last executing test programs: 4m2.99095061s ago: executing program 4 (id=330): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m2.789727132s ago: executing program 4 (id=335): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="18110000000000000000000000000000851000000800010095000000000000028574ce71283a59f36300000000000000bbdf6599a76f988a510e19f351f54de4e939243a62de7e5ce3fc1073c8ddfced45f36829143a83d83a51dfcddcb19eb9b847704b6338f158ddf3cffa125dcf1258a5cec870b2edfeb410bc3d6ffce24bcd5c"], &(0x7f0000000fc0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xa}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000002200000101ac1414bb00000000000a0000006400000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac14143500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000002abd700028bd7000000000004c001400636d61632861657329"], 0x1a0}}, 0x0) 4m2.060894525s ago: executing program 4 (id=348): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000007104c3000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x2c, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 4m2.060270004s ago: executing program 4 (id=349): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000d80)=""/197) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000272000/0x1000)=nil, 0x1000, &(0x7f0000000380)='\x00') r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x1c161, 0x2, 0x0, 0x6, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x820000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_GET_FS(0x1e, r2, &(0x7f0000000200), 0x1003) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xf, 0xc7, 0x44, 0x6, 0x0, 0x6, 0x204, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x3}, 0x109204, 0x2, 0xead, 0x2, 0x4, 0x98, 0x0, 0x0, 0xffffffff, 0x0, 0x6}, r2, 0x7, r0, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r4, &(0x7f0000000440)={0x23, 0xc8, 0x7}, 0x10) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$phonet(r3, &(0x7f0000000000)={0x23, 0x4}, 0x10) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r5, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x8, 0x10000, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x68, 0x0, 0x3, 0x2, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0x13, 0x4e, [@private=0xa010102, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}]}, @lsrr={0x83, 0x23, 0xd5, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102, @local, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0002a48b7000fcdadf251300f0002c36f0146e1a521bfbdf83db3e00050000000300020000", @ANYRES32=r8, @ANYBLOB="080003000000000008000300020000000800030001000000"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x8844) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) 4m1.178000356s ago: executing program 4 (id=362): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000001010800044000000001480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c00008008000340000000"], 0x100}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m0.802747158s ago: executing program 4 (id=367): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x5, 0x0, 0x0, 0x0, 0x101, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x8, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)={0x24, r5, 0x13, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48404) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r3, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x160, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff502e}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb199}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x29}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xd70f15c3b92d68a7}, 0x4004080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) unshare(0x62040200) write$binfmt_script(r2, &(0x7f00000003c0), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) epoll_create1(0x0) 4m0.783678779s ago: executing program 32 (id=367): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = epoll_create1(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfb, 0x5, 0x0, 0x0, 0x0, 0x101, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x0, 0x7, 0x0, 0x1, 0x8, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)={0x24, r5, 0x13, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x48404) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(r3, &(0x7f00000012c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_EMATCHES={0x48, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x23, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="043f51"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3', @TCF_META_TYPE_VAR]}]}}]}]}]}}]}, 0x7c}}, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x160, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffbff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff502e}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb199}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x39}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x29}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x160}, 0x1, 0x0, 0x0, 0xd70f15c3b92d68a7}, 0x4004080) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) unshare(0x62040200) write$binfmt_script(r2, &(0x7f00000003c0), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bb", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) epoll_create1(0x0) 2m13.011557806s ago: executing program 3 (id=3373): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000a500000095000000003200"/30], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x10, 0x8}, 0x94) sendto$inet6(r0, &(0x7f0000000380)="bd681e1ee351817551983379ca068f9d8fe7", 0x12, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0x87, @remote, 0x3}, 0x1c) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = getegid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000280)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$LOOP_CONFIGURE(r4, 0xc0c0128e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 2m12.732654642s ago: executing program 3 (id=3378): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6d276b17) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='!\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10010, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 2m12.611363679s ago: executing program 3 (id=3380): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @val={@void, {0x8100, 0x0, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x40, 0x68, 0xe000, 0x1, 0x2f, 0x0, @private=0xa010101, @empty, {[@generic={0x83, 0xf, "57ad0a49883bbaf451b2458852"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6}]}}, {0xa001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x9, 0x0, @val=0x80}}}}}}}}, 0x52) 2m12.471671818s ago: executing program 3 (id=3384): socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c40)='comm\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="c1", 0x1}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) fcntl$setown(r2, 0x8, r3) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x6, &(0x7f0000ffc000/0x2000)=nil) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf84b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, 0x0, 0x4804) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x54, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0x4000000}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "fcda"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f2b6d056d00"], 0xc) write$vga_arbiter(r10, &(0x7f00000001c0)=@other={'unlock', ' ', 'none'}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fcntl$getownex(r10, 0x10, &(0x7f00000004c0)) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x70, 0x0) 2m12.234641771s ago: executing program 3 (id=3387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc4c4) 2m12.002566035s ago: executing program 3 (id=3389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 2m11.969435627s ago: executing program 33 (id=3389): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x48}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 2m4.766389799s ago: executing program 0 (id=3481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc4c4) 2m4.738296171s ago: executing program 0 (id=3482): syz_read_part_table(0x5e1, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0x43, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) pwrite64(r0, &(0x7f0000000140), 0x0, 0xfecc) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) 2m4.534953913s ago: executing program 0 (id=3489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc4c4) 2m4.468863727s ago: executing program 0 (id=3490): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000a500000095000000003200"/30], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendto$inet6(r0, &(0x7f0000000380)="bd681e1ee351817551983379ca068f9d8fe7", 0x12, 0x0, &(0x7f00000003c0)={0xa, 0x4e23, 0x87, @remote, 0x3}, 0x1c) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = getegid() syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000280)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@resgid={'resgid', 0x3d, r3}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x2, 0x4a3, &(0x7f00000004c0)="$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") r4 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$LOOP_CONFIGURE(r4, 0xc0c0128e, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) 2m4.319113366s ago: executing program 0 (id=3491): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x700) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40002}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6gre0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2m4.046792122s ago: executing program 0 (id=3495): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x109002, 0x90) fchown(r0, 0x0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x26, 0x0, 0x100000}, 0x28) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ebffffffffffb3c73c221a00"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000400), 0x0}, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xfff1, 0x10}, {0x10, 0x2}}}, 0x24}}, 0x8040) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x4880) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000020010000300012800b000100697036746e6c0000200002"], 0x50}}, 0x20004010) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x20, 0x13f04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xd}, 0x11aea7, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000010000000000000"], 0x50) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r11, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r10, &(0x7f0000000040)={0x11, 0x4, r11}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[], 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) setresgid(r12, 0xffffffffffffffff, 0x0) 2m4.046447792s ago: executing program 34 (id=3495): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x109002, 0x90) fchown(r0, 0x0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2100, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x26, 0x0, 0x100000}, 0x28) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000ebffffffffffb3c73c221a00"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r2, &(0x7f0000000400), 0x0}, 0x20) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0xfff1, 0x10}, {0x10, 0x2}}}, 0x24}}, 0x8040) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r3], 0x3c}}, 0x4880) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r5, @ANYBLOB="0000000020010000300012800b000100697036746e6c0000200002"], 0x50}}, 0x20004010) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x8, 0x1) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x1, 0x0, 0x20, 0x13f04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xd}, 0x11aea7, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r6, 0x2402, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000c0000004300000040000000c0000000", @ANYRES32=0x1, @ANYBLOB='W\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000010000000000000"], 0x50) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000001c0)=0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r7}, 0x38) r8 = socket(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r11, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) bind$packet(r10, &(0x7f0000000040)={0x11, 0x4, r11}, 0x14) syz_emit_ethernet(0x12, &(0x7f0000000100)=ANY=[], 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) setresgid(r12, 0xffffffffffffffff, 0x0) 1m45.609929263s ago: executing program 5 (id=3887): syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x40082) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/40, 0x28}], 0x1) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) fchdir(0xffffffffffffffff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r0, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, 0x0, 0x0, 0x5, 0x0, 0x6}]) 1m45.1569547s ago: executing program 5 (id=3894): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x1000000, &(0x7f0000001000/0x4000)=nil) 1m45.076129775s ago: executing program 5 (id=3897): syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, 0x0, 0x0) 1m45.075260605s ago: executing program 5 (id=3898): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x44851}, 0x0) r3 = socket(0x2, 0x80805, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)=ANY=[@ANYBLOB='dmask=00000000000000000002001,flush,uid=', @ANYRESHEX=0x0, @ANYBLOB="0004074443", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,check=relaxed,nodots,sys_immutable,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f00005f5000/0x2000)=nil, 0x2000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) wait4(r5, 0x0, 0x20000000, &(0x7f0000000580)) fadvise64(r4, 0x2, 0x0, 0x4) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=gnix,\x00']) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040)=0x5, 0x4) 1m44.882134197s ago: executing program 5 (id=3902): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000fef000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file1\x00', 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000002e00)={0x4}) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000900ea11c21d0005000000", 0x29}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x468, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x43c, 0x2, [@TCA_FW_ACT={0x438, 0x4, [@m_police={0x434, 0x3, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x111, 0xff, 0x9, 0x6a, 0x856, 0x1, 0x6, 0x6, 0x8e84, 0x5, 0x9, 0x80, 0x157, 0xfff, 0x72, 0x6, 0x4, 0x4, 0x9, 0x7, 0xbca2, 0x9, 0x7fff, 0x1, 0x6, 0x80000000, 0x10000, 0x2, 0xfffffff8, 0x0, 0x8, 0x7, 0x9, 0x55, 0x3, 0x4, 0x8, 0x5, 0x7, 0x9, 0x5, 0x761b, 0x3, 0x1, 0x5, 0x3, 0x2, 0xfffff47b, 0x2, 0x9, 0xb, 0x10, 0x5, 0x2, 0x7, 0xe82, 0x9a7, 0x1, 0xe, 0x80, 0x40, 0x5185, 0x7, 0x0, 0x8, 0x6, 0x3, 0x1b, 0x7, 0x4, 0x80, 0x6, 0x6, 0x67, 0xd, 0xcc, 0x4, 0x81, 0x4, 0x3, 0xf, 0x7ff, 0x2, 0x4c, 0x8, 0x2, 0x3, 0x5, 0x29, 0x8, 0x8, 0x4, 0xd, 0x3, 0x450, 0x9, 0x6, 0xfffffff6, 0x3, 0x1, 0xa46, 0xffff7738, 0x30000000, 0xbd35, 0x2ba9, 0x7f, 0x80000000, 0x4f, 0x8, 0xfffffff8, 0x9, 0x2, 0x80000000, 0x6, 0x1, 0x1, 0x0, 0x70000000, 0x3, 0x6, 0x84, 0x1ff, 0x8, 0xf3a, 0x400, 0x6eb, 0x1, 0x2, 0x7, 0xc, 0x4, 0x82a7, 0x3, 0x2, 0x8, 0x9, 0x0, 0x3, 0x9, 0x1, 0x3ff, 0x4, 0x0, 0x7, 0x9, 0x6, 0xaf, 0x3, 0x6, 0x4c5, 0x6, 0x3ff, 0xf, 0xb89, 0x0, 0x7, 0x10, 0x9, 0x914, 0x1, 0xfff, 0x5f, 0x30a7, 0x8, 0xb, 0x9, 0x0, 0x4, 0xffffffff, 0x1ff, 0x5, 0xfffffbff, 0xff, 0x800, 0x5, 0x80, 0x1, 0x1, 0x2, 0x4, 0x9, 0x4, 0x3, 0x3, 0xfffffffc, 0x0, 0x6, 0xe, 0xda8, 0xfffffffe, 0x6, 0x5, 0x2, 0x1, 0xfffffff8, 0x9, 0x3ff, 0x3, 0x6, 0xdd3, 0xfffffffc, 0x9, 0x0, 0xe7c, 0x6, 0xfff, 0x88, 0x3, 0x9, 0x1, 0x63, 0x0, 0xa9c, 0x8, 0x7, 0x1, 0x1000, 0x5, 0x7, 0x1000, 0x8, 0xb, 0x401, 0x7, 0x3, 0x101, 0x6, 0x4, 0x9, 0x5, 0x80000000, 0x7, 0xe6, 0x3, 0x6, 0x6, 0x63f1908b, 0x6, 0x5, 0x0, 0x1ff, 0x5, 0xf8bf, 0x9, 0x80000001, 0xfffffffe, 0x3, 0x5, 0x72, 0xa, 0x4, 0xfffffff7, 0x8, 0x5, 0x7e5, 0x8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x468}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2ab, &(0x7f0000000a80)="$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") mount$nfs(&(0x7f0000000100)='+\x80.', 0x0, 0x0, 0x136808, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) io_uring_enter(r3, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1m44.515188988s ago: executing program 5 (id=3908): prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000300)={0x42, 0x80}, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) (async) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x0, @tick=0x7, 0x0, {}, 0x0, 0x2}) 1m44.511002908s ago: executing program 35 (id=3908): prlimit64(0xffffffffffffffff, 0xc, &(0x7f0000000300)={0x42, 0x80}, 0x0) (async) timer_create(0x3, 0x0, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) (async) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}]) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x0, @tick=0x7, 0x0, {}, 0x0, 0x2}) 1.031886439s ago: executing program 7 (id=5434): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000180)=@framed={{0x5d, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10000, 0xb0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='\x88\x04\x02\x86\x904\x8a\xd9F\xb9\x05\x16c*\xcd\xf2\xcc;L\'s4\xc2\x89\xad\xb0\xab\x9e\xb8g\x99\xdbI\xf0K\xb9\xfe\x04\xe1\v\x9b0\x95\xf3;\'\x18\xec\xe2\xe2\x91{\x06\xf0\x0e\x00\x05B+\x7f\xe7\x99(7\xe5\xbc\xc2$\x1b\xac\xcc\xe4\\t_&h\xcc\t\xdd\xcc\xde\xcc\xbd8\x8b\x13\x1eF\x17l\xd7U\xeaC3\x13\xb6\x88\x9b\xeeIA\b#wr>\x12\x84\x99\x9c\xee\xd4\xff\xac\x88\xbc2\x97\xf3\x05\xb7x', &(0x7f0000000080)='./file0\x00', r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000006c0), 