode [ 754.733963][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 754.759922][T24351] veth0_macvtap: entered promiscuous mode [ 754.767074][T24651] EXT4-fs (loop4): invalid journal inode [ 754.796060][T24351] veth1_macvtap: entered promiscuous mode [ 754.804878][T24651] loop4: detected capacity change from 0 to 512 [ 754.831340][T24651] EXT4-fs: Ignoring removed oldalloc option [ 754.853649][T24351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 754.883304][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 754.896761][T24351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.920624][T24651] EXT4-fs (loop4): invalid journal inode [ 754.943834][T17397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.955348][T24651] loop4: detected capacity change from 0 to 512 [ 754.962462][T17397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.972480][T24651] EXT4-fs: Ignoring removed oldalloc option [ 754.990934][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 755.007295][T17397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.031025][T24651] EXT4-fs (loop4): invalid journal inode [ 755.037122][T17397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 755.059125][T24651] loop4: detected capacity change from 0 to 512 [ 755.080899][T24651] EXT4-fs: Ignoring removed oldalloc option [ 755.106936][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 755.129061][T24651] EXT4-fs (loop4): invalid journal inode [ 755.169479][T24651] loop4: detected capacity change from 0 to 512 [ 755.195086][T24651] EXT4-fs: Ignoring removed oldalloc option [ 755.209921][T24697] loop5: detected capacity change from 0 to 512 [ 755.223264][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 755.237017][T24697] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 755.245439][T24651] EXT4-fs (loop4): invalid journal inode [ 755.274218][T24651] loop4: detected capacity change from 0 to 512 [ 755.283365][T24697] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 755.300479][T24651] EXT4-fs: Ignoring removed oldalloc option [ 755.312379][T24697] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.6000: bad orphan inode 4 [ 755.327389][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 755.327693][T24697] loop5: lost filesystem error report for type 5 error -117 [ 755.336503][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 755.350286][ C0] EXT4-fs (loop5): initial error at time 2000000388: ext4_orphan_get:1423 [ 755.358938][ C0] EXT4-fs (loop5): last error at time 2000000388: ext4_orphan_get:1423 [ 755.358962][T24651] EXT4-fs (loop4): invalid journal inode [ 755.380399][T24697] EXT4-fs (loop5): 1 orphan inode deleted [ 755.393874][T24697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.425089][T24651] EXT4-fs: Ignoring removed oldalloc option [ 755.469354][T24651] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 755.546640][T24651] EXT4-fs (loop4): invalid journal inode [ 755.709324][T20205] IPVS: starting estimator thread 0... [ 755.732573][T24727] __nla_validate_parse: 8 callbacks suppressed [ 755.732596][T24727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6074'. [ 755.836423][T24728] IPVS: using max 2400 ests per chain, 120000 per kthread [ 756.105709][T24737] EXT4-fs: Ignoring removed bh option [ 756.142540][T24737] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.155363][T24737] EXT4-fs (loop9): shut down requested (1) [ 756.162680][ T28] audit: type=1400 audit(2000000389.063:5141): avc: denied { read } for pid=2992 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 756.202514][T24742] netlink: 7 bytes leftover after parsing attributes in process `syz.3.6078'. [ 756.214972][ T28] audit: type=1400 audit(2000000389.063:5142): avc: denied { search } for pid=2992 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.246746][T24742] FAULT_INJECTION: forcing a failure. [ 756.246746][T24742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.261305][ T28] audit: type=1400 audit(2000000389.063:5143): avc: denied { search } for pid=2992 