0x10000, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}]}}) fsmount(r0, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 961.997754ms ago: executing program 7 (id=5435): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r0, 0x4, 0x2, 0x0, 0x0) (fail_nth: 1) 961.773773ms ago: executing program 7 (id=5436): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r0, 0x4, 0x2, 0x0, 0x0) 961.497884ms ago: executing program 7 (id=5437): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b062dbd7000004000003000000005003500fe00000005003400400000000a0001007770616e300000000500330003000000050036"], 0x40}, 0x1, 0x8000000, 0x0, 0x20040095}, 0x0) r3 = gettid() r4 = msgget$private(0x0, 0x1ba) msgrcv(r4, 0x0, 0x0, 0x1, 0x1000) msgctl$IPC_RMID(r4, 0x1000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/locks\x00', 0x0, 0x0) syz_emit_ethernet(0xea, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00b42b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) ioctl(r0, 0x101, &(0x7f0000000000)="421d508e00f6a6cafa3eb472710d61d7f7d8f4b4a88eb931b4") r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000140)=@ethtool_rxfh={0x46, 0x5, 0x6, 0xff, 0x4, "d34e11", 0x7d, [0x81, 0x9, 0x1]}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={r7}, 0x8) 708.733088ms ago: executing program 1 (id=5441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, 0x0, 0xc4c4) 680.91177ms ago: executing program 1 (id=5442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc4c4) 676.7288ms ago: executing program 8 (id=5443): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x78, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb3", 0x5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x2}}, 0x40) 641.752332ms ago: executing program 1 (id=5444): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) 575.083826ms ago: executing program 8 (id=5446): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x60, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000000103"], 0x20}}, 0x0) 574.707736ms ago: executing program 1 (id=5447): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f00000002c0)=""/183) 574.348906ms ago: executing program 8 (id=5448): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b79990565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd072bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675458cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4978d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddd432bd24c73fa773b739e20fcec16a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b4915582b635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d387f5d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e4262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f00000004c0)="e673ae1b2bd3", 0x6}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file3\x00', 0x165840, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) clock_getres(0x373443a6e28b5628, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x7, 0x3, 0x8, 0x6, 0x2, 0x2, 0x80, 0x8, 0x7, 0x15, 0x1d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 532.314169ms ago: executing program 6 (id=5450): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x81, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYBLOB="fd5a30494a98e2fd594c7f5575b44a6b9875a6deb8a9ed63e149fdc3a5e345922596d46c4a463978044b864f940e1137ce034002852c9ef5606de83cf95a02ef4bacef1195250b8a73609da88d66c4224c3ea46f117012f2aab4bca171e710172b4c22e4d51e27fc9eeb304bb3e260a261", @ANYRES32=0x0], 0x1, 0x1282, &(0x7f00000009c0)="$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") creat(0x0, 0x0) socket$inet(0x2, 0x1, 0x1) io_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x6, 0x10000, 0x0, 0x6, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xb2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x20, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 504.2844ms ago: executing program 8 (id=5451): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000019a030007"], 0x63) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x800) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fecff544600fe9519de70003"], 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) 439.011584ms ago: executing program 1 (id=5452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, 0x0, 0xc4c4) 438.279454ms ago: executing program 6 (id=5453): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000700)='./file0\x00', 0x1200414, &(0x7f00000001c0)=ANY=[@ANYBLOB='showassoc,uid=', @ANYRESHEX=0xee01, @ANYBLOB="3ff101b90af1ea6ee5dd2dea1d3b9e646b22499cb74e6df87dac13bcc653d5a9cfd50818d8549cab11d9a6b3bcb85e7b837c9fdb195a65b00f1966be9c08f6e773275d86a988160025e8551076e8d5dfa269355bda7a273e31eba284972f7f95c3511dbc91ab70d98f78bf092cff6a1242c2d1b252a6b304bed859238a88e8f7fbe9e833f0e1b505c6b588f3ec0004af7fa206411290f2b28ea9b6a330b39db1354dff3bf3a5451105000000000000", @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,overriderockperm,\x00'], 0x5, 0x56b, &(0x7f0000000a80)="$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") 437.897094ms ago: executing program 8 (id=5454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc4c4) 432.816804ms ago: executing program 1 (id=5455): r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'macvlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmsg$can_bcm(r0, &(0x7f00000004c0)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/214, 0xd6}], 0x2, &(0x7f0000000580)=""/185, 0xb9}, 0x10002) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000900)={0xa, 0x2, 0xe04, @rand_addr=' \x01\x00', 0x6}, 0x9) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendto$inet6(r1, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902"], &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) shutdown(r1, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067f", 0x13}], 0x1) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e00)=@newtfilter={0x40, 0x11, 0xd27, 0x0, 0x3, {0x0, 0x0, 0x74, r5, {0xa}, {}, {0x6, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x40}, 0x1, 0xf0ffffffffffff, 0x0, 0x40041}, 0x4000000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x8}, 0x100010, 0x32, 0x43a1bd76, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) mount$9p_rdma(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', &(0x7f0000000700), 0xc0402, &(0x7f0000000a00)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x2}}, {@rq}], [{@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x0, 0x4b, 0x39, 0x34, 0x62, 0x66, 0x62], 0x2d, [0x30, 0x31, 0x64, 0x37], 0x2d, [0x63, 0x33, 0x63, 0x36], 0x2d, [0x32, 0x34, 0x63, 0x52], 0x2d, [0x0, 0x31, 0x65, 0x66, 0x64, 0x66, 0x66, 0x39]}}}, {@smackfshat={'smackfshat', 0x3d, '*'}}, {@obj_user={'obj_user', 0x3d, '#\xf1\x9b`:_&}\xe7\xc7f\x8c5\xeby\x02\\99\x15-D\xed*\xafN3\x9f'}}, {@euid_eq={'euid', 0x3d, r6}}]}}) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) 391.081227ms ago: executing program 8 (id=5456): mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x14, 0x2, @thr={0x0, 0x0}}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c01000021000900000000000000000000000000000000000000ffffe0000001fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="faef520b097600000c0111"], 0x15c}}, 0x20008080) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000000200)="000bda", 0x3) sendfile(r3, r0, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = fcntl$getown(0xffffffffffffffff, 0x9) prlimit64(r4, 0x2, &(0x7f0000000040), &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x49}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 379.080058ms ago: executing program 6 (id=5457): r0 = socket(0xf, 0x800, 0xff) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e23, 0x53, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f}, 0x1c) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x100003) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_UNISCRNMAP(r2, 0x4b52, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000040)) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9faf6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02", 0x3}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000d112dbd70000000002000000000", @ANYRES32=0x0, @ANYBLOB="04050500000000001c00128009000100626f6e64000000000c000280050001000500000008000a00", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000700)='./file0\x00', 0x1200414, &(0x7f00000001c0)=ANY=[@ANYBLOB='showassoc,uid=', @ANYRESHEX=0xee01, @ANYBLOB="3ff101b90af1ea6ee5dd2dea1d3b9e646b22499cb74e6df87dac13bcc653d5a9cfd50818d8549cab11d9a6b3bcb85e7b837c9fdb195a65b00f1966be9c08f6e773275d86a988160025e8551076e8d5dfa269355bda7a273e31eba284972f7f95c3511dbc91ab70d98f78bf092cff6a1242c2d1b252a6b304bed859238a88e8f7fbe9e833f0e1b505c6b588f3ec0004af7fa206411290f2b28ea9b6a330b39db1354dff3bf3a5451105000000000000", @ANYRESHEX=0x0, @ANYBLOB=',check=relaxed,overriderockperm,\x00'], 0x5, 0x56b, &(0x7f0000000a80)="$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") 221.811307ms ago: executing program 6 (id=5458): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) 200.090098ms ago: executing program 6 (id=5459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)={0x8c, 0x31, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@typed={0x8, 0x67, 0x0, 0x0, @ipv4=@local}, @generic="ee34a6853f086ed1a98c9de045859d023222cb12b6c4a0db219db9dc1d8aa5725c29036d1e1c6b22345748d68db11d70dd1f62313c6a6ea100146a3fbb7fb4b7a7d2fece89bb2d1dbf472f656aa1baa20137581f5d01e550376f7e6737646376ada9f95275a85e7a76cd570dc8b8a9c6c83f"]}, 0x8c}, {&(0x7f0000000280)={0x298, 0x3e, 0x400, 0x70bd2b, 0x25dfdbfb, "", [@generic="734cafb5e053f0db1d39652e50e7fee0af7325478270acae42f7cffcd463517d4280fd0b3ef7303462f11d54a97f76a3fc358edca73e433017", @nested={0x147, 0xce, 0x0, 0x1, [@generic="97ba4281d1af555b7f86d2e5ac399c4bff82dc2366ae69292de1786d04667f47d4e5b6ecd8a1fadc122753d3421884fe89632a3c8d658907cd5ea14764ea7d1150a46f027c701ea00e8d118ee273961ac9fd40d62d4be1857eef1894dcf2b30db7b3540dd97bb697600deff43233eb2549ef185f982a6f9a8d47fe608b86df33ec223893d51e61e938a8de1a8ae81c6993ebaa5a619a798185f09e3faeee9b3ca5a8f05d7ac97d5515b6dd386ccd968683318f27fd634274bd5a23ba6674a81ec1a2f0fc1c82e9f27c5e1f5f6d79bbc3e480", @generic="1ad346e57a05a8236478e75dc4429aa6a2f1fb074faf55247d11e1fd8dd959735f1fcf437bba1c41ce118eb53f214cf868dc510c1696da2486e20886d49464606254ae5a8acf0978cb6c5707e74d2e1cc9476ea301962eeb8bad8dd822e6f007a8926772a07ffa1b8d848d2b5d", @nested={0x4, 0x5b}]}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="19add668ba5faa6e805c305b3b5380cc0213a8b35f12f63ce5bcc53387ddf6852b89d01e0a19a441138706ce5c306bd1cc67bd31d85084b44b5fa3ba650aba23700834ffd3f6a284f20fbbaad022f2857b35a17beaa79cb747f248a70dceabf1c3ed0edbb40b15728be3dfe88334ef4d260c92b6bf84214a9bbc2145beb12a424cb8eba3e4c87d4037f0ad079eda453e6a8cfa446c6b30fba5986da2bf40cc232abb351b68de55b4cf5f7b46110db8a0fc6fb78e56faad8a8062459005dad3e4a40df993b049538f0afef550fb3b18064adf1c2af12c98ebe682943a2982dec23b140445b128080b6fd60dd7c3cbc7be435b"]}, 0x298}], 0x2, 0x0, 0x0, 0x4005}, 0x4004010) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400f4ff", @ANYRES16=r1, @ANYBLOB="3183319d7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4054}, 0x20044040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xb, 0x1514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x80000000000003, 0x86a2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xf, 0x3, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0) 199.354618ms ago: executing program 2 (id=5460): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000020000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c7d376238975d43a4505f80fc88943c4f0cf08e467b592f868ee30a0e8c1bf176db2a6b2feb4b6fd3d5707bfd2d84aaa3b1d4e984c46ea7e2a447a36f5662403e1b2be4cc7c2683908a0d411a9872971c7c56f0979bd10b97163c1d6d0e196bf02f46e8953ab1abda45cbe8d0d26b5069f8a98f7dc8f76b74635fc9f9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000000000000b0c2940dd8e263aa743f7555193161f45346b1004006000000e1ffff8816326d7d35c32aac1c7d5b5be399f6609876b5887437a172fbc02a74067529194e533583412dff048f0000000000000000b2728a04816cfb851cd364ff19ffcafe3e64be033c9d2f002cc93c1c13caec04a347383420336bec88c24a9fb6a6991ddb737d527d6acb15426415b6e8b14fdfa2c6e94bd0339454c13ad30000000000000003626165866c154e2514890000b515a1000000000000000eb2e9c15b6c8f6198282d0086fa0000c2ccf3f6d69cfcf1e15ea7a9e57aee78e12ace55736fa42811654e19a7e9b531636794a718b4766d744263b6681da2b2204d848619a3eb62e77460c048df8e72bfe31438163ec4270439b350274e5aa941bfc32ce08e3790dfb0c59bbe45cd27264669c187eed6d67b3be191137814bcb226b2078a1bc45502705d538d8723113445b08b0ac8dc2dfa17fd79ed5fd33b14b0adabf72df024dcde1ef330b927ce1a80474ce4f99a292c71456ec1abbfbb61dc9f0f71395a1751d35fa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_TTL={0x5, 0x8, 0xe}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000100)=0x1) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0xfffffdfc}]) io_destroy(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r8, &(0x7f0000000180)='./bus\x00', 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000040)={'veth1_to_bridge', 0x32, 0x31}, 0x12) 131.037342ms ago: executing program 2 (id=5461): symlink(0x0, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073112100000000008510000002000000b7000000000000009500c200000000009500041200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x18, 0x9, 0x9, 0x1c, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, @sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0xb, 0x4, 0x4}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x6}, @in6={0xa, 0x4e22, 0xb, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x8, 0x7, 0x3, 0x2, 0x80000000}, @sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_address={0x5, 0x7, 0x16, 0x0, 0x0, @in6={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}]}, 0xe0}}, 0xc880) (rerun: 32) 128.148293ms ago: executing program 6 (id=5462): unshare(0x2c020400) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = semget$private(0x0, 0x6, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000200)=""/3) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$IPC_INFO(r0, 0x1, 0x3, &(0x7f0000000240)=""/225) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0x2, 0x4, 0x388, 0xffffffff, 0x1e8, 0x0, 0x1e8, 0xfeffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b667f10900000000000000e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) flock(0xffffffffffffffff, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0xc8, 0x8, 0x128, 0x5803, 0x218, 0x2e8, 0x2e8, 0x218, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'batadv0\x00', 'wlan0\x00'}, 0x0, 0x108, 0x128, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket1={{0x28}, 0x4c}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xa, 0x200, 0x7, 0x1}, 0x50) semtimedop(r0, &(0x7f0000000380)=[{0x2, 0xf, 0x1000}, {0x2, 0x3, 0x3000}, {0x0, 0xe4, 0x800}, {0x3, 0x91, 0x1800}, {0x4, 0x5, 0x1000}, {0x3, 0x1, 0x1000}, {0x4, 0x6, 0x1000}], 0x7, &(0x7f0000000780)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f0000000a40)='&', &(0x7f0000000040)=""/98}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/89}, 0x20) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000080)=0x53) 121.934383ms ago: executing program 2 (id=5463): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x2, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) 90.388765ms ago: executing program 2 (id=5464): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r2, 0x1, 0x170bd2c, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}]}, 0x3c}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x2, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_OIF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) 38.704168ms ago: executing program 7 (id=5465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2800000011148d8a29bd7000fcdbdf2508004b001300000008000100000000000800030003000000320a55da2c5d5ef4f68f619cb083a5673149bc83e46a4831621f9acdb0cc90561b"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, 0x0, 0xc4c4) 38.428898ms ago: executing program 2 (id=5466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000150a01020000000000000000000000000900010073797a3000000000a746e084542d961cbb9f90e9949eebb73d963523001932d177fb8917b6b42259c9e3e257cdefb57e6b70657c9c31cfd1a53aade72e17fbd86cb9f50d1f64fe798402813f49eb53d240600175ba3f69b101348f025b48191e73b2ccb20ad5408de2c2273154451b58"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x140d, 0x4, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x20}, 0x4b) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, 0x0, 0x24000840) r7 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r7, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc4c4) 25.025189ms ago: executing program 7 (id=5467): r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0], 0x1, 0x1b1, &(0x7f0000000240)="$eJzs3cFqE0EYB/Bv23UbxEPP4mHBi6egPkFUWiguCMoe9KRQvbQi2MvqqW/hG/gqvo7k1FskTmhoWcEetrvJ/n6XfOx/wnwzgcwpk/cPPp8cfzn79PPXj5hMsshnMYuLLPZjJ3YjOY8rstanAMDGuFgs4vci+Y/hz2+hJQCgYzc8/wGALeD8B4Dxcf4DwPi8efvu5bOqOnhdlpOI+XlTN3V6TfnhUXXwuPxrf/2uedPUu5f5k5SXV/M7cXeVP23Ni3j0MOXL7MWrKuV5GtHUe3Hc1vAs62AXAAAAAAAAAAAAAAAAAAAAAADgdk3LS633+0ynxT/yVB0eFatn1+/3yeN+3jJh0ckyAAAAAAAAAAAAAAAAAAAAYKOdfft+8uH09OPX4RbzYbQxtOJe55/g3mqGvle67cVynwfQxrWixy8lAAAAAAAAAAAAAAAAAAAYqfWPfvvuBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD6s/7//+6K5Tw7fS8UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBR+xMAAP//+cFD/w==") syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x343, &(0x7f0000000bc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$inet_sctp(0x2, 0x1, 0x84) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000640)=ANY=[@ANYRES8=r2], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) 0s ago: executing program 2 (id=5468): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x7) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) write$UHID_INPUT(r2, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r4, &(0x7f0000001500)=[{{&(0x7f0000001040)={0xa, 0x4e22, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000001300)=[{&(0x7f0000001080)="200b39ecf04625f4b662e2087ff8092b55ac37c1639b82f46db34cbc03533c552bd2a8481a0c7fd7ba6ef181d4213222164c5a89c4c460866fd6b05c2ea4c1619c3b0cc26cd1f219515b06736a5d8a412eeaf3d7e8abe43583a85af411dab21b334450291935d8e0ada08e7294749d9bb5bc635edf928f1ceee0b6ecf9b8adcbd60be332ef18933b998fc6a9d135b16590062c19b7639deba3fb9cacf1323bb47762f17f2e447a33e3fd9e9e", 0xac}, {&(0x7f0000001180)="1d5cc91c5eee1facbec811082e65081276f445331deeb27799901f7f61ac1cf9c66ce0eaa5e9b40929a8aa12cb9f92ae734e6efd881ef8c34fab08eaa445", 0x3e}, {&(0x7f0000001200)="eb749b1a84c13619e9de8ef35c89b1c8299e780407b5091265cf68383cb0a851d9ee4e6722f4291c3d6ad3cac4c9745b152eba01789872c1d376676195a882cf65c3d10bc9efe1db44bb8f8b066d539b28a75f76d57c355de5e9bac43a090702425c05619518e6bb48bc47c280660b915f93dc982a0293c81f", 0x79}, {&(0x7f0000001280)="2ad9634af8e75f8f127b65f17a8d67e8531242c7eb38b37c22675eff7080f868a525b30dd1c64f7d1f92e3577ee8f6df1a6d171b743a07f71e0cd3b1aa790a29a2ed8d7238703f089c7fb16ebbec650a3417a02b0bdfb91d361128253030963172375f9dbc19da4600027d09970b58e82cf8b0", 0x73}], 0x4, &(0x7f0000001340)=[@tclass={{0x14}}, @dstopts_2292={{0x60, 0x29, 0x4, {0x62, 0x9, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0x9f, 0x4, [0x0, 0x80000001, 0x2740, 0x100000000, 0x2, 0xfffffffffffffffb, 0x3]}}, @jumbo={0xc2, 0x4, 0xe8}]}}}, @rthdrdstopts={{0x70, 0x29, 0x37, {0x16, 0xa, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @jumbo={0xc2, 0x4, 0xc}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x97}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x18, {0x3, 0x4, 0x2, 0xfffa, [0x7, 0x33f]}}, @enc_lim={0x4, 0x1, 0xff}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x87, 0x5, '\x00', [@ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private0}, @pad1, @jumbo={0xc2, 0x4, 0x80000001}, @ra={0x5, 0x2, 0x800}, @ra={0x5, 0x2, 0x9}, @ra, @pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0xc, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @enc_lim={0x4, 0x1, 0x10}, @ra={0x5, 0x2, 0x2}, @pad1]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}], 0x198}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e12090021", 0x2b}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010", 0x5}], 0x1}, 0x20000880) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000009180)=@newtaction={0x70, 0x30, 0x519, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffe, 0x0, 0x20000000, 0x40000008, 0x4}}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)}, 0x24000000) kernel console output (not intermixed with test programs): x43/0x50 [ 270.164252][T17968] x64_sys_call+0x14b0/0x3000 [ 270.164303][T17968] do_syscall_64+0xc0/0x2a0 [ 270.164337][T17968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.164433][T17968] RIP: 0033:0x7fa69677acb9 [ 270.164453][T17968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.164473][T17968] RSP: 002b:00007fa6951d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.164552][T17968] RAX: ffffffffffffffda RBX: 00007fa6969f5fa0 RCX: 00007fa69677acb9 [ 270.164570][T17968] RDX: 00002000000002c0 RSI: 00000000c0c0128e RDI: 0000000000000004 [ 270.164635][T17968] RBP: 00007fa6951d7090 R08: 0000000000000000 R09: 0000000000000000 [ 270.164648][T17968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.164663][T17968] R13: 00007fa6969f6038 R14: 00007fa6969f5fa0 R15: 00007ffca6af5f18 [ 270.164732][T17968] [ 270.176601][T17962] FAT-fs (loop7): Directory bread(block 70) failed [ 270.354734][T17985] lo speed is unknown, defaulting to 1000 [ 270.362824][T17962] FAT-fs (loop7): Directory bread(block 71) failed [ 270.390987][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.402780][T14669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.426639][T17991] syz.6.5023(17991): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 270.434067][T17962] FAT-fs (loop7): Directory bread(block 72) failed [ 270.456408][T17962] FAT-fs (loop7): Directory bread(block 73) failed [ 270.586250][T18005] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 270.603527][T18007] lo speed is unknown, defaulting to 1000 [ 270.612730][ T3312] udevd[3312]: incorrect ext4 checksum on /dev/loop8 [ 270.736274][T18013] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.5030'. [ 270.789337][T18013] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 270.829270][T18022] lo speed is unknown, defaulting to 1000 [ 270.839698][T18013] EXT4-fs (loop1): 1 truncate cleaned up [ 270.846632][T18013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 270.900706][T18027] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.945079][T18027] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 270.965296][T18027] EXT4-fs (loop8): orphan cleanup on readonly fs [ 270.980936][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.995030][T18027] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5035: Failed to acquire dquot type 0 [ 271.018986][T18027] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5035: Failed to acquire dquot type 0 [ 271.057236][T18027] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.5035: Freeing blocks not in datazone - block = 0, count = 4096 [ 271.057469][T18027] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5035: Failed to acquire dquot type 0 [ 271.057571][T18027] EXT4-fs (loop8): 1 orphan inode deleted [ 271.058073][T18027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 271.071081][T18027] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 16: comm syz.8.5035: path /227/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 271.101859][T14669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.110678][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 271.110696][ T29] audit: type=1326 audit(1769146724.915:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.110895][ T29] audit: type=1326 audit(1769146724.915:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.111037][ T29] audit: type=1326 audit(1769146724.915:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.111193][ T29] audit: type=1326 audit(1769146724.915:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.111331][ T29] audit: type=1326 audit(1769146724.915:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.111554][ T29] audit: type=1326 audit(1769146724.915:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.111685][ T29] audit: type=1326 audit(1769146724.915:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.111839][ T29] audit: type=1326 audit(1769146724.915:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.112061][ T29] audit: type=1326 audit(1769146724.915:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.112273][ T29] audit: type=1326 audit(1769146724.915:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18034 comm="syz.2.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 271.115168][T18036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.115338][T18036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.135396][T18037] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5036'. [ 271.157170][T18035] FAT-fs (loop6): Directory bread(block 64) failed [ 271.486700][T18045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5037'. [ 271.488469][T18035] FAT-fs (loop6): Directory bread(block 65) failed [ 271.488567][T18035] FAT-fs (loop6): Directory bread(block 66) failed [ 271.488658][T18035] FAT-fs (loop6): Directory bread(block 67) failed [ 271.488753][T18035] FAT-fs (loop6): Directory bread(block 68) failed [ 271.488776][T18035] FAT-fs (loop6): Directory bread(block 69) failed [ 271.488802][T18035] FAT-fs (loop6): Directory bread(block 70) failed [ 271.488820][T18035] FAT-fs (loop6): Directory bread(block 71) failed [ 271.488845][T18035] FAT-fs (loop6): Directory bread(block 72) failed [ 271.488867][T18035] FAT-fs (loop6): Directory bread(block 73) failed [ 271.530111][T18035] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 271.545716][T18042] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5039'. [ 271.551179][T18035] FAT-fs (loop6): Filesystem has been set read-only [ 271.558034][T18035] syz.6.5038: attempt to access beyond end of device [ 271.558034][T18035] loop6: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 271.558094][T18035] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 271.558119][T18035] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 271.558428][T18035] syz.6.5038: attempt to access beyond end of device [ 271.558428][T18035] loop6: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 271.558510][T18035] syz.6.5038: attempt to access beyond end of device [ 271.558510][T18035] loop6: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 271.558559][T18035] syz.6.5038: attempt to access beyond end of device [ 271.558559][T18035] loop6: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 271.558702][T18035] syz.6.5038: attempt to access beyond end of device [ 271.558702][T18035] loop6: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 271.561139][T18035] syz.6.5038: attempt to access beyond end of device [ 271.561139][T18035] loop6: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 271.718274][T18035] syz.6.5038: attempt to access beyond end of device [ 271.718274][T18035] loop6: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 271.805299][T18052] lo speed is unknown, defaulting to 1000 [ 271.919187][T18060] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.5046'. [ 271.936399][T18060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 272.003805][T18060] EXT4-fs (loop1): 1 truncate cleaned up [ 272.010185][T18060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.098642][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.148279][T18064] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 272.159769][T18064] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 272.186190][T18064] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.5047: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 272.205228][T18064] EXT4-fs (loop1): no journal found [ 272.260393][T18056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.265263][T18067] lo speed is unknown, defaulting to 1000 [ 272.290463][T18056] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.425571][T18075] lo speed is unknown, defaulting to 1000 [ 272.498520][T18075] pim6reg: entered allmulticast mode [ 272.499328][T18075] pim6reg: left allmulticast mode [ 272.515444][T18076] syz.2.5051: attempt to access beyond end of device [ 272.515444][T18076] loop2: rw=2049, sector=481, nr_sectors = 89 limit=128 [ 272.587212][T18076] syz.2.5051: attempt to access beyond end of device [ 272.587212][T18076] loop2: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 272.587269][T18076] syz.2.5051: attempt to access beyond end of device [ 272.587269][T18076] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 273.126769][T18088] netlink: 'syz.8.5055': attribute type 16 has an invalid length. [ 273.222852][T18091] random: crng reseeded on system resumption [ 273.270831][T12991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.318768][T18093] netlink: 1372 bytes leftover after parsing attributes in process `syz.6.5057'. [ 273.352107][T18093] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 273.380362][T18093] EXT4-fs (loop6): 1 truncate cleaned up [ 273.389623][T18093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.420744][T18099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.469925][T18099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.518653][T12991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.592643][T18107] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5059'. [ 273.851614][T18101] set_capacity_and_notify: 12 callbacks suppressed [ 273.851632][T18101] loop8: detected capacity change from 0 to 32768 [ 273.898995][T18089] syz.2.5052 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 273.914938][T18089] CPU: 0 UID: 0 PID: 18089 Comm: syz.2.5052 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 273.914990][T18089] Tainted: [W]=WARN [ 273.915031][T18089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 273.915046][T18089] Call Trace: [ 273.915055][T18089] [ 273.915067][T18089] __dump_stack+0x1d/0x30 [ 273.915209][T18089] dump_stack_lvl+0x95/0xd0 [ 273.915299][T18089] dump_stack+0x15/0x1b [ 273.915324][T18089] dump_header+0x80/0x240 [ 273.915370][T18089] oom_kill_process+0x295/0x350 [ 273.915408][T18089] out_of_memory+0x97d/0xb80 [ 273.915585][T18089] try_charge_memcg+0x62e/0xa10 [ 273.915647][T18089] obj_cgroup_charge_pages+0xa6/0x150 [ 273.915807][T18089] __memcg_kmem_charge_page+0x9e/0x170 [ 273.915837][T18089] __alloc_frozen_pages_noprof+0x18a/0x350 [ 273.916001][T18089] alloc_pages_mpol+0xb3/0x260 [ 273.916040][T18089] alloc_pages_noprof+0x8f/0x130 [ 273.916122][T18089] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 273.916166][T18089] __kvmalloc_node_noprof+0x471/0x680 [ 273.916221][T18089] ? ip_set_alloc+0x24/0x30 [ 273.916263][T18089] ? ip_set_alloc+0x24/0x30 [ 273.916327][T18089] ip_set_alloc+0x24/0x30 [ 273.916359][T18089] hash_netiface_create+0x282/0x740 [ 273.916404][T18089] ? __pfx_hash_netiface_create+0x10/0x10 [ 273.916470][T18089] ip_set_create+0x3cf/0x970 [ 273.916515][T18089] ? __nla_parse+0x40/0x60 [ 273.916614][T18089] nfnetlink_rcv_msg+0x509/0x5d0 [ 273.916663][T18089] netlink_rcv_skb+0x123/0x220 [ 273.916696][T18089] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 273.916754][T18089] nfnetlink_rcv+0x167/0x1720 [ 273.916781][T18089] ? free_frozen_page_commit+0x79/0x3b0 [ 273.916814][T18089] ? _raw_spin_unlock+0x9/0x30 [ 273.916845][T18089] ? __free_frozen_pages+0x278/0x4e0 [ 273.916921][T18089] ? bpf_check+0x9d8c/0xc890 [ 273.916963][T18089] ? emit_mov_imm64+0x2ca/0x2e0 [ 273.917112][T18089] ? try_charge_memcg+0x215/0xa10 [ 273.917147][T18089] ? __rcu_read_unlock+0x4e/0x70 [ 273.917167][T18089] ? css_rstat_updated+0xbb/0x280 [ 273.917334][T18089] ? __account_obj_stock+0x2d6/0x350 [ 273.917358][T18089] ? _raw_spin_lock_bh+0x56/0xb0 [ 273.917443][T18089] ? should_fail_ex+0x30/0x280 [ 273.917467][T18089] ? selinux_nlmsg_lookup+0x99/0x890 [ 273.917500][T18089] ? __rcu_read_unlock+0x33/0x70 [ 273.917526][T18089] ? __netlink_lookup+0x276/0x2b0 [ 273.917639][T18089] netlink_unicast+0x5c0/0x690 [ 273.917673][T18089] netlink_sendmsg+0x5c8/0x6f0 [ 273.917707][T18089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.917775][T18089] __sock_sendmsg+0x145/0x170 [ 273.917840][T18089] ____sys_sendmsg+0x31e/0x4a0 [ 273.917939][T18089] ___sys_sendmsg+0x195/0x1e0 [ 273.918052][T18089] __x64_sys_sendmsg+0xd4/0x160 [ 273.918086][T18089] x64_sys_call+0x17ba/0x3000 [ 273.918120][T18089] do_syscall_64+0xc0/0x2a0 [ 273.918151][T18089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.918208][T18089] RIP: 0033:0x7fb68dd4acb9 [ 273.918230][T18089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.918254][T18089] RSP: 002b:00007fb68c786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.918334][T18089] RAX: ffffffffffffffda RBX: 00007fb68dfc6090 RCX: 00007fb68dd4acb9 [ 273.918416][T18089] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 273.918430][T18089] RBP: 00007fb68ddb8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 273.918446][T18089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.918493][T18089] R13: 00007fb68dfc6128 R14: 00007fb68dfc6090 R15: 00007fff876e2818 [ 273.918513][T18089] [ 273.918521][T18089] memory: usage 307200kB, limit 307200kB, failcnt 1313 [ 274.308744][T18089] memory+swap: usage 307696kB, limit 9007199254740988kB, failcnt 0 [ 274.316688][T18089] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 274.325871][T18089] Memory cgroup stats for /syz2: [ 274.326177][T18089] cache 0 [ 274.334109][T18089] rss 0 [ 274.336883][T18089] shmem 0 [ 274.339876][T18089] mapped_file 0 [ 274.345137][T18089] dirty 0 [ 274.348087][T18089] writeback 0 [ 274.351456][T18089] workingset_refault_anon 104 [ 274.356169][T18089] workingset_refault_file 3514 [ 274.360943][T18089] swap 507904 [ 274.366078][T18089] swapcached 4096 [ 274.369719][T18089] pgpgin 414049 [ 274.373217][T18089] pgpgout 414047 [ 274.376770][T18089] pgfault 252603 [ 274.380325][T18089] pgmajfault 294 [ 274.385768][T18089] inactive_anon 4096 [ 274.389753][T18089] active_anon 0 [ 274.393277][T18089] inactive_file 4096 [ 274.397281][T18089] active_file 0 [ 274.400757][T18089] unevictable 0 [ 274.406069][T18089] hierarchical_memory_limit 314572800 [ 274.411536][T18089] hierarchical_memsw_limit 9223372036854771712 [ 274.417741][T18089] total_cache 0 [ 274.421211][T18089] total_rss 0 [ 274.426349][T18089] total_shmem 0 [ 274.429822][T18089] total_mapped_file 0 [ 274.433860][T18089] total_dirty 0 [ 274.437414][T18089] total_writeback 0 [ 274.441231][T18089] total_workingset_refault_anon 104 [ 274.448399][T18089] total_workingset_refault_file 3514 [ 274.454054][T18089] total_swap 507904 [ 274.457885][T18089] total_swapcached 4096 [ 274.462046][T18089] total_pgpgin 414049 [ 274.467733][T18089] total_pgpgout 414047 [ 274.471876][T18089] total_pgfault 252603 [ 274.475981][T18089] total_pgmajfault 294 [ 274.480225][T18089] total_inactive_anon 4096 [ 274.486463][T18089] total_active_anon 0 [ 274.490529][T18089] total_inactive_file 4096 [ 274.495072][T18089] total_active_file 0 [ 274.499101][T18089] total_unevictable 0 [ 274.504832][T18089] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5052,pid=18083,uid=0 [ 274.507787][T18122] loop7: detected capacity change from 0 