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.285941][T24351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.287325][ T28] audit: type=1400 audit(2000000389.063:5144): avc: denied { add_name } for pid=2992 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 756.302780][T24742] CPU: 1 UID: 0 PID: 24742 Comm: syz.3.6078 Tainted: G W syzkaller #0 PREEMPT(full) [ 756.302816][T24742] Tainted: [W]=WARN [ 756.302824][T24742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 756.302837][T24742] Call Trace: [ 756.302844][T24742] [ 756.302852][T24742] __dump_stack+0x1d/0x30 [ 756.302927][T24742] dump_stack_lvl+0x95/0xd0 [ 756.302956][T24742] dump_stack+0x15/0x1b [ 756.302980][T24742] should_fail_ex+0x263/0x280 [ 756.303056][T24742] should_fail+0xb/0x20 [ 756.303158][T24742] should_fail_usercopy+0x1a/0x20 [ 756.303179][T24742] _copy_to_user+0x20/0xa0 [ 756.303199][T24742] simple_read_from_buffer+0xb5/0x130 [ 756.303280][T24742] proc_fail_nth_read+0x10e/0x150 [ 756.303312][T24742] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.303343][T24742] vfs_read+0x1ab/0x7f0 [ 756.303379][T24742] ? __rcu_read_unlock+0x4e/0x70 [ 756.303405][T24742] ? __fget_files+0x184/0x1c0 [ 756.303430][T24742] ? mutex_lock+0x57/0x90 [ 756.303515][T24742] ksys_read+0xdc/0x1a0 [ 756.303581][T24742] __x64_sys_read+0x40/0x50 [ 756.303617][T24742] x64_sys_call+0x2886/0x3020 [ 756.303693][T24742] do_syscall_64+0x12c/0x3b0 [ 756.303719][T24742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.303742][T24742] RIP: 0033:0x7f27fe15d04e [ 756.303759][T24742] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 756.303777][T24742] RSP: 002b:00007f27fcbeefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 756.303828][T24742] RAX: ffffffffffffffda RBX: 00007f27fcbef6c0 RCX: 00007f27fe15d04e [ 756.303844][T24742] RDX: 000000000000000f RSI: 00007f27fcbef0a0 RDI: 0000000000000004 [ 756.303857][T24742] RBP: 00007f27fcbef090 R08: 0000000000000000 R09: 0000000000000000 [ 756.303915][T24742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.303955][T24742] R13: 00007f27fe416038 R14: 00007f27fe415fa0 R15: 00007ffd6d977068 [ 756.303975][T24742] [ 756.379857][T24749] bond0: Removing last arp target with arp_interval on [ 756.520072][T24749] bond0: entered promiscuous mode [ 756.525129][T24749] bond0: entered allmulticast mode [ 756.530507][T24749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.665241][T24752] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 756.676742][T24752] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 756.687772][T24752] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 756.698836][T24752] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=16 [ 756.749434][T24756] FAULT_INJECTION: forcing a failure. [ 756.749434][T24756] name failslab, interval 1, probability 0, space 0, times 0 [ 756.762382][T24756] CPU: 0 UID: 0 PID: 24756 Comm: syz.5.6081 Tainted: G W syzkaller #0 PREEMPT(full) [ 756.762413][T24756] Tainted: [W]=WARN [ 756.762420][T24756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 756.762432][T24756] Call Trace: [ 756.762454][T24756] [ 756.762464][T24756] __dump_stack+0x1d/0x30 [ 756.762491][T24756] dump_stack_lvl+0x95/0xd0 [ 756.762520][T24756] dump_stack+0x15/0x1b [ 756.762579][T24756] should_fail_ex+0x263/0x280 [ 756.762610][T24756] ? alloc_pipe_info+0xad/0x340 [ 756.762631][T24756] should_failslab+0x8c/0xb0 [ 756.762655][T24756] __kmalloc_cache_noprof+0x5f/0x400 [ 756.762684][T24756] alloc_pipe_info+0xad/0x340 [ 756.762730][T24756] splice_direct_to_actor+0x591/0x670 [ 756.762801][T24756] ? kstrtouint_from_user+0xa8/0xf0 [ 756.762827][T24756] ? __pfx_direct_splice_actor+0x10/0x10 [ 756.762853][T24756] ? __rcu_read_unlock+0x4e/0x70 [ 756.762931][T24756] ? get_pid_task+0x96/0xd0 [ 756.762952][T24756] ? avc_policy_seqno+0x15/0x30 [ 756.762986][T24756] ? selinux_file_permission+0x1e1/0x320 [ 756.763012][T24756] do_splice_direct+0x119/0x1a0 [ 756.763099][T24756] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 756.763124][T24756] do_sendfile+0x382/0x650 [ 756.763149][T24756] __x64_sys_sendfile64+0x105/0x150 [ 756.763219][T24756] x64_sys_call+0x2dc4/0x3020 [ 756.763330][T24756] do_syscall_64+0x12c/0x3b0 [ 756.763354][T24756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.763375][T24756] RIP: 0033:0x7f50c35bc819 [ 756.763390][T24756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.763431][T24756] RSP: 002b:00007f50c200f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 756.763454][T24756] RAX: ffffffffffffffda RBX: 00007f50c3835fa0 RCX: 00007f50c35bc819 [ 756.763546][T24756] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 756.763561][T24756] RBP: 00007f50c200f090 R08: 0000000000000000 R09: 0000000000000000 [ 756.763577][T24756] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 756.763592][T24756] R13: 00007f50c3836038 R14: 00007f50c3835fa0 R15: 00007ffd494749a8 [ 756.763614][T24756] [ 757.049207][ T28] audit: type=1400 audit(2000000389.063:5145): avc: denied { create } for pid=2992 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 757.119707][T24760] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6083'. [ 757.896098][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6080'. [ 757.933251][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.164174][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6087'. [ 758.263362][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6086'. [ 758.268245][T24778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6089'. [ 758.451809][T24814] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6099'. [ 758.543733][T24824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6101'. [ 758.679557][T24825] set_capacity_and_notify: 2 callbacks suppressed [ 758.679573][T24825] loop3: detected capacity change from 0 to 512 [ 758.761137][T24825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 758.778197][T24825] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 758.858791][T24825] bond1: entered allmulticast mode [ 759.966086][T24901] loop5: detected capacity change from 0 to 512 [ 759.997217][T24901] EXT4-fs (loop5): Couldn't mount because of unsupported optional features (40000) [ 760.057345][T24901] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 760.089362][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.103761][T24897] loop9: detected capacity change from 0 to 8192 [ 760.158817][T24901] Cannot find set identified by id 65534 to match [ 760.369723][T24917] loop5: detected capacity change from 0 to 512 [ 760.406965][T24917] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #12: comm syz.5.6114: missing EA_INODE flag [ 760.463784][T24917] loop5: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 760.464175][T24917] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.6114: error while reading EA inode 12 err=-117 [ 760.485765][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 760.485783][ C1] EXT4-fs (loop5): initial error at time 2000000393: ext4_xattr_inode_iget:441: inode 12 [ 760.485809][ C1] EXT4-fs (loop5): last error at time 2000000393: ext4_xattr_inode_iget:441: inode 12 [ 760.650831][T24917] loop5: lost filesystem error report for type 5 error -117 [ 760.650964][T24917] EXT4-fs (loop5): 1 orphan inode deleted [ 760.679401][T24917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.865387][T24937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.903101][T24937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.934849][T24351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 761.221557][T24949] loop3: detected capacity change from 0 to 512 [ 761.270498][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6115'. [ 761.409718][T24949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.556075][T24949] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.032100][T24963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.052129][T24963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.366515][T24977] loop5: detected capacity change from 0 to 512 [ 762.405584][T24977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.421551][T24977] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 762.597659][T24989] tipc: Failed to remove unknown binding: 66,1,1/11578026:5512139/5512141 [ 762.636990][T24989] tipc: Failed to remove unknown binding: 66,1,1/11578026:5512139/5512141 [ 762.691990][T24989] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6129'. [ 762.953587][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.047031][T24996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6160 sclass=netlink_route_socket pid=24996 comm=syz.8.6132 [ 763.069590][T24995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6131'. [ 763.324093][T24351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.354531][T25003] 9p: Could not find request transport: fd= [ 763.449474][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6135'. [ 763.687462][T25012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6134'. [ 763.820910][T25017] loop5: detected capacity change from 0 to 512 [ 763.835892][T25017] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 764.093707][T25028] team0: Device vxcan3 is of different type [ 764.150500][T25030] loop3: detected capacity change from 0 to 8192 [ 764.351608][T25031] macsec1: entered promiscuous mode [ 764.357214][T25031] macsec1: entered allmulticast mode [ 764.378862][T25031] loop5: detected capacity change from 0 to 164 [ 765.165573][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6144'. [ 765.368053][T25046] 9pnet_virtio: no channels available for device õ [ 765.377959][T25048] FAULT_INJECTION: forcing a failure. [ 765.377959][T25048] name failslab, interval 1, probability 0, space 0, times 0 [ 765.405860][T25050] random: crng reseeded on system resumption [ 765.417541][T25048] CPU: 1 UID: 0 PID: 25048 Comm: syz.8.6149 Tainted: G W syzkaller #0 PREEMPT(full) [ 765.417578][T25048] Tainted: [W]=WARN [ 765.417587][T25048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 765.417601][T25048] Call Trace: [ 765.417608][T25048] [ 765.417618][T25048] __dump_stack+0x1d/0x30 [ 765.417719][T25048] dump_stack_lvl+0x95/0xd0 [ 765.417742][T25048] dump_stack+0x15/0x1b [ 765.417769][T25048] should_fail_ex+0x263/0x280 [ 765.417872][T25048] should_failslab+0x8c/0xb0 [ 765.417894][T25048] kmem_cache_alloc_noprof+0x66/0x3f0 [ 765.417951][T25048] ? skb_clone+0x151/0x1f0 [ 765.417977][T25048] skb_clone+0x151/0x1f0 [ 765.418003][T25048] __netlink_deliver_tap+0x2c9/0x500 [ 765.418054][T25048] netlink_unicast+0x653/0x680 [ 765.418080][T25048] netlink_sendmsg+0x5c8/0x6f0 [ 765.418113][T25048] ? __pfx_netlink_sendmsg+0x10/0x10 [ 765.418286][T25048] ____sys_sendmsg+0x563/0x5b0 [ 765.418380][T25048] ___sys_sendmsg+0x195/0x1e0 [ 765.418478][T25048] __x64_sys_sendmsg+0xd4/0x160 [ 765.418562][T25048] x64_sys_call+0x194c/0x3020 [ 765.418588][T25048] do_syscall_64+0x12c/0x3b0 [ 765.418612][T25048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.418637][T25048] RIP: 0033:0x7fd3379ac819 [ 765.418655][T25048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.418678][T25048] RSP: 002b:00007fd3363ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 765.418702][T25048] RAX: ffffffffffffffda RBX: 00007fd337c25fa0 RCX: 00007fd3379ac819 [ 765.418718][T25048] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 765.418748][T25048] RBP: 00007fd3363ff090 R08: 0000000000000000 R09: 0000000000000000 [ 765.418760][T25048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 765.418774][T25048] R13: 00007fd337c26038 R14: 00007fd337c25fa0 R15: 00007fff38991ff8 [ 765.418796][T25048] [ 765.418982][T25048] smc: net device bond0 applied user defined pnetid SYZ2 [ 765.731958][T25053] loop9: detected capacity change from 0 to 2048 [ 765.838077][T25053] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.884051][T25055] dummy0: entered allmulticast mode [ 765.951086][T25069] SELinux: failed to load policy [ 766.051445][T25054] dummy0: left allmulticast mode [ 766.082882][T25071] loop5: detected capacity change from 0 to 8192 [ 766.498606][T25099] 9pnet_virtio: no channels available for device õ [ 766.770301][T25117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25117 comm=syz.8.6169 [ 