to 256 [ 274.519586][T18089] Memory cgroup out of memory: Killed process 18083 (syz.2.5052) total-vm:94132kB, anon-rss:1208kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 274.568181][T18101] loop8: p1 p3 < > p4 [ 274.594363][T18101] loop8: p4 size 720896 extends beyond EOD, truncated [ 274.602058][T18121] siw: device registration error -23 [ 274.629482][T18113] Can't find ip_set type bitmap:ip,mac [ 274.745162][T18129] loop6: detected capacity change from 0 to 1024 [ 274.749642][T18134] loop2: detected capacity change from 0 to 1024 [ 274.788758][T18134] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 274.797268][T18132] lo speed is unknown, defaulting to 1000 [ 274.809075][T18129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.824409][T18134] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.862037][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 274.886703][T18134] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.888376][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 274.894631][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 274.916047][T18129] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.5067: missing EA_INODE flag [ 274.929850][T18134] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5069: Failed to acquire dquot type 0 [ 274.956121][T18142] loop1: detected capacity change from 0 to 1024 [ 274.966776][T18134] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5069: Failed to acquire dquot type 0 [ 274.988453][T18129] EXT4-fs (loop6): Remounting filesystem read-only [ 274.995663][T18142] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 275.007848][T18142] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 275.023901][T18134] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.5069: Freeing blocks not in datazone - block = 0, count = 4096 [ 275.062865][T18134] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5069: Failed to acquire dquot type 0 [ 275.078933][T18142] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.5072: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 275.110871][T18134] EXT4-fs (loop2): 1 orphan inode deleted [ 275.120140][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5073'. [ 275.133544][T18142] EXT4-fs (loop1): no journal found [ 275.160769][T18134] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.5069: path /428/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 275.215805][T18148] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.5069: path /428/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 275.281900][T18152] loop7: detected capacity change from 0 to 256 [ 275.300924][T18152] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.344005][T18154] siw: device registration error -23 [ 275.384370][T18158] loop2: detected capacity change from 0 to 256 [ 275.391963][T18158] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.505249][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.513252][T18151] FAT-fs (loop7): Filesystem has been set read-only [ 275.530040][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.542115][T18162] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 275.552119][T18162] FAT-fs (loop2): Filesystem has been set read-only [ 275.559435][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.569352][T18162] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 275.577510][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.587739][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.604453][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.619101][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.629341][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.637459][T18166] SET target dimension over the limit! [ 275.645448][T18166] SET target dimension over the limit! [ 275.651251][T18166] SET target dimension over the limit! [ 275.657039][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.665201][T18161] loop8: detected capacity change from 0 to 32768 [ 275.667820][T18166] SET target dimension over the limit! [ 275.673478][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673516][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673542][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673571][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673634][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673674][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673698][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673727][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673750][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673902][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673926][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673953][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.673991][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.674018][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.674039][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.674068][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.674092][T18151] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 275.823534][T18166] SET target dimension over the limit! [ 275.829336][T18166] SET target dimension over the limit! [ 275.836179][T18166] SET target dimension over the limit! [ 275.841878][T18166] SET target dimension over the limit! [ 275.848667][T18166] SET target dimension over the limit! [ 275.855643][T18161] loop8: p1 p3 < > p4 [ 275.862848][T18161] loop8: p4 size 720896 extends beyond EOD, truncated [ 275.899706][T18166] SET target dimension over the limit! [ 275.939022][T18175] loop2: detected capacity change from 0 to 512 [ 275.986142][ T4346] udevd[4346]: incorrect ext4 checksum on /dev/loop2 [ 275.992997][T18175] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 276.059718][T18183] lo speed is unknown, defaulting to 1000 [ 276.070766][ T3008] loop8: p1 p3 < > p4 [ 276.089330][ T3008] loop8: p4 size 720896 extends beyond EOD, truncated [ 276.105219][T18188] netlink: 1372 bytes leftover after parsing attributes in process `syz.8.5087'. [ 276.125901][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 276.125918][ T29] audit: type=1400 audit(1769146729.935:3624): avc: denied { read } for pid=18182 comm="syz.7.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 276.154697][T18194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5088'. [ 276.176976][T18194] siw: device registration error -23 [ 276.208691][ T29] audit: type=1400 audit(1769146730.015:3625): avc: denied { write } for pid=18182 comm="syz.7.5085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 276.274828][T18197] loop2: detected capacity change from 0 to 1024 [ 276.296905][T18197] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 276.309741][T18197] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 276.325404][ T3008] loop8: p1 p3 < > p4 [ 276.350701][T18197] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.5089: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 276.351545][ T3008] loop8: p4 size 720896 extends beyond EOD, truncated [ 276.400504][T18197] EXT4-fs (loop2): no journal found [ 276.450637][T18197] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.525610][T18197] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.534027][T18206] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5091'. [ 276.561770][ T29] audit: type=1326 audit(1769146730.365:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18203 comm="syz.8.5092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02ae97acb9 code=0x0 [ 276.594455][T18183] syzkaller1: entered promiscuous mode [ 276.594481][T18183] syzkaller1: entered allmulticast mode [ 276.604868][T18197] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.607320][T18183] bio_check_eod: 48 callbacks suppressed [ 276.607337][T18183] syz.6.5084: attempt to access beyond end of device [ 276.607337][T18183] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 276.609487][T18183] syz.6.5084: attempt to access beyond end of device [ 276.609487][T18183] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 276.609516][T18183] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 276.636224][T18197] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 276.700306][ T874] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.705705][ T874] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.709864][ T874] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.726827][ T874] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.042212][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5099'. [ 277.053573][T18223] siw: device registration error -23 [ 277.141892][ T29] audit: type=1326 audit(1769146730.945:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.181430][T18230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.193880][T18210] loop2: p1 p3 < > p4 [ 277.201395][T18230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.211686][T18210] loop2: p4 size 720896 extends beyond EOD, truncated [ 277.215099][ T29] audit: type=1326 audit(1769146730.975:3628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.243308][ T29] audit: type=1326 audit(1769146730.985:3629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.267901][ T29] audit: type=1326 audit(1769146730.985:3630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.293818][ T29] audit: type=1326 audit(1769146730.985:3631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.318472][ T29] audit: type=1326 audit(1769146730.985:3632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.343453][ T29] audit: type=1326 audit(1769146730.985:3633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18229 comm="syz.1.5101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 277.365221][T18232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5101'. [ 277.472582][T18235] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 277.485346][T18235] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 277.528715][T18235] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.5103: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 277.549338][T18235] EXT4-fs (loop8): no journal found [ 277.612558][T18241] lo speed is unknown, defaulting to 1000 [ 277.646235][T18243] netlink: 1372 bytes leftover after parsing attributes in process `syz.7.5106'. [ 277.695795][T18243] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 277.727027][T18243] EXT4-fs (loop7): 1 truncate cleaned up [ 277.914156][T18253] lo speed is unknown, defaulting to 1000 [ 277.956843][T18260] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5110'. [ 277.968663][T18260] siw: device registration error -23 [ 277.975302][T18241] syzkaller1: entered promiscuous mode [ 277.978666][T18261] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5109'. [ 277.980802][T18241] syzkaller1: entered allmulticast mode [ 278.349056][T18274] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 278.379142][ T3312] loop7: p1 p3 < > p4 [ 278.391790][T18274] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 278.405240][T18274] EXT4-fs (loop1): orphan cleanup on readonly fs [ 278.417076][ T3312] loop7: p4 size 720896 extends beyond EOD, truncated [ 278.422697][T18280] siw: device registration error -23 [ 278.430161][T18274] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5114: Failed to acquire dquot type 0 [ 278.445852][T18266] loop7: p1 p3 < > p4 [ 278.458939][T18266] loop7: p4 size 720896 extends beyond EOD, truncated [ 278.492714][T18274] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5114: Failed to acquire dquot type 0 [ 278.598162][T18274] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.5114: Freeing blocks not in datazone - block = 0, count = 4096 [ 278.604434][T18284] netlink: 1372 bytes leftover after parsing attributes in process `syz.8.5117'. [ 278.626273][T18287] random: crng reseeded on system resumption [ 278.664288][ T3489] page_pool_release_retry() stalled pool shutdown: id 111, 45 inflight 60 sec [ 278.685873][T18274] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5114: Failed to acquire dquot type 0 [ 278.707032][T18288] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 278.755423][T18274] EXT4-fs (loop1): 1 orphan inode deleted [ 278.768770][T18288] EXT4-fs (loop8): 1 truncate cleaned up [ 278.774713][ T3008] loop7: p1 p3 < > p4 [ 278.790735][ T3008] loop7: p4 size 720896 extends beyond EOD, truncated [ 278.799410][T18274] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.5114: path /394/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 278.947943][T18299] set_capacity_and_notify: 7 callbacks suppressed [ 278.947987][T18299] loop1: detected capacity change from 0 to 1024 [ 278.983666][T18299] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 279.022926][T18299] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 279.041976][T18299] EXT4-fs (loop1): orphan cleanup on readonly fs [ 279.049855][T18299] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5121: Failed to acquire dquot type 0 [ 279.064312][T18299] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5121: Failed to acquire dquot type 0 [ 279.086428][T18299] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.5121: Freeing blocks not in datazone - block = 0, count = 4096 [ 279.111878][T18299] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.5121: Failed to acquire dquot type 0 [ 279.124887][T18299] EXT4-fs (loop1): 1 orphan inode deleted [ 279.141986][T18299] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz.1.5121: path /395/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 279.423782][T18325] random: crng reseeded on system resumption [ 279.429922][T18323] loop1: detected capacity change from 0 to 256 [ 279.461654][T18323] FAT-fs (loop1): Directory bread(block 64) failed [ 279.493418][T18323] FAT-fs (loop1): Directory bread(block 65) failed [ 279.500505][T18323] FAT-fs (loop1): Directory bread(block 66) failed [ 279.514518][T18323] FAT-fs (loop1): Directory bread(block 67) failed [ 279.521127][T18323] FAT-fs (loop1): Directory bread(block 68) failed [ 279.531092][T18323] FAT-fs (loop1): Directory bread(block 69) failed [ 279.538639][T18323] FAT-fs (loop1): Directory bread(block 70) failed [ 279.547201][T18323] FAT-fs (loop1): Directory bread(block 71) failed [ 279.553885][T18323] FAT-fs (loop1): Directory bread(block 72) failed [ 279.560704][T18323] FAT-fs (loop1): Directory bread(block 73) failed [ 279.606733][T18323] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 279.612604][T18334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.615669][T18323] FAT-fs (loop1): Filesystem has been set read-only [ 279.632833][T18323] syz.1.5129: attempt to access beyond end of device [ 279.632833][T18323] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 279.633075][T18334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.648537][T18323] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 279.685350][T18323] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 279.705215][T18323] syz.1.5129: attempt to access beyond end of device [ 279.705215][T18323] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 279.720629][T18339] lo speed is unknown, defaulting to 1000 [ 279.731576][T18323] syz.1.5129: attempt to access beyond end of device [ 279.731576][T18323] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 279.767500][T18323] syz.1.5129: attempt to access beyond end of device [ 279.767500][T18323] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 279.785846][T18323] syz.1.5129: attempt to access beyond end of device [ 279.785846][T18323] loop1: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 279.850577][ T3008] loop7: p1 p3 < > p4 [ 279.875437][ T3008] loop7: p4 size 720896 extends beyond EOD, truncated [ 279.935307][T18346] siw: device registration error -23 [ 279.956479][T18348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.965761][ T3008] loop7: p1 p3 < > p4 [ 279.969744][T18348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.977680][ T3008] loop7: p4 size 720896 extends beyond EOD, truncated [ 279.978966][T18348] bond1: (slave bond0): Enslaving as an active interface with an up link [ 280.046153][T18353] siw: device registration error -23 [ 280.056658][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 280.074785][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 280.092004][ T4346] udevd[4346]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 280.150509][T18358] loop7: detected capacity change from 0 to 1024 [ 280.169764][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 280.172646][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 280.181672][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 280.200965][T18358] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 280.234453][T18363] lo speed is unknown, defaulting to 1000 [ 280.240779][T18358] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 280.267211][T18358] EXT4-fs (loop7): orphan cleanup on readonly fs [ 280.324712][T18358] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5143: Failed to acquire dquot type 0 [ 280.341436][T18365] lo speed is unknown, defaulting to 1000 [ 280.391133][T18358] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5143: Failed to acquire dquot type 0 [ 280.454829][T18358] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.5143: Freeing blocks not in datazone - block = 0, count = 4096 [ 280.495378][T18358] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5143: Failed to acquire dquot type 0 [ 280.526587][T18356] loop1: detected capacity change from 0 to 32768 [ 280.545222][T18358] EXT4-fs (loop7): 1 orphan inode deleted [ 280.566160][T18358] EXT4-fs mount: 11 callbacks suppressed [ 280.566181][T18358] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 280.613052][ T3313] loop1: p1 p3 < > p4 [ 280.618391][ T3313] loop1: p4 size 720896 extends beyond EOD, truncated [ 280.631125][T18358] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz.7.5143: path /304/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 280.665768][T18356] loop1: p1 p3 < > p4 [ 280.671235][T18356] loop1: p4 size 720896 extends beyond EOD, truncated [ 280.681696][T18374] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 16: comm syz.7.5143: path /304/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 280.777464][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 280.794337][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 280.807311][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 280.849649][T18384] loop1: detected capacity change from 0 to 256 [ 280.866865][T13367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.878617][T18384] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.945963][T18386] siw: device registration error -23 [ 281.017805][T18391] __nla_validate_parse: 5 callbacks suppressed [ 281.017825][T18391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5154'. [ 281.087068][T18391] siw: device registration error -23 [ 281.094424][T18397] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5155'. [ 281.127289][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5153'. [ 281.209589][T18404] lo speed is unknown, defaulting to 1000 [ 281.413845][T18414] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 281.426478][T18413] lo speed is unknown, defaulting to 1000 [ 281.431285][T18414] xt_socket: unknown flags 0x4c [ 281.804573][T18377] syz.2.5150 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 281.804689][T18377] CPU: 0 UID: 0 PID: 18377 Comm: syz.2.5150 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 281.804721][T18377] Tainted: [W]=WARN [ 281.804728][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 281.804803][T18377] Call Trace: [ 281.804813][T18377] [ 281.804823][T18377] __dump_stack+0x1d/0x30 [ 281.804850][T18377] dump_stack_lvl+0x95/0xd0 [ 281.804873][T18377] dump_stack+0x15/0x1b [ 281.804964][T18377] dump_header+0x80/0x240 [ 281.804987][T18377] oom_kill_process+0x295/0x350 [ 281.805050][T18377] out_of_memory+0x97d/0xb80 [ 281.805103][T18377] try_charge_memcg+0x62e/0xa10 [ 281.805178][T18377] charge_memcg+0x51/0xc0 [ 281.805249][T18377] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 281.805281][T18377] __read_swap_cache_async+0x17b/0x2d0 [ 281.805317][T18377] swap_cluster_readahead+0x362/0x3c0 [ 281.805398][T18377] swapin_readahead+0xde/0x840 [ 281.805424][T18377] ? fsnotify_grab_connector+0xa4/0xd0 [ 281.805445][T18377] ? rcu_segcblist_enqueue+0x92/0xb0 [ 281.805497][T18377] ? locks_free_lock_context+0x2c/0x60 [ 281.805516][T18377] ? __rcu_read_unlock+0x4e/0x70 [ 281.805534][T18377] ? swap_cache_get_folio+0x26f/0x280 [ 281.805561][T18377] do_swap_page+0x2f4/0x2140 [ 281.805600][T18377] ? __account_obj_stock+0x211/0x350 [ 281.805619][T18377] ? __slab_free+0x104/0x290 [ 281.805648][T18377] ? refill_obj_stock+0x254/0x2e0 [ 281.805675][T18377] ? __pfx_default_wake_function+0x10/0x10 [ 281.805743][T18377] handle_mm_fault+0xb40/0x3030 [ 281.805772][T18377] ? vma_start_read+0x1c7/0x2c0 [ 281.805797][T18377] do_user_addr_fault+0x62f/0x1050 [ 281.805836][T18377] exc_page_fault+0x62/0xa0 [ 281.805863][T18377] asm_exc_page_fault+0x26/0x30 [ 281.805887][T18377] RIP: 0033:0x7fb68dd4acc1 [ 281.805909][T18377] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 281.805928][T18377] RSP: 002b:00007fff876e2978 EFLAGS: 00010217 [ 281.805995][T18377] RAX: 0000000000000000 RBX: 00007fb68dfc7da0 RCX: 00007fb68dd4acb9 [ 281.806032][T18377] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 281.806046][T18377] RBP: 00007fb68dfc7da0 R08: 0000000000000006 R09: 0000000000000000 [ 281.806061][T18377] R10: 00007fb68dfc7cb0 R11: 0000000000000246 R12: 0000000000044be8 [ 281.806076][T18377] R13: 00007fb68dfc5fac R14: 00000000000448e5 R15: 00007fff876e2a80 [ 281.806097][T18377] [ 281.806123][T18377] memory: usage 307200kB, limit 307200kB, failcnt 1673 [ 282.097249][T18377] memory+swap: usage 307692kB, limit 9007199254740988kB, failcnt 0 [ 282.097316][T18377] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 282.097333][T18377] Memory cgroup stats for /syz2: [ 282.114136][T18377] cache 0 [ 282.114148][T18377] rss 0 [ 282.114156][T18377] shmem 0 [ 282.114195][T18377] mapped_file 0 [ 282.114204][T18377] dirty 0 [ 282.114213][T18377] writeback 0 [ 282.114222][T18377] workingset_refault_anon 159 [ 282.114232][T18377] workingset_refault_file 5242 [ 282.114243][T18377] swap 503808 [ 282.114252][T18377] swapcached 0 [ 282.114260][T18377] pgpgin 438662 [ 282.114273][T18377] pgpgout 438661 [ 282.114282][T18377] pgfault 265392 [ 282.114292][T18377] pgmajfault 384 [ 282.114301][T18377] inactive_anon 0 [ 282.114319][T18377] active_anon 0 [ 282.114327][T18377] inactive_file 0 [ 282.114336][T18377] active_file 4096 [ 282.114343][T18377] unevictable 0 [ 282.114352][T18377] hierarchical_memory_limit 314572800 [ 282.114362][T18377] hierarchical_memsw_limit 9223372036854771712 [ 282.114373][T18377] total_cache 0 [ 282.114391][T18377] total_rss 0 [ 282.209231][T18377] total_shmem 0 [ 282.209244][T18377] total_mapped_file 0 [ 282.209253][T18377] total_dirty 0 [ 282.221870][T18377] total_writeback 0 [ 282.221882][T18377] total_workingset_refault_anon 159 [ 282.221892][T18377] total_workingset_refault_file 5242 [ 282.221903][T18377] total_swap 503808 [ 282.241210][T18377] total_swapcached 0 [ 282.241222][T18377] total_pgpgin 438662 [ 282.241232][T18377] total_pgpgout 438661 [ 282.241241][T18377] total_pgfault 265392 [ 282.241250][T18377] total_pgmajfault 384 [ 282.241259][T18377] total_inactive_anon 0 [ 282.241267][T18377] total_active_anon 0 [ 282.241275][T18377] total_inactive_file 0 [ 282.276165][T18377] total_active_file 4096 [ 282.276179][T18377] total_unevictable 0 [ 282.276188][T18377] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5150,pid=18377,uid=0 [ 282.276295][T18377] Memory cgroup out of memory: Killed process 18377 (syz.2.5150) total-vm:94000kB, anon-rss:1284kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 282.276729][T18409] Can't find ip_set type bitmap:ip,mac [ 282.300457][T18424] FAULT_INJECTION: forcing a failure. [ 282.300457][T18424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.300496][T18424] CPU: 0 UID: 0 PID: 18424 Comm: syz.8.5164 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 282.300526][T18424] Tainted: [W]=WARN [ 282.300534][T18424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 282.300546][T18424] Call Trace: [ 282.300571][T18424] [ 282.300578][T18424] __dump_stack+0x1d/0x30 [ 282.300604][T18424] dump_stack_lvl+0x95/0xd0 [ 282.300646][T18424] dump_stack+0x15/0x1b [ 282.300670][T18424] should_fail_ex+0x263/0x280 [ 282.300694][T18424] should_fail+0xb/0x20 [ 282.300763][T18424] should_fail_usercopy+0x1a/0x20 [ 282.300790][T18424] _copy_from_iter+0xcf/0xea0 [ 282.300814][T18424] ? __alloc_skb+0x397/0x4b0 [ 282.300832][T18424] ? __alloc_skb+0x219/0x4b0 [ 282.300853][T18424] netlink_sendmsg+0x4ae/0x6f0 [ 282.300898][T18424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 282.300924][T18424] __sock_sendmsg+0x145/0x170 [ 282.301001][T18424] ____sys_sendmsg+0x31e/0x4a0 [ 282.301034][T18424] ___sys_sendmsg+0x195/0x1e0 [ 282.301072][T18424] __x64_sys_sendmsg+0xd4/0x160 [ 282.301169][T18424] x64_sys_call+0x17ba/0x3000 [ 282.301252][T18424] do_syscall_64+0xc0/0x2a0 [ 282.301280][T18424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.301311][T18424] RIP: 0033:0x7f02ae97acb9 [ 282.301383][T18424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.301407][T18424] RSP: 002b:00007f02ad3d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.301431][T18424] RAX: ffffffffffffffda RBX: 00007f02aebf5fa0 RCX: 00007f02ae97acb9 [ 282.301515][T18424] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 282.301528][T18424] RBP: 00007f02ad3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 282.301541][T18424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.301556][T18424] R13: 00007f02aebf6038 R14: 00007f02aebf5fa0 R15: 00007ffd13566fa8 [ 282.301581][T18424] [ 282.406227][T18430] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5167'. [ 282.406867][T18428] loop2: detected capacity change from 0 to 1024 [ 282.456444][T18434] IPVS: length: 35 != 24 [ 282.463931][T18428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.487074][T18439] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5169'. [ 282.487095][T18439] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 283.863252][T11472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.883646][T18464] loop7: detected capacity change from 0 to 128 [ 283.993453][T18468] random: crng reseeded on system resumption [ 284.037220][T18470] lo speed is unknown, defaulting to 1000 [ 284.114806][T18474] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5181'. [ 284.125591][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 284.125607][ T29] audit: type=1326 audit(1769146737.935:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.7.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39144eacb9 code=0x7ffc0000 [ 284.161383][ T29] audit: type=1326 audit(1769146737.965:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.7.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39144eacb9 code=0x7ffc0000 [ 284.186145][ T29] audit: type=1326 audit(1769146737.965:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.7.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f39144eacb9 code=0x7ffc0000 [ 284.210710][ T29] audit: type=1326 audit(1769146737.965:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.7.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39144eacb9 code=0x7ffc0000 [ 284.235347][ T29] audit: type=1326 audit(1769146737.965:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.7.5179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39144eacb9 code=0x7ffc0000 [ 284.337432][T18483] loop8: detected capacity change from 0 to 256 [ 284.370980][ T3430] Process accounting resumed [ 284.399260][T18484] loop2: detected capacity change from 0 to 512 [ 284.408732][T18484] ext4: Unknown parameter 'mask' [ 284.426500][T18484] netlink: 'syz.2.5182': attribute type 3 has an invalid length. [ 284.448894][T18484] netlink: 'syz.2.5182': attribute type 3 has an invalid length. [ 284.595843][T18491] loop6: detected capacity change from 0 to 128 [ 284.697220][T18493] random: crng reseeded on system resumption [ 284.924074][T18502] FAULT_INJECTION: forcing a failure. [ 284.924074][T18502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.937193][T18502] CPU: 1 UID: 0 PID: 18502 Comm: syz.8.5193 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 284.937232][T18502] Tainted: [W]=WARN [ 284.937242][T18502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.937255][T18502] Call Trace: [ 284.937265][T18502] [ 284.937275][T18502] __dump_stack+0x1d/0x30 [ 284.937313][T18502] dump_stack_lvl+0x95/0xd0 [ 284.937373][T18502] dump_stack+0x15/0x1b [ 284.937397][T18502] should_fail_ex+0x263/0x280 [ 284.937431][T18502] should_fail+0xb/0x20 [ 284.937453][T18502] should_fail_usercopy+0x1a/0x20 [ 284.937591][T18502] _copy_from_user+0x1c/0xb0 [ 284.937621][T18502] sctp_setsockopt+0x154/0xe30 [ 284.937653][T18502] sock_common_setsockopt+0x69/0x80 [ 284.937689][T18502] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 284.937813][T18502] __sys_setsockopt+0x184/0x200 [ 284.937839][T18502] __x64_sys_setsockopt+0x64/0x80 [ 284.937865][T18502] x64_sys_call+0x21d5/0x3000 [ 284.937932][T18502] do_syscall_64+0xc0/0x2a0 [ 284.938025][T18502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.938052][T18502] RIP: 0033:0x7f02ae97acb9 [ 284.938073][T18502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.938143][T18502] RSP: 002b:00007f02ad3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.938166][T18502] RAX: ffffffffffffffda RBX: 00007f02aebf5fa0 RCX: 00007f02ae97acb9 [ 284.938213][T18502] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 284.938229][T18502] RBP: 00007f02ad3d7090 R08: 000000000000001c R09: 0000000000000000 [ 284.938245][T18502] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 284.938261][T18502] R13: 00007f02aebf6038 R14: 00007f02aebf5fa0 R15: 00007ffd13566fa8 [ 284.938291][T18502] [ 285.219050][T18508] loop2: detected capacity change from 0 to 128 [ 285.255320][T18506] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 285.265861][T18506] xt_socket: unknown flags 0x4c [ 285.491160][T18517] loop7: detected capacity change from 0 to 1024 [ 285.499054][T18517] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 285.511256][T18517] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 285.527233][T18517] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.5198: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 285.547438][T18517] EXT4-fs (loop7): no journal found [ 285.568883][T18519] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.5199'. [ 285.598598][T18519] loop2: detected capacity change from 0 to 512 [ 285.611324][T18524] random: crng reseeded on system resumption [ 285.618678][T18519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.633205][T18519] EXT4-fs (loop2): 1 truncate cleaned up [ 285.639458][T18519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.718387][T18535] loop1: detected capacity change from 0 to 512 [ 285.727508][T18535] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 285.744414][ T3312] udevd[3312]: incorrect ext4 checksum on /dev/loop1 [ 285.756166][T11472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.800573][T18540] random: crng reseeded on system resumption [ 285.825374][T18542] loop2: detected capacity change from 0 to 128 [ 285.956657][T18531] loop8: detected capacity change from 0 to 32768 [ 285.981533][ T3489] kernel read not supported for file /820/syscall (pid: 3489 comm: kworker/0:6) [ 285.992216][ T3312] loop8: p1 p3 < > p4 [ 285.994866][ T3312] loop8: p4 size 720896 extends beyond EOD, truncated [ 285.998288][T18531] loop8: p1 p3 < > p4 [ 285.999562][T18531] loop8: p4 size 720896 extends beyond EOD, truncated [ 286.009515][T18555] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5210'. [ 286.065453][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 286.066035][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 286.066404][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 286.081011][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 286.085199][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 286.085576][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 286.093905][T18559] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5214'. [ 286.093991][T18559] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 286.559995][T18568] netlink: 1372 bytes leftover after parsing attributes in process `syz.2.5217'. [ 286.587581][T18568] loop2: detected capacity change from 0 to 512 [ 286.598739][T18568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 286.604476][T18568] EXT4-fs (loop2): 1 truncate cleaned up [ 286.604989][T18568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.561749][T11472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.762351][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5225'. [ 287.784182][T18593] siw: device registration error -23 [ 288.065150][ T29] audit: type=1326 audit(1769146741.875:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18599 comm="syz.2.5227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x0 [ 288.743676][T18606] bridge2: entered promiscuous mode [ 288.748941][T18606] bridge2: entered allmulticast mode [ 288.776501][T18588] loop1: p1 p3 < > p4 [ 288.781913][T18588] loop1: p4 size 720896 extends beyond EOD, truncated [ 288.816208][T18608] netlink: 1372 bytes leftover after parsing attributes in process `syz.7.5230'. [ 288.897061][T18608] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 289.014699][T18608] EXT4-fs (loop7): 1 truncate cleaned up [ 289.020772][T18608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.466208][T18668] set_capacity_and_notify: 3 callbacks suppressed [ 289.466226][T18668] loop8: detected capacity change from 0 to 256 [ 289.490555][T18668] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 289.625021][T13367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.700117][T18695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.718833][T18695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.737435][T18621] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5232'. [ 289.784146][T18724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5239'. [ 289.836881][T18699] lo speed is unknown, defaulting to 1000 [ 289.901636][T18738] siw: device registration error -23 [ 289.949088][T18742] loop2: detected capacity change from 0 to 1024 [ 289.956195][T18742] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 289.957132][T18742] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 289.957206][T18742] EXT4-fs (loop2): orphan cleanup on readonly fs [ 289.957926][T18742] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 289.958003][T18742] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 289.958035][T18742] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5244: Failed to acquire dquot type 0 [ 289.958159][T18742] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 289.958244][T18742] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 289.958270][T18742] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5244: Failed to acquire dquot type 0 [ 289.958378][T18742] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.5244: Freeing blocks not in datazone - block = 0, count = 4096 [ 289.958612][T18742] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 289.958649][T18742] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 289.958675][T18742] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.5244: Failed to acquire dquot type 0 [ 289.958779][T18742] EXT4-fs (loop2): 1 orphan inode deleted [ 289.964978][T18740] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 289.971497][T18742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.004430][T18744] netlink: 164 bytes leftover after parsing attributes in process `syz.8.5240'. [ 290.160290][T18748] program syz.1.5245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.174811][T11472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.199561][T18699] syzkaller1: entered promiscuous mode [ 290.199665][T18699] syzkaller1: entered allmulticast mode [ 290.202266][T18699] loop6: detected capacity change from 0 to 128 [ 290.219617][T18699] syz.6.5238: attempt to access beyond end of device [ 290.219617][T18699] loop6: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 290.221650][T18699] syz.6.5238: attempt to access beyond end of device [ 290.221650][T18699] loop6: rw=8390657, sector=142, nr_sectors = 2 limit=128 [ 290.221681][T18699] Buffer I/O error on dev loop6, logical block 71, lost async page write [ 290.305124][ T29] audit: type=1326 audit(1769146744.115:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 290.305164][ T29] audit: type=1326 audit(1769146744.115:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 290.305256][ T29] audit: type=1326 audit(1769146744.115:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 290.330515][ T29] audit: type=1326 audit(1769146744.115:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18753 comm="syz.1.