766.855450][T25119] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6170'. [ 766.899850][T25122] loop3: detected capacity change from 0 to 512 [ 766.924106][T25122] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 766.930567][T25119] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6170'. [ 766.954143][T25122] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 766.963118][T25119] veth3: entered promiscuous mode [ 766.980443][T25119] veth3: entered allmulticast mode [ 766.986783][T25122] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.6168: bad orphan inode 4 [ 767.004545][T25122] loop3: lost filesystem error report for type 5 error -117 [ 767.004741][T25122] EXT4-fs (loop3): 1 orphan inode deleted [ 767.012087][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 767.012104][ C1] EXT4-fs (loop3): initial error at time 2000000399: ext4_orphan_get:1423 [ 767.012124][ C1] EXT4-fs (loop3): last error at time 2000000399: ext4_orphan_get:1423 [ 767.105363][T25122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.157249][T25138] FAULT_INJECTION: forcing a failure. [ 767.157249][T25138] name failslab, interval 1, probability 0, space 0, times 0 [ 767.179080][T25138] CPU: 1 UID: 0 PID: 25138 Comm: syz.8.6172 Tainted: G W syzkaller #0 PREEMPT(full) [ 767.179117][T25138] Tainted: [W]=WARN [ 767.179124][T25138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 767.179278][T25138] Call Trace: [ 767.179285][T25138] [ 767.179293][T25138] __dump_stack+0x1d/0x30 [ 767.179319][T25138] dump_stack_lvl+0x95/0xd0 [ 767.179342][T25138] dump_stack+0x15/0x1b [ 767.179369][T25138] should_fail_ex+0x263/0x280 [ 767.179437][T25138] should_failslab+0x8c/0xb0 [ 767.179456][T25138] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 767.179513][T25138] ? __alloc_skb+0x2d6/0x690 [ 767.179538][T25138] __alloc_skb+0x2d6/0x690 [ 767.179558][T25138] ? __alloc_skb+0x200/0x690 [ 767.179600][T25138] netlink_alloc_large_skb+0xbf/0xf0 [ 767.179688][T25138] netlink_sendmsg+0x40c/0x6f0 [ 767.179757][T25138] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.179791][T25138] ____sys_sendmsg+0x563/0x5b0 [ 767.179829][T25138] ___sys_sendmsg+0x195/0x1e0 [ 767.179931][T25138] __x64_sys_sendmsg+0xd4/0x160 [ 767.179965][T25138] x64_sys_call+0x194c/0x3020 [ 767.180082][T25138] do_syscall_64+0x12c/0x3b0 [ 767.180111][T25138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.180135][T25138] RIP: 0033:0x7fd3379ac819 [ 767.180150][T25138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.180167][T25138] RSP: 002b:00007fd3363ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.180268][T25138] RAX: ffffffffffffffda RBX: 00007fd337c25fa0 RCX: 00007fd3379ac819 [ 767.180284][T25138] RDX: 0000000000004080 RSI: 0000200000000380 RDI: 0000000000000004 [ 767.180299][T25138] RBP: 00007fd3363ff090 R08: 0000000000000000 R09: 0000000000000000 [ 767.180312][T25138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.180324][T25138] R13: 00007fd337c26038 R14: 00007fd337c25fa0 R15: 00007fff38991ff8 [ 767.180341][T25138] [ 767.418373][T25149] netlink: 'syz.5.6174': attribute type 8 has an invalid length. [ 767.427162][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6174'. [ 767.659990][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6175'. [ 767.769064][T25149] erspan0: entered promiscuous mode [ 767.819896][T25149] gretap0: entered promiscuous mode [ 767.864313][T25149] hsr1: entered promiscuous mode [ 767.905726][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.985297][T25175] loop5: detected capacity change from 0 to 512 [ 767.991142][T25170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6179'. [ 768.021650][T25175] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.6180: inode has both inline data and extents flags [ 768.040229][T25175] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 768.042023][T25175] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.6180: couldn't read orphan inode 15 (err -117) [ 768.051291][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 768.051311][ C1] EXT4-fs (loop5): initial