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa69677acb9 code=0x7ffc0000 [ 290.372638][T18754] loop1: detected capacity change from 0 to 512 [ 290.428950][T18754] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.5248: inode has both inline data and extents flags [ 290.444772][T18754] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.5248: couldn't read orphan inode 15 (err -117) [ 290.448916][T18750] loop2: detected capacity change from 0 to 32768 [ 290.466197][T18754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.512850][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.529674][T18750] loop2: p1 p3 < > p4 [ 290.549094][T18750] loop2: p4 size 720896 extends beyond EOD, truncated [ 290.598065][T18765] loop1: detected capacity change from 0 to 256 [ 290.646772][T18765] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.725978][T18774] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.732533][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5255'. [ 290.733147][T18776] loop8: detected capacity change from 0 to 1024 [ 290.776698][T18776] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 290.824358][T18776] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 290.855703][T18776] EXT4-fs (loop8): orphan cleanup on readonly fs [ 290.884210][T18776] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5256: Failed to acquire dquot type 0 [ 290.913829][ T3008] loop2: p1 p3 < > p4 [ 290.918157][T18776] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5256: Failed to acquire dquot type 0 [ 290.930584][ T3008] loop2: p4 size 720896 extends beyond EOD, truncated [ 290.949973][T18776] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.5256: Freeing blocks not in datazone - block = 0, count = 4096 [ 290.987128][ T3008] loop2: p1 p3 < > p4 [ 290.997559][T18776] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.5256: Failed to acquire dquot type 0 [ 291.011058][ T3008] loop2: p4 size 720896 extends beyond EOD, truncated [ 291.044804][T18776] EXT4-fs (loop8): 1 orphan inode deleted [ 291.054583][T18776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 291.085121][ T3008] loop2: p1 p3 < > p4 [ 291.099925][ T3008] loop2: p4 size 720896 extends beyond EOD, truncated [ 291.109868][T14669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.301433][T18810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.311745][T18812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5268'. [ 291.321261][T18810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.362098][T18812] siw: device registration error -23 [ 291.377525][T18809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5267'. [ 291.473769][T18822] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 291.501057][T18822] xt_socket: unknown flags 0x4c [ 291.878891][ T3008] loop2: p1 p3 < > p4 [ 291.893106][ T3008] loop2: p4 size 720896 extends beyond EOD, truncated [ 292.076221][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 292.085489][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 292.095857][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 292.113993][T18836] syzkaller1: entered allmulticast mode [ 292.224603][T18820] syz.1.5271 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 292.236737][T18820] CPU: 1 UID: 0 PID: 18820 Comm: syz.1.5271 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 292.236787][T18820] Tainted: [W]=WARN [ 292.236796][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 292.236809][T18820] Call Trace: [ 292.236827][T18820] [ 292.236837][T18820] __dump_stack+0x1d/0x30 [ 292.236934][T18820] dump_stack_lvl+0x95/0xd0 [ 292.236959][T18820] dump_stack+0x15/0x1b [ 292.236983][T18820] dump_header+0x80/0x240 [ 292.237009][T18820] oom_kill_process+0x295/0x350 [ 292.237099][T18820] out_of_memory+0x97d/0xb80 [ 292.237206][T18820] try_charge_memcg+0x62e/0xa10 [ 292.237280][T18820] charge_memcg+0x51/0xc0 [ 292.237326][T18820] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 292.237389][T18820] __read_swap_cache_async+0x17b/0x2d0 [ 292.237431][T18820] swap_cluster_readahead+0x262/0x3c0 [ 292.237473][T18820] swapin_readahead+0xde/0x840 [ 292.237507][T18820] ? __perf_event_task_sched_in+0xa65/0xad0 [ 292.237599][T18820] ? __rcu_read_unlock+0x4e/0x70 [ 292.237619][T18820] ? swap_cache_get_folio+0x26f/0x280 [ 292.237652][T18820] do_swap_page+0x2f4/0x2140 [ 292.237731][T18820] ? _raw_spin_unlock+0x9/0x30 [ 292.237762][T18820] ? finish_task_switch+0x79/0x280 [ 292.237867][T18820] ? __schedule+0x82d/0xc90 [ 292.237902][T18820] ? __pfx_default_wake_function+0x10/0x10 [ 292.237989][T18820] handle_mm_fault+0xb40/0x3030 [ 292.238066][T18820] ? vma_start_read+0x1c7/0x2c0 [ 292.238096][T18820] do_user_addr_fault+0x62f/0x1050 [ 292.238133][T18820] exc_page_fault+0x62/0xa0 [ 292.238161][T18820] asm_exc_page_fault+0x26/0x30 [ 292.238197][T18820] RIP: 0033:0x7fa69673b58e [ 292.238218][T18820] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 292.238266][T18820] RSP: 002b:00007ffca6af5ff8 EFLAGS: 00010246 [ 292.238287][T18820] RAX: 0000000000000000 RBX: 00005555637e9500 RCX: 00007fa69673b58e [ 292.238301][T18820] RDX: 00007ffca6af6050 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.238314][T18820] RBP: 00007fa6969f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 292.238333][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000475a2 [ 292.238349][T18820] R13: 00007fa6969f5fac R14: 00000000000472d2 R15: 00007ffca6af6180 [ 292.238371][T18820] [ 292.238380][T18820] memory: usage 307200kB, limit 307200kB, failcnt 3107 [ 292.484681][T18820] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 292.484702][T18820] kmem: usage 239500kB, limit 9007199254740988kB, failcnt 0 [ 292.499977][T18820] Memory cgroup stats for /syz1: [ 292.500282][T18820] cache 69296128 [ 292.509653][T18820] rss 0 [ 292.512451][T18820] shmem 0 [ 292.515390][T18820] mapped_file 0 [ 292.518835][T18820] dirty 0 [ 292.521850][T18820] writeback 0 [ 292.526084][T18820] workingset_refault_anon 240 [ 292.530805][T18820] workingset_refault_file 29986 [ 292.535678][T18820] swap 368640 [ 292.538995][T18820] swapcached 12288 [ 292.544013][T18820] pgpgin 604666 [ 292.547495][T18820] pgpgout 587741 [ 292.551039][T18820] pgfault 278204 [ 292.554694][T18820] pgmajfault 337 [ 292.558244][T18820] inactive_anon 0 [ 292.561887][T18820] active_anon 12288 [ 292.566626][T18820] inactive_file 0 [ 292.570328][T18820] active_file 16384 [ 292.574206][T18820] unevictable 69296128 [ 292.578340][T18820] hierarchical_memory_limit 314572800 [ 292.584746][T18820] hierarchical_memsw_limit 9223372036854771712 [ 292.591000][T18820] total_cache 69296128 [ 292.595075][T18820] total_rss 0 [ 292.598427][T18820] total_shmem 0 [ 292.601901][T18820] total_mapped_file 0 [ 292.606856][T18820] total_dirty 0 [ 292.610327][T18820] total_writeback 0 [ 292.614213][T18820] total_workingset_refault_anon 240 [ 292.619435][T18820] total_workingset_refault_file 29986 [ 292.625694][T18820] total_swap 368640 [ 292.629506][T18820] total_swapcached 12288 [ 292.633770][T18820] total_pgpgin 604666 [ 292.637757][T18820] total_pgpgout 587741 [ 292.641896][T18820] total_pgfault 278204 [ 292.646961][T18820] total_pgmajfault 337 [ 292.651018][T18820] total_inactive_anon 0 [ 292.655191][T18820] total_active_anon 12288 [ 292.659538][T18820] total_inactive_file 0 [ 292.664658][T18820] total_active_file 16384 [ 292.669010][T18820] total_unevictable 69296128 [ 292.673615][T18820] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5271,pid=18820,uid=0 [ 292.689341][T18820] Memory cgroup out of memory: Killed process 18820 (syz.1.5271) total-vm:96048kB, anon-rss:1204kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 292.708944][T18827] Can't find ip_set type bitmap:ip,mac [ 292.750978][T18844] random: crng reseeded on system resumption [ 292.806280][T18848] loop7: detected capacity change from 0 to 1024 [ 292.825065][T18848] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 292.837247][T18848] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 292.871574][T18857] mmap: syz.6.5286 (18857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 292.888040][T18848] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.5282: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 292.911129][T18850] netlink: 1372 bytes leftover after parsing attributes in process `syz.1.5283'. [ 292.924203][T18859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.938375][T18859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.949196][T18848] EXT4-fs (loop7): no journal found [ 292.951053][T18862] tmpfs: Bad value for 'nr_inodes' [ 292.969223][T18850] loop1: detected capacity change from 0 to 512 [ 292.985183][T18859] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5287'. [ 293.004290][T18850] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 293.019807][T18866] loop6: detected capacity change from 0 to 512 [ 293.033800][T18850] EXT4-fs (loop1): 1 truncate cleaned up [ 293.044134][T18850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.058373][T18866] EXT4-fs (loop6): orphan cleanup on readonly fs [ 293.072798][T18866] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #11: block 1: comm syz.6.5289: lblock 0 mapped to illegal pblock 1 (length 1) [ 293.109356][T18866] EXT4-fs (loop6): Remounting filesystem read-only [ 293.117253][T18866] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 293.130347][T18866] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 293.143007][T18866] EXT4-fs (loop6): 1 orphan inode deleted [ 293.149714][T18866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 293.165619][T18866] netlink: 'syz.6.5289': attribute type 8 has an invalid length. [ 293.191623][T12991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.625080][T18874] syz.6.5290 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 293.639272][T18874] CPU: 0 UID: 0 PID: 18874 Comm: syz.6.5290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.639386][T18874] Tainted: [W]=WARN [ 293.639396][T18874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 293.639412][T18874] Call Trace: [ 293.639419][T18874] [ 293.639428][T18874] __dump_stack+0x1d/0x30 [ 293.639458][T18874] dump_stack_lvl+0x95/0xd0 [ 293.639562][T18874] dump_stack+0x15/0x1b [ 293.639605][T18874] dump_header+0x80/0x240 [ 293.639628][T18874] oom_kill_process+0x295/0x350 [ 293.639655][T18874] out_of_memory+0x97d/0xb80 [ 293.639685][T18874] try_charge_memcg+0x62e/0xa10 [ 293.639773][T18874] obj_cgroup_charge_pages+0xa6/0x150 [ 293.639838][T18874] __memcg_kmem_charge_page+0x9e/0x170 [ 293.639875][T18874] __alloc_frozen_pages_noprof+0x18a/0x350 [ 293.639905][T18874] alloc_pages_mpol+0xb3/0x260 [ 293.640013][T18874] alloc_pages_noprof+0x8f/0x130 [ 293.640058][T18874] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 293.640127][T18874] __kvmalloc_node_noprof+0x471/0x680 [ 293.640192][T18874] ? ip_set_alloc+0x24/0x30 [ 293.640293][T18874] ? ip_set_alloc+0x24/0x30 [ 293.640347][T18874] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 293.640380][T18874] ip_set_alloc+0x24/0x30 [ 293.640407][T18874] hash_netiface_create+0x282/0x740 [ 293.640467][T18874] ? __pfx_hash_netiface_create+0x10/0x10 [ 293.640502][T18874] ip_set_create+0x3cf/0x970 [ 293.640591][T18874] ? __nla_parse+0x40/0x60 [ 293.640621][T18874] nfnetlink_rcv_msg+0x509/0x5d0 [ 293.640668][T18874] netlink_rcv_skb+0x123/0x220 [ 293.640696][T18874] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 293.640737][T18874] nfnetlink_rcv+0x167/0x1720 [ 293.640758][T18874] ? free_frozen_page_commit+0x79/0x3b0 [ 293.640783][T18874] ? _raw_spin_unlock+0x9/0x30 [ 293.640844][T18874] ? __free_frozen_pages+0x278/0x4e0 [ 293.640874][T18874] ? bpf_check+0x9d8c/0xc890 [ 293.640914][T18874] ? emit_mov_imm64+0x2ca/0x2e0 [ 293.640996][T18874] ? xas_load+0x413/0x430 [ 293.641021][T18874] ? __rcu_read_unlock+0x4e/0x70 [ 293.641089][T18874] ? xa_load+0xb1/0xe0 [ 293.641121][T18874] ? _raw_spin_lock_bh+0x56/0xb0 [ 293.641189][T18874] ? should_fail_ex+0x30/0x280 [ 293.641217][T18874] ? selinux_nlmsg_lookup+0x99/0x890 [ 293.641320][T18874] ? __rcu_read_unlock+0x33/0x70 [ 293.641345][T18874] ? __netlink_lookup+0x276/0x2b0 [ 293.641393][T18874] netlink_unicast+0x5c0/0x690 [ 293.641419][T18874] netlink_sendmsg+0x5c8/0x6f0 [ 293.641450][T18874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.641486][T18874] __sock_sendmsg+0x145/0x170 [ 293.641593][T18874] ____sys_sendmsg+0x31e/0x4a0 [ 293.641628][T18874] ___sys_sendmsg+0x195/0x1e0 [ 293.641673][T18874] __x64_sys_sendmsg+0xd4/0x160 [ 293.641787][T18874] x64_sys_call+0x17ba/0x3000 [ 293.641855][T18874] do_syscall_64+0xc0/0x2a0 [ 293.641892][T18874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.641919][T18874] RIP: 0033:0x7feb071bacb9 [ 293.641940][T18874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.641963][T18874] RSP: 002b:00007feb05c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.642045][T18874] RAX: ffffffffffffffda RBX: 00007feb07435fa0 RCX: 00007feb071bacb9 [ 293.642120][T18874] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 293.642137][T18874] RBP: 00007feb07228bf7 R08: 0000000000000000 R09: 0000000000000000 [ 293.642150][T18874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.642163][T18874] R13: 00007feb07436038 R14: 00007feb07435fa0 R15: 00007fff8d87f038 [ 293.642186][T18874] [ 293.642197][T18874] memory: usage 307200kB, limit 307200kB, failcnt 1242 [ 293.939516][T18881] random: crng reseeded on system resumption [ 293.941913][T18874] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 293.941935][T18874] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 294.050615][T18874] Memory cgroup stats for /syz6: [ 294.051212][T18874] cache 0 [ 294.052135][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.056798][T18874] rss 0 [ 294.056809][T18874] shmem 0 [ 294.056818][T18874] mapped_file 0 [ 294.056828][T18874] dirty 0 [ 294.056908][T18874] writeback 0 [ 294.056916][T18874] workingset_refault_anon 232 [ 294.056926][T18874] workingset_refault_file 0 [ 294.056934][T18874] swap 192512 [ 294.056942][T18874] swapcached 4096 [ 294.056950][T18874] pgpgin 68003 [ 294.056959][T18874] pgpgout 67998 [ 294.056967][T18874] pgfault 80632 [ 294.056974][T18874] pgmajfault 218 [ 294.056982][T18874] inactive_anon 0 [ 294.057068][T18874] active_anon 4096 [ 294.057077][T18874] inactive_file 0 [ 294.057085][T18874] active_file 16384 [ 294.057093][T18874] unevictable 0 [ 294.057102][T18874] hierarchical_memory_limit 314572800 [ 294.057113][T18874] hierarchical_memsw_limit 9223372036854771712 [ 294.057123][T18874] total_cache 0 [ 294.057183][T18874] total_rss 0 [ 294.057190][T18874] total_shmem 0 [ 294.057198][T18874] total_mapped_file 0 [ 294.057265][T18874] total_dirty 0 [ 294.057274][T18874] total_writeback 0 [ 294.057283][T18874] total_workingset_refault_anon 232 [ 294.057294][T18874] total_workingset_refault_file 0 [ 294.057304][T18874] total_swap 192512 [ 294.057313][T18874] total_swapcached 4096 [ 294.057323][T18874] total_pgpgin 68003 [ 294.057331][T18874] total_pgpgout 67998 [ 294.057340][T18874] total_pgfault 80632 [ 294.057349][T18874] total_pgmajfault 218 [ 294.057359][T18874] total_inactive_anon 0 [ 294.057416][T18874] total_active_anon 4096 [ 294.057424][T18874] total_inactive_file 0 [ 294.057435][T18874] total_active_file 16384 [ 294.057444][T18874] total_unevictable 0 [ 294.057454][T18874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.5290,pid=18873,uid=0 [ 294.057557][T18874] Memory cgroup out of memory: Killed process 18873 (syz.6.5290) total-vm:94000kB, anon-rss:1204kB, file-rss:22092kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 294.408318][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5298'. [ 294.434361][T18885] loop7: p1 p3 < > p4 [ 294.441799][T18891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.456431][T18895] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 294.456977][T18893] siw: device registration error -23 [ 294.474531][T18885] loop7: p4 size 720896 extends beyond EOD, truncated [ 294.503745][T18895] EXT4-fs (loop1): 1 truncate cleaned up [ 294.510355][T18895] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.521262][T18891] ext4 filesystem being mounted at /476/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.603639][T11472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.624452][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 294.635129][T18895] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5299: invalid indirect mapped block 4294901760 (level 0) [ 294.635590][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 294.652565][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 294.689245][T18904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.719160][T18904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.722955][T18895] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.5299: invalid indirect mapped block 4294967295 (level 1) [ 294.770376][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.796619][T18912] set_capacity_and_notify: 3 callbacks suppressed [ 294.796728][T18912] loop7: detected capacity change from 0 to 512 [ 294.814336][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5302'. [ 294.858368][T18912] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.5305: corrupted inode contents [ 294.893537][T18912] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 294.911369][T18912] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #15: comm syz.7.5305: corrupted inode contents [ 294.938359][T18912] EXT4-fs error (device loop7): ext4_evict_inode:301: inode #15: comm syz.7.5305: mark_inode_dirty error [ 294.963820][T18912] EXT4-fs (loop7): 1 orphan inode deleted [ 294.975966][T18912] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.989360][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 294.989379][ T29] audit: type=1326 audit(1769146748.795:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.8.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02ae93b58e code=0x7ffc0000 [ 295.007204][T18912] EXT4-fs error (device loop7): ext4_find_dest_de:2050: inode #2: block 13: comm syz.7.5305: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 295.089613][ T29] audit: type=1326 audit(1769146748.895:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.8.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02ae93b58e code=0x7ffc0000 [ 295.189708][ T29] audit: type=1326 audit(1769146748.995:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.8.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02ae93b58e code=0x7ffc0000 [ 295.289880][ T29] audit: type=1326 audit(1769146749.095:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.8.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f02ae93b58e code=0x7ffc0000 [ 295.390315][ T29] audit: type=1326 audit(1769146749.195:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.8.5302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f02ae97acb9 code=0x7ffc0000 [ 295.626592][T13367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.703602][T18931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5312'. [ 295.762214][T18931] siw: device registration error -23 [ 295.847324][T18942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5315'. [ 295.856349][T18942] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5315'. [ 295.962249][T18935] loop8: detected capacity change from 0 to 32768 [ 296.003731][T18935] loop8: p1 p3 < > p4 [ 296.023332][T18935] loop8: p4 size 720896 extends beyond EOD, truncated [ 296.317054][ T29] audit: type=1326 audit(1769146750.125:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 296.318621][T18955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.408647][T18955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.470709][ T29] audit: type=1326 audit(1769146750.125:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 296.496055][ T29] audit: type=1326 audit(1769146750.125:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 296.521185][ T29] audit: type=1326 audit(1769146750.125:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 296.546417][ T29] audit: type=1326 audit(1769146750.125:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.2.5318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 296.633818][T18955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5318'. [ 296.794559][ T3008] loop8: p1 p3 < > p4 [ 296.812592][ T3008] loop8: p4 size 720896 extends beyond EOD, truncated [ 296.871416][ T3008] loop8: p1 p3 < > p4 [ 296.908913][ T3008] loop8: p4 size 720896 extends beyond EOD, truncated [ 297.016869][ T3008] loop8: p1 p3 < > p4 [ 297.044277][ T3008] loop8: p4 size 720896 extends beyond EOD, truncated [ 297.066660][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5324'. [ 297.273571][T18979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.304497][T18979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.615264][T18989] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5330'. [ 297.901306][T18996] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5335'. [ 297.901330][T18996] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 298.241248][T18999] loop6: detected capacity change from 0 to 1024 [ 298.510822][T11472] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 298.510867][T11472] CPU: 1 UID: 0 PID: 11472 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 298.510903][T11472] Tainted: [W]=WARN [ 298.510912][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 298.510926][T11472] Call Trace: [ 298.510934][T11472] [ 298.510945][T11472] __dump_stack+0x1d/0x30 [ 298.510978][T11472] dump_stack_lvl+0x95/0xd0 [ 298.511005][T11472] dump_stack+0x15/0x1b [ 298.511029][T11472] dump_header+0x80/0x240 [ 298.511125][T11472] oom_kill_process+0x295/0x350 [ 298.511157][T11472] out_of_memory+0x97d/0xb80 [ 298.511183][T11472] try_charge_memcg+0x62e/0xa10 [ 298.511224][T11472] charge_memcg+0x51/0xc0 [ 298.511334][T11472] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 298.511414][T11472] __read_swap_cache_async+0x17b/0x2d0 [ 298.511449][T11472] swap_cluster_readahead+0x362/0x3c0 [ 298.511515][T11472] swapin_readahead+0xde/0x840 [ 298.511550][T11472] ? __perf_event_task_sched_in+0xa65/0xad0 [ 298.511576][T11472] ? __rcu_read_unlock+0x4e/0x70 [ 298.511667][T11472] ? swap_cache_get_folio+0x26f/0x280 [ 298.511699][T11472] do_swap_page+0x2f4/0x2140 [ 298.511797][T11472] ? _raw_spin_unlock+0x9/0x30 [ 298.511904][T11472] ? finish_task_switch+0x79/0x280 [ 298.511977][T11472] ? __schedule+0x82d/0xc90 [ 298.512106][T11472] ? __pfx_default_wake_function+0x10/0x10 [ 298.512144][T11472] handle_mm_fault+0xb40/0x3030 [ 298.512263][T11472] ? vma_start_read+0x1c7/0x2c0 [ 298.512296][T11472] do_user_addr_fault+0x62f/0x1050 [ 298.512333][T11472] exc_page_fault+0x62/0xa0 [ 298.512359][T11472] asm_exc_page_fault+0x26/0x30 [ 298.512460][T11472] RIP: 0033:0x7fb68dd05ed7 [ 298.512479][T11472] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 298.512502][T11472] RSP: 002b:00007fff876e2b10 EFLAGS: 00010202 [ 298.512539][T11472] RAX: 0000000000000000 RBX: 0000555588144500 RCX: 00007fb68dd05ed7 [ 298.512626][T11472] RDX: 00007fff876e2b50 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.512641][T11472] RBP: 00007fff876e2bbc R08: 0000000000000000 R09: 0000000000000000 [ 298.512657][T11472] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 298.512671][T11472] R13: 00000000000927c0 R14: 0000000000048dd4 R15: 00007fff876e2c10 [ 298.512692][T11472] [ 298.512728][T11472] memory: usage 307200kB, limit 307200kB, failcnt 1864 [ 298.512745][T11472] memory+swap: usage 307692kB, limit 9007199254740988kB, failcnt 0 [ 298.512854][T11472] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 298.512869][T11472] Memory cgroup stats for /syz2: [ 298.515737][T11472] cache 0 [ 298.515789][T11472] rss 0 [ 298.515797][T11472] shmem 0 [ 298.515806][T11472] mapped_file 0 [ 298.515814][T11472] dirty 0 [ 298.515822][T11472] writeback 0 [ 298.515832][T11472] workingset_refault_anon 232 [ 298.515841][T11472] workingset_refault_file 7037 [ 298.515875][T11472] swap 503808 [ 298.515928][T11472] swapcached 0 [ 298.515936][T11472] pgpgin 474719 [ 298.515980][T11472] pgpgout 474718 [ 298.515989][T11472] pgfault 286089 [ 298.515997][T11472] pgmajfault 439 [ 298.516006][T11472] inactive_anon 0 [ 298.516015][T11472] active_anon 0 [ 298.516097][T11472] inactive_file 0 [ 298.516106][T11472] active_file 4096 [ 298.516115][T11472] unevictable 0 [ 298.516124][T11472] hierarchical_memory_limit 314572800 [ 298.516214][T11472] hierarchical_memsw_limit 9223372036854771712 [ 298.516226][T11472] total_cache 0 [ 298.516311][T11472] total_rss 0 [ 298.516319][T11472] total_shmem 0 [ 298.516327][T11472] total_mapped_file 0 [ 298.516369][T11472] total_dirty 0 [ 298.516379][T11472] total_writeback 0 [ 298.516387][T11472] total_workingset_refault_anon 232 [ 298.516399][T11472] total_workingset_refault_file 7037 [ 298.516408][T11472] total_swap 503808 [ 298.516418][T11472] total_swapcached 0 [ 298.516427][T11472] total_pgpgin 474719 [ 298.516434][T11472] total_pgpgout 474718 [ 298.516483][T11472] total_pgfault 286089 [ 298.516493][T11472] total_pgmajfault 439 [ 298.516502][T11472] total_inactive_anon 0 [ 298.516511][T11472] total_active_anon 0 [ 298.516521][T11472] total_inactive_file 0 [ 298.516530][T11472] total_active_file 4096 [ 298.516540][T11472] total_unevictable 0 [ 298.516549][T11472] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.5332,pid=18987,uid=0 [ 298.516643][T11472] Memory cgroup out of memory: Killed process 18987 (syz.2.5332) total-vm:94000kB, anon-rss:1204kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 298.874911][T18999] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.877549][T18998] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.5335: missing EA_INODE flag [ 298.877701][T18998] EXT4-fs (loop6): Remounting filesystem read-only [ 298.877882][T18998] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 298.878701][T18998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24929 sclass=netlink_route_socket pid=18998 comm=syz.6.5335 [ 299.004117][ T3008] loop8: p1 p3 < > p4 [ 299.298101][ T3008] loop8: p4 size 720896 extends beyond EOD, truncated [ 299.325438][ T3313] udevd[3313]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 299.325618][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 299.327221][ T4347] udevd[4347]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 299.446381][T19011] lo speed is unknown, defaulting to 1000 [ 299.455785][T12991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.469984][T19013] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 299.502702][T19004] xt_socket: unknown flags 0x4c [ 299.534751][T19018] FAULT_INJECTION: forcing a failure. [ 299.534751][T19018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.547900][T19018] CPU: 0 UID: 0 PID: 19018 Comm: syz.2.5341 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 299.547937][T19018] Tainted: [W]=WARN [ 299.547993][T19018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.548006][T19018] Call Trace: [ 299.548061][T19018] [ 299.548071][T19018] __dump_stack+0x1d/0x30 [ 299.548130][T19018] dump_stack_lvl+0x95/0xd0 [ 299.548155][T19018] dump_stack+0x15/0x1b [ 299.548179][T19018] should_fail_ex+0x263/0x280 [ 299.548203][T19018] should_fail+0xb/0x20 [ 299.548224][T19018] should_fail_usercopy+0x1a/0x20 [ 299.548327][T19018] strncpy_from_user+0x27/0x250 [ 299.548458][T19018] getname_flags+0xad/0x3b0 [ 299.548485][T19018] do_sys_openat2+0x60/0x150 [ 299.548516][T19018] __x64_sys_openat+0xf2/0x120 [ 299.548635][T19018] x64_sys_call+0x2b07/0x3000 [ 299.548666][T19018] do_syscall_64+0xc0/0x2a0 [ 299.548742][T19018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.548766][T19018] RIP: 0033:0x7fb68dd4acb9 [ 299.548785][T19018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.548822][T19018] RSP: 002b:00007fb68c7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 299.548847][T19018] RAX: ffffffffffffffda RBX: 00007fb68dfc5fa0 RCX: 00007fb68dd4acb9 [ 299.548907][T19018] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 299.548921][T19018] RBP: 00007fb68c7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 299.548945][T19018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.548961][T19018] R13: 00007fb68dfc6038 R14: 00007fb68dfc5fa0 R15: 00007fff876e2818 [ 299.549056][T19018] [ 299.774156][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5342'. [ 299.784466][T19023] pimreg: tun_chr_ioctl cmd 1074025677 [ 299.785610][T19016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.801498][T19023] pimreg: linktype set to 780 [ 299.808795][T19016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.885565][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5343'. [ 299.903875][T19033] loop7: detected capacity change from 0 to 1024 [ 299.918296][T19033] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.929492][T19033] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 299.946928][T19023] vlan2: entered allmulticast mode [ 299.954528][T19016] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5340'. [ 299.964267][T19023] dummy0: entered allmulticast mode [ 299.977442][T19033] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #2: comm syz.7.5345: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 2, max 1(4), depth 0(0) [ 299.993310][T19011] syzkaller1: entered promiscuous mode [ 299.997062][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 299.997078][ T29] audit: type=1326 audit(1769146753.785:4292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 300.000706][T19011] syzkaller1: entered allmulticast mode [ 300.006927][ T29] audit: type=1326 audit(1769146753.785:4293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 300.007570][T19033] EXT4-fs (loop7): no journal found [ 300.027760][ T29] audit: type=1326 audit(1769146753.835:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 300.098579][ T29] audit: type=1326 audit(1769146753.845:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 300.123911][T19035] loop2: detected capacity change from 0 to 1024 [ 300.130470][ T29] audit: type=1326 audit(1769146753.845:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb68dd4acb9 code=0x7ffc0000 [ 300.154653][T19035] EXT4-fs: Ignoring removed bh option [ 300.154693][T19035] EXT4-fs: inline encryption not supported [ 300.154715][T19035] ext4: Unknown parameter 'obj_role' [ 300.167149][T19011] loop8: detected capacity change from 0 to 128 [ 300.174160][ T29] audit: type=1326 audit(1769146753.905:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb68dd4aa22 code=0x7ffc0000 [ 300.205506][ T29] audit: type=1326 audit(1769146753.905:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb68dd0b58e code=0x7ffc0000 [ 300.230393][ T29] audit: type=1326 audit(1769146753.905:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb68dd4aae7 code=0x7ffc0000 [ 300.255775][ T29] audit: type=1326 audit(1769146753.935:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb68dd0b58e code=0x7ffc0000 [ 300.280628][ T29] audit: type=1326 audit(1769146753.935:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19022 comm="syz.2.5343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb68dd4a94b code=0x7ffc0000 [ 300.324671][T19039] lo speed is unknown, defaulting to 1000 [ 300.501107][T19043] netlink: 164 bytes leftover after parsing attributes in process `syz.7.5348'. [ 300.522116][T19039] syzkaller1: entered promiscuous mode [ 300.529541][T19039] syzkaller1: entered allmulticast mode [ 300.541458][T19039] loop1: detected capacity change from 0 to 128 [ 300.556324][T19038] syz.1.5346: attempt to access beyond end of device [ 300.556324][T19038] loop1: rw=2049, sector=138, nr_sectors = 6 limit=128 [ 300.671884][T19058] sch_fq: defrate 4294967295 ignored. [ 300.778580][T19061] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.835383][T19054] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 300.862125][T19061] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.924067][T19061] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.015291][T19061] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.082605][ T37] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.097912][ T37] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.115203][ T37] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.127919][ T37] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.424490][T19071] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5358'. [ 301.436607][T19071] siw: device registration error -23 [ 301.468169][T19073] loop7: detected capacity change from 0 to 1024 [ 301.476013][T19073] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.488981][T19073] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 301.497063][T19073] EXT4-fs (loop7): orphan cleanup on readonly fs [ 301.508133][T19073] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5359: Failed to acquire dquot type 0 [ 301.526102][T19073] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5359: Failed to acquire dquot type 0 [ 301.556490][T19073] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.5359: Freeing blocks not in datazone - block = 0, count = 4096 [ 301.587525][T19073] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.5359: Failed to acquire dquot type 0 [ 301.613738][T19073] EXT4-fs (loop7): 1 orphan inode deleted [ 301.626372][T19073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.640178][T19060] Cannot find del_set index 2 as target [ 301.676406][T13367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.724093][T19083] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5365'. [ 