error at time 2000000400: ext4_orphan_get:1397: inode 15 [ 768.051336][ C1] EXT4-fs (loop5): last error at time 2000000400: ext4_orphan_get:1397: inode 15 [ 768.133746][T25175] loop5: lost filesystem error report for type 5 error -117 [ 768.135029][T25175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.249567][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 768.249583][ T28] audit: type=1400 audit(2000000401.149:5150): avc: denied { rename } for pid=25172 comm="syz.5.6180" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 768.282663][T25192] loop3: detected capacity change from 0 to 512 [ 768.291118][T24351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.330672][T25192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.359296][T25199] netlink: 'syz.5.6188': attribute type 10 has an invalid length. [ 768.394857][T25199] netlink: 'syz.5.6188': attribute type 2 has an invalid length. [ 768.404998][T25192] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.450267][T25192] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.6187: corrupted xattr block 33: invalid checksum [ 768.504521][T25192] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 768.530181][T25192] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.6187: corrupted xattr block 33: invalid checksum [ 768.623796][T25192] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop3 ino=15 [ 768.656014][T25192] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2972: inode #15: comm syz.3.6187: corrupted xattr block 33: invalid checksum [ 768.712892][T25192] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 768.926632][T25192] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -74) [ 768.950836][T25213] loop5: detected capacity change from 0 to 164 [ 769.202444][T25192] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.474721][T25219] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 769.524565][T25220] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6192'. [ 769.558965][T25220] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.586219][T25220] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.609114][T25219] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6192'. [ 769.636395][T25220] bond0 (unregistering): Released all slaves [ 770.212641][T25224] loop3: detected capacity change from 0 to 512 [ 770.230792][T25224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.244129][T25224] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.609371][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.687581][T25224] bond2: entered allmulticast mode [ 771.040275][T25254] loop9: detected capacity change from 0 to 512 [ 771.050070][T25259] SELinux: failed to load policy [ 771.066649][T25254] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 771.105238][T25261] 9pnet_virtio: no channels available for device õl802154 [ 771.123927][T25254] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 771.147023][T25263] loop5: detected capacity change from 0 to 1024 [ 771.157086][T25254] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 771.173088][T25263] EXT4-fs: Ignoring removed bh option [ 771.193685][T25254] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 771.211273][ T28] audit: type=1400 audit(2000000404.111:5151): avc: denied { validate_trans } for pid=25265 comm="syz.4.6203" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 771.242025][T25263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.256477][T25254] System zones: 0-2, 18-18, 34-35 [ 771.270637][T25254] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 771.357035][ T28] audit: type=1400 audit(2000000404.261:5152): avc: denied { rename } for pid=25262 comm="syz.5.6202" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 771.501249][T24351] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.843934][T21436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.867391][T23065] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.116861][T25279] sctp: [Deprecated]: syz.8.6208 (pid 25279) Use of struct sctp_assoc_value in delayed_ack socket option. [ 772.116861][T25279] Use struct sctp_sack_info instead [ 772.469179][T25298] loop5: detected capacity change from 0 to 8192 [ 773.295433][T25318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6214'. [ 773.325545][T25320] FAULT_INJECTION: forcing a failure. [ 773.325545][T25320] name failslab, interval 1, probability 0, space 0, times 0 [ 773.346345][T25324] SELinux: failed to load policy [ 773.367810][T25320] CPU: 1 UID: 0 PID: 25320 Comm: syz.9.6215 Tainted: G W syzkaller #0 PREEMPT(full) [ 773.367848][T25320] Tainted: [W]=WARN [ 773.367856][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.367920][T25320] Call Trace: [ 773.367927][T25320] [ 773.367935][T25320] __dump_stack+0x1d/0x30 [ 773.367965][T25320] dump_stack_lvl+0x95/0xd0 [ 773.368058][T25320] dump_stack+0x15/0x1b [ 773.368085][T25320] should_fail_ex+0x263/0x280 [ 773.368121][T25320] should_failslab+0x8c/0xb0 [ 773.368142][T25320] kmem_cache_alloc_noprof+0x66/0x3f0 [ 773.368162][T25320] ? skb_clone+0x151/0x1f0 [ 773.368264][T25320] skb_clone+0x151/0x1f0 [ 773.368337][T25320] __netlink_deliver_tap+0x2c9/0x500 [ 773.368469][T25320] netlink_unicast+0x653/0x680 [ 773.368502][T25320] netlink_sendmsg+0x5c8/0x6f0 [ 773.368553][T25320] ? __pfx_netlink_sendmsg+0x10/0x10 [ 773.368583][T25320] ____sys_sendmsg+0x563/0x5b0 [ 773.368653][T25320] ___sys_sendmsg+0x195/0x1e0 [ 773.368685][T25320] __x64_sys_sendmsg+0xd4/0x160 [ 773.368758][T25320] x64_sys_call+0x194c/0x3020 [ 773.368852][T25320] do_syscall_64+0x12c/0x3b0 [ 773.368876][T25320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.368899][T25320] RIP: 0033:0x7f65926dc819 [ 773.368916][T25320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.368932][T25320] RSP: 002b:00007f659112f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.368994][T25320] RAX: ffffffffffffffda RBX: 00007f6592955fa0 RCX: 00007f65926dc819 [ 773.369014][T25320] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 773.369062][T25320] RBP: 00007f659112f090 R08: 0000000000000000 R09: 0000000000000000 [ 773.369074][T25320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.369091][T25320] R13: 00007f6592956038 R14: 00007f6592955fa0 R15: 00007ffe1cc233d8 [ 773.369109][T25320] [ 773.373317][T25320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 773.578931][T25320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 773.599290][T25335] syzkaller0: entered promiscuous mode [ 773.617865][T25335] syzkaller0: entered allmulticast mode [ 773.626897][T25335] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6219'. [ 773.654113][T25335] xt_CT: No such helper "pptp" [ 773.780878][ T28] audit: type=1326 audit(2000000406.692:5153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25356 comm="syz.8.6224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3379ac819 code=0x0 [ 773.810257][T25360] FAULT_INJECTION: forcing a failure. [ 773.810257][T25360] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 773.833110][T25360] CPU: 1 UID: 0 PID: 25360 Comm: syz.4.6225 Tainted: G W syzkaller #0 PREEMPT(full) [ 773.833147][T25360] Tainted: [W]=WARN [ 773.833155][T25360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.833202][T25360] Call Trace: [ 773.833210][T25360] [ 773.833218][T25360] __dump_stack+0x1d/0x30 [ 773.833319][T25360] dump_stack_lvl+0x95/0xd0 [ 773.833341][T25360] dump_stack+0x15/0x1b [ 773.833363][T25360] should_fail_ex+0x263/0x280 [ 773.833426][T25360] should_fail+0xb/0x20 [ 773.833457][T25360] should_fail_usercopy+0x1a/0x20 [ 773.833475][T25360] _copy_from_user+0x1c/0xb0 [ 773.833493][T25360] __sys_sendto+0x1ca/0x490 [ 773.833524][T25360] __x64_sys_sendto+0x76/0x90 [ 773.833672][T25360] x64_sys_call+0x2d35/0x3020 [ 773.833702][T25360] do_syscall_64+0x12c/0x3b0 [ 773.833725][T25360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.833783][T25360] RIP: 0033:0x7f185164d04e [ 773.833797][T25360] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 773.833814][T25360] RSP: 002b:00007f18500dde88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 773.833893][T25360] RAX: ffffffffffffffda RBX: 00007f18500df6c0 RCX: 00007f185164d04e [ 773.833907][T25360] RDX: 0000000000000024 RSI: 00007f18500de000 RDI: 0000000000000004 [ 773.833919][T25360] RBP: 0000000000000000 R08: 00007f18500ddf04 R09: 000000000000000c [ 773.833998][T25360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 773.834002][ T28] audit: type=1400 audit(2000000406.742:5154): avc: denied { create } for pid=25356 comm="syz.8.6224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 773.834011][T25360] R13: 00007f18500ddf58 R14: 00007f18500de000 R15: 0000000000000000 [ 773.834082][ T28] ================================================================== [ 773.834094][T25360] [ 773.984761][ T28] BUG: KCSAN: data-race in data_alloc / data_push_tail [ 773.984787][ T28] [ 773.984793][ T28] write to 0xffffffff895aa298 of 8 bytes by task 25360 on cpu 1: [ 773.984808][ T28] data_alloc+0x259/0x390 [ 773.984826][ T28] prb_reserve+0x8d6/0xad0 [ 773.984843][ T28] vprintk_store+0x54a/0x910 [ 773.984862][ T28] vprintk_emit+0x1a4/0x600 [ 773.984882][ T28] vprintk_default+0x26/0x30 [ 773.984902][ T28] vprintk+0x1d/0x30 [ 773.984925][ T28] _printk+0x79/0xa0 [ 773.984943][ T28] __show_regs+0xf0/0x430 [ 773.984966][ T28] __show_trace_log_lvl+0x38f/0x560 [ 773.984992][ T28] __dump_stack+0x1d/0x30 [ 773.985012][ T28] dump_stack_lvl+0x95/0xd0 [ 773.985032][ T28] dump_stack+0x15/0x1b [ 773.985052][ T28] should_fail_ex+0x263/0x280 [ 773.985078][ T28] should_fail+0xb/0x20 [ 773.985100][ T28] should_fail_usercopy+0x1a/0x20 [ 773.985117][ T28] _copy_from_user+0x1c/0xb0 [ 773.985133][ T28] __sys_sendto+0x1ca/0x490 [ 773.985154][ T28] __x64_sys_sendto+0x76/0x90 [ 773.985174][ T28] x64_sys_call+0x2d35/0x3020 [ 773.985197][ T28] do_syscall_64+0x12c/0x3b0 [ 773.985217][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.985236][ T28] [ 773.985242][ T28] read to 0xffffffff895aa298 of 8 bytes by task 28 on cpu 0: [ 773.985256][ T28] data_push_tail+0x100/0x470 [ 773.985275][ T28] data_alloc+0x11b/0x390 [ 773.985291][ T28] prb_reserve+0x8d6/0xad0 [ 773.985308][ T28] vprintk_store+0x54a/0x910 [ 773.985327][ T28] vprintk_emit+0x1a4/0x600 [ 773.985346][ T28] vprintk_default+0x26/0x30 [ 773.985366][ T28] vprintk+0x1d/0x30 [ 773.985389][ T28] _printk+0x79/0xa0 [ 773.985410][ T28] kauditd_hold_skb+0x1b1/0x1c0 [ 773.985437][ T28] kauditd_send_queue+0x273/0x2c0 [ 773.985462][ T28] kauditd_thread+0x444/0x670 [ 773.985485][ T28] kthread+0x22a/0x280 [ 773.985504][ T28] ret_from_fork+0x146/0x330 [ 773.985520][ T28] ret_from_fork_asm+0x1a/0x30 [ 773.985542][ T28] [ 773.985547][ T28] value changed: 0x000000000000155e -> 0x00000000000022be [ 773.985558][ T28] [ 773.985562][ T28] Reported by Kernel Concurrency Sanitizer on: [ 773.985576][ T28] CPU: 0 UID: 0 PID: 28 Comm: kauditd Tainted: G W syzkaller #0 PREEMPT(full) [ 773.985602][ T28] Tainted: [W]=WARN [ 773.985610][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 773.985621][ T28] ================================================================== [ 774.081788][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6227'. [ 774.085778][T25370] SELinux: failed to load policy [ 774.398329][T25372] loop3: detected capacity change from 0 to 1024 [ 774.409300][T25372] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 774.420271][T25372] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 774.430071][T25372] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: comm syz.3.6229: inode #1: comm syz.3.6229: iget: illegal inode # [ 774.443234][T25372] loop3: lost filesystem error report for type 5 error -117 [ 774.443872][T25372] EXT4-fs (loop3): no journal found [ 774.451178][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 774.451192][ C0] EXT4-fs (loop3): initial error at time 2000000407: ext4_get_journal_inode:5896 [ 774.451213][ C0] EXT4-fs (loop3): last error at time 2000000407: ext4_get_journal_inode:5896 [ 774.480856][T25372] EXT4-fs (loop3): can't get journal size [ 774.489651][T25372] EXT4-fs (loop3): failed to initialize system zone (-22) [ 774.496802][T25372] EXT4-fs (loop3): mount failed