301.763994][T19086] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19086 comm=syz.7.5364 [ 301.789881][T19092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5368'. [ 301.994320][T19112] loop8: detected capacity change from 0 to 512 [ 302.007631][T19112] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 302.039170][T19112] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.5376: casefold flag without casefold feature [ 302.060520][T19112] EXT4-fs (loop8): Remounting filesystem read-only [ 302.075294][T19112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.217875][T14669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.260007][T19125] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5380'. [ 302.269181][T19125] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 302.334949][T19125] loop8: detected capacity change from 0 to 1024 [ 302.359082][T19125] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.385498][T19125] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #11: comm syz.8.5380: missing EA_INODE flag [ 302.411872][T19125] EXT4-fs (loop8): Remounting filesystem read-only [ 302.427207][T19125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24929 sclass=netlink_route_socket pid=19125 comm=syz.8.5380 [ 302.544974][T14669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.641283][T19138] FAULT_INJECTION: forcing a failure. [ 302.641283][T19138] name failslab, interval 1, probability 0, space 0, times 0 [ 302.655195][T19138] CPU: 0 UID: 0 PID: 19138 Comm: syz.8.5383 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.655229][T19138] Tainted: [W]=WARN [ 302.655237][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.655251][T19138] Call Trace: [ 302.655259][T19138] [ 302.655269][T19138] __dump_stack+0x1d/0x30 [ 302.655380][T19138] dump_stack_lvl+0x95/0xd0 [ 302.655523][T19138] dump_stack+0x15/0x1b [ 302.655548][T19138] should_fail_ex+0x263/0x280 [ 302.655570][T19138] should_failslab+0x8c/0xb0 [ 302.655592][T19138] __kmalloc_node_noprof+0xbd/0x590 [ 302.655619][T19138] ? __vmalloc_node_range_noprof+0x428/0x12b0 [ 302.655704][T19138] __vmalloc_node_range_noprof+0x428/0x12b0 [ 302.655733][T19138] ? terminate_walk+0x1e6/0x210 [ 302.655762][T19138] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 302.655827][T19138] __vmalloc_noprof+0xa4/0xf0 [ 302.655852][T19138] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 302.655929][T19138] bpf_prog_alloc_no_stats+0x47/0x380 [ 302.655967][T19138] ? bpf_prog_alloc+0x2a/0x150 [ 302.655999][T19138] bpf_prog_alloc+0x3c/0x150 [ 302.656071][T19138] __get_filter+0x92/0x230 [ 302.656095][T19138] sk_attach_filter+0x20/0xe0 [ 302.656117][T19138] tun_attach_filter+0x99/0x1b0 [ 302.656141][T19138] __tun_chr_ioctl+0x114a/0x14d0 [ 302.656174][T19138] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 302.656228][T19138] tun_chr_ioctl+0x27/0x40 [ 302.656255][T19138] __se_sys_ioctl+0xce/0x140 [ 302.656292][T19138] __x64_sys_ioctl+0x43/0x50 [ 302.656391][T19138] x64_sys_call+0x14b0/0x3000 [ 302.656421][T19138] do_syscall_64+0xc0/0x2a0 [ 302.656456][T19138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.656490][T19138] RIP: 0033:0x7f02ae97acb9 [ 302.656507][T19138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.656526][T19138] RSP: 002b:00007f02ad3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.656553][T19138] RAX: ffffffffffffffda RBX: 00007f02aebf5fa0 RCX: 00007f02ae97acb9 [ 302.656572][T19138] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000004 [ 302.656600][T19138] RBP: 00007f02ad3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.656614][T19138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.656628][T19138] R13: 00007f02aebf6038 R14: 00007f02aebf5fa0 R15: 00007ffd13566fa8 [ 302.656698][T19138] [ 302.656709][T19138] syz.8.5383: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 302.926000][T19138] CPU: 0 UID: 0 PID: 19138 Comm: syz.8.5383 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 302.926039][T19138] Tainted: [W]=WARN [ 302.926104][T19138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.926119][T19138] Call Trace: [ 302.926129][T19138] [ 302.926140][T19138] __dump_stack+0x1d/0x30 [ 302.926172][T19138] dump_stack_lvl+0x95/0xd0 [ 302.926201][T19138] dump_stack+0x15/0x1b [ 302.926272][T19138] warn_alloc+0x145/0x1c0 [ 302.926311][T19138] __vmalloc_node_range_noprof+0x7d9/0x12b0 [ 302.926344][T19138] ? terminate_walk+0x1e6/0x210 [ 302.926380][T19138] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 302.926444][T19138] __vmalloc_noprof+0xa4/0xf0 [ 302.926472][T19138] ? bpf_prog_alloc_no_stats+0x47/0x380 [ 302.926512][T19138] bpf_prog_alloc_no_stats+0x47/0x380 [ 302.926612][T19138] ? bpf_prog_alloc+0x2a/0x150 [ 302.926643][T19138] bpf_prog_alloc+0x3c/0x150 [ 302.926730][T19138] __get_filter+0x92/0x230 [ 302.926755][T19138] sk_attach_filter+0x20/0xe0 [ 302.926782][T19138] tun_attach_filter+0x99/0x1b0 [ 302.926840][T19138] __tun_chr_ioctl+0x114a/0x14d0 [ 302.926866][T19138] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 302.926887][T19138] tun_chr_ioctl+0x27/0x40 [ 302.926931][T19138] __se_sys_ioctl+0xce/0x140 [ 302.927042][T19138] __x64_sys_ioctl+0x43/0x50 [ 302.927077][T19138] x64_sys_call+0x14b0/0x3000 [ 302.927157][T19138] do_syscall_64+0xc0/0x2a0 [ 302.927187][T19138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.927215][T19138] RIP: 0033:0x7f02ae97acb9 [ 302.927313][T19138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.927332][T19138] RSP: 002b:00007f02ad3d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 302.927425][T19138] RAX: ffffffffffffffda RBX: 00007f02aebf5fa0 RCX: 00007f02ae97acb9 [ 302.927443][T19138] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000004 [ 302.927458][T19138] RBP: 00007f02ad3d7090 R08: 0000000000000000 R09: 0000000000000000 [ 302.927494][T19138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.927508][T19138] R13: 00007f02aebf6038 R14: 00007f02aebf5fa0 R15: 00007ffd13566fa8 [ 302.927574][T19138] [ 302.927584][T19138] Mem-Info: [ 302.995699][T19143] netlink: 164 bytes leftover after parsing attributes in process `syz.6.5385'. [ 302.996331][T19138] active_anon:19339 inactive_anon:10332 isolated_anon:0 [ 302.996331][T19138] active_file:21345 inactive_file:2430 isolated_file:0 [ 302.996331][T19138] unevictable:16918 dirty:242 writeback:0 [ 302.996331][T19138] slab_reclaimable:3798 slab_unreclaimable:19842 [ 302.996331][T19138] mapped:37890 shmem:18539 pagetables:1949 [ 302.996331][T19138] sec_pagetables:0 bounce:0 [ 302.996331][T19138] kernel_misc_reclaimable:0 [ 302.996331][T19138] free:1704703 free_pcp:76073 free_cma:0 [ 303.219466][T19138] Node 0 active_anon:86172kB inactive_anon:33788kB active_file:85380kB inactive_file:9720kB unevictable:67672kB isolated(anon):0kB isolated(file):0kB mapped:166524kB dirty:968kB writeback:0kB shmem:75200kB kernel_stack:5024kB pagetables:7912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 303.219605][T19138] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 303.219691][T19138] lowmem_reserve[]: 0 2879 7858 7858 [ 303.219727][T19138] Node 0 DMA32 free:2945488kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949016kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 303.219859][T19138] lowmem_reserve[]: 0 0 4978 4978 [ 303.219891][T19138] Node 0 Normal free:3847512kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86172kB inactive_anon:33788kB active_file:85380kB inactive_file:9720kB unevictable:67672kB writepending:1072kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:301224kB local_pcp:202620kB free_cma:0kB [ 303.220036][T19138] lowmem_reserve[]: 0 0 0 0 [ 303.220065][T19138] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 303.220304][T19138] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945488kB [ 303.220580][T19138] Node 0 Normal: 2194*4kB (UME) 1246*8kB (UME) 2022*16kB (UME) 2084*32kB (UME) 1285*64kB (UME) 862*128kB (UM) 681*256kB (UME) 590*512kB (UM) 497*1024kB (UM) 276*2048kB (UM) 485*4096kB (UM) = 3847512kB [ 303.220797][T19138] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 303.220814][T19138] 59929 total pagecache pages [ 303.220821][T19138] 463 pages in swap cache [ 303.220829][T19138] Free swap = 13836kB [ 303.220836][T19138] Total swap = 124996kB [ 303.220845][T19138] 2097051 pages RAM [ 303.220892][T19138] 0 pages HighMem/MovableOnly [ 303.220899][T19138] 81397 pages reserved [ 303.298259][T19151] netlink: 'syz.2.5384': attribute type 2 has an invalid length. [ 303.298303][T19151] netlink: 'syz.2.5384': attribute type 2 has an invalid length. [ 303.423864][T19161] loop2: detected capacity change from 0 to 512 [ 303.429080][T19161] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 303.431994][ T3312] udevd[3312]: incorrect ext4 checksum on /dev/loop2 [ 303.621618][T19170] loop1: detected capacity change from 0 to 512 [ 303.624113][T19170] EXT4-fs (loop1): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 303.653670][ T3312] udevd[3312]: incorrect ext4 checksum on /dev/loop1 [ 303.917655][T19174] loop8: detected capacity change from 0 to 512 [ 303.940362][T19174] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 303.944612][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5397'. [ 303.954532][T19184] siw: device registration error -23 [ 303.983945][T19174] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #17: comm syz.8.5393: inode has both inline data and extents flags [ 303.984173][T19174] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.5393: couldn't read orphan inode 17 (err -117) [ 303.984743][T19174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.011292][T19185] ALSA: seq fatal error: cannot create timer (-19) [ 304.098950][T19200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5402'. [ 304.121937][T19200] vlan2: entered promiscuous mode [ 304.121961][T19200] team0: entered promiscuous mode [ 304.216472][T19205] FAULT_INJECTION: forcing a failure. [ 304.216472][T19205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.229611][T19205] CPU: 0 UID: 0 PID: 19205 Comm: syz.6.5405 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.229727][T19205] Tainted: [W]=WARN [ 304.229735][T19205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.229751][T19205] Call Trace: [ 304.229760][T19205] [ 304.229770][T19205] __dump_stack+0x1d/0x30 [ 304.229818][T19205] dump_stack_lvl+0x95/0xd0 [ 304.229845][T19205] dump_stack+0x15/0x1b [ 304.229869][T19205] should_fail_ex+0x263/0x280 [ 304.229895][T19205] should_fail+0xb/0x20 [ 304.229993][T19205] should_fail_usercopy+0x1a/0x20 [ 304.230084][T19205] _copy_from_user+0x1c/0xb0 [ 304.230112][T19205] kstrtouint_from_user+0x69/0xf0 [ 304.230137][T19205] ? 0xffffffff81000000 [ 304.230154][T19205] ? selinux_file_permission+0x1e1/0x320 [ 304.230243][T19205] proc_fail_nth_write+0x50/0x160 [ 304.230275][T19205] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 304.230384][T19205] vfs_write+0x269/0x9f0 [ 304.230416][T19205] ? __rcu_read_unlock+0x4e/0x70 [ 304.230436][T19205] ? __fget_files+0x184/0x1c0 [ 304.230492][T19205] ? mutex_lock+0x57/0x90 [ 304.230519][T19205] ksys_write+0xdc/0x1a0 [ 304.230543][T19205] __x64_sys_write+0x40/0x50 [ 304.230566][T19205] x64_sys_call+0x2847/0x3000 [ 304.230650][T19205] do_syscall_64+0xc0/0x2a0 [ 304.230679][T19205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.230704][T19205] RIP: 0033:0x7feb0717b58e [ 304.230721][T19205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 304.230744][T19205] RSP: 002b:00007feb05c16fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.230830][T19205] RAX: ffffffffffffffda RBX: 00007feb05c176c0 RCX: 00007feb0717b58e [ 304.230884][T19205] RDX: 0000000000000001 RSI: 00007feb05c170a0 RDI: 0000000000000004 [ 304.230900][T19205] RBP: 00007feb05c17090 R08: 0000000000000000 R09: 0000000000000000 [ 304.230916][T19205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.230933][T19205] R13: 00007feb07436038 R14: 00007feb07435fa0 R15: 00007fff8d87f038 [ 304.230955][T19205] [ 304.522206][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5409'. [ 304.531981][T19215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 304.551350][T19215] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.551412][T14669] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.587296][T19217] siw: device registration error -23 [ 304.601302][T19215] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 3: comm syz.6.5408: lblock 3 mapped to illegal pblock 3 (length 3) [ 304.676979][T19215] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 304.689366][T19215] EXT4-fs (loop6): This should not happen!! Data will be lost [ 304.689366][T19215] [ 304.707213][T19225] FAULT_INJECTION: forcing a failure. [ 304.707213][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 304.719954][T19225] CPU: 1 UID: 0 PID: 19225 Comm: syz.1.5412 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 304.719992][T19225] Tainted: [W]=WARN [ 304.720000][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.720021][T19225] Call Trace: [ 304.720029][T19225] [ 304.720037][T19225] __dump_stack+0x1d/0x30 [ 304.720065][T19225] dump_stack_lvl+0x95/0xd0 [ 304.720086][T19225] dump_stack+0x15/0x1b [ 304.720164][T19225] should_fail_ex+0x263/0x280 [ 304.720190][T19225] should_failslab+0x8c/0xb0 [ 304.720215][T19225] __kvmalloc_node_noprof+0x148/0x680 [ 304.720240][T19225] ? xt_alloc_table_info+0x40/0x80 [ 304.720344][T19225] ? should_fail_ex+0xd9/0x280 [ 304.720421][T19225] xt_alloc_table_info+0x40/0x80 [ 304.720557][T19225] do_ipt_set_ctl+0x5dc/0x8e0 [ 304.720628][T19225] nf_setsockopt+0x199/0x1b0 [ 304.720736][T19225] ip_setsockopt+0x102/0x110 [ 304.720763][T19225] udp_setsockopt+0x99/0xb0 [ 304.720795][T19225] sock_common_setsockopt+0x69/0x80 [ 304.720867][T19225] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 304.720973][T19225] __sys_setsockopt+0x184/0x200 [ 304.721004][T19225] __x64_sys_setsockopt+0x64/0x80 [ 304.721029][T19225] x64_sys_call+0x21d5/0x3000 [ 304.721054][T19225] do_syscall_64+0xc0/0x2a0 [ 304.721172][T19225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.721198][T19225] RIP: 0033:0x7fa69677acb9 [ 304.721216][T19225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.721234][T19225] RSP: 002b:00007fa6951d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 304.721321][T19225] RAX: ffffffffffffffda RBX: 00007fa6969f5fa0 RCX: 00007fa69677acb9 [ 304.721338][T19225] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 304.721353][T19225] RBP: 00007fa6951d7090 R08: 00000000000003a8 R09: 0000000000000000 [ 304.721369][T19225] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 304.721384][T19225] R13: 00007fa6969f6038 R14: 00007fa6969f5fa0 R15: 00007ffca6af5f18 [ 304.721408][T19225] [ 305.019489][ T6029] EXT4-fs error (device loop6): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:15: lblock 8 mapped to illegal pblock 8 (length 8) [ 305.054775][ T6029] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 305.055081][T19233] set_capacity_and_notify: 1 callbacks suppressed [ 305.055097][T19233] loop2: detected capacity change from 0 to 512 [ 305.067119][ T6029] EXT4-fs (loop6): This should not happen!! Data will be lost [ 305.067119][ T6029] [ 305.105424][T19233] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 305.115810][T19233] EXT4-fs (loop2): filesystem is read-only [ 305.121953][ T1959] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:12: bg 0: block 112: padding at end of block bitmap is not set [ 305.140017][T19237] siw: device registration error -23 [ 305.146434][T19238] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5417'. [ 305.155629][ T1959] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65 with max blocks 3 with error 117 [ 305.155668][ T1959] EXT4-fs (loop6): This should not happen!! Data will be lost [ 305.155668][ T1959] [ 305.180104][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5417'. [ 305.183143][T12991] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 305.202195][T19240] loop8: detected capacity change from 0 to 512 [ 305.208876][T19233] EXT4-fs (loop2): failed to initialize system zone (-117) [ 305.218254][T19240] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 305.254228][T19233] EXT4-fs (loop2): mount failed [ 305.260561][ T3312] udevd[3312]: incorrect ext4 checksum on /dev/loop8 [ 305.290324][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 305.290343][ T29] audit: type=1326 audit(1769146759.095:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.334914][T19248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.352131][T19248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.374149][ T29] audit: type=1326 audit(1769146759.135:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.398920][ T29] audit: type=1326 audit(1769146759.135:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.423634][ T29] audit: type=1326 audit(1769146759.135:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.447278][ T29] audit: type=1326 audit(1769146759.145:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.473554][ T29] audit: type=1326 audit(1769146759.145:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.486665][T19262] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5416'. [ 305.498519][ T29] audit: type=1326 audit(1769146759.145:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.531100][ T29] audit: type=1326 audit(1769146759.145:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb071bacb9 code=0x7ffc0000 [ 305.555894][ T29] audit: type=1326 audit(1769146759.145:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feb0717b58e code=0x7ffc0000 [ 305.555978][ T29] audit: type=1326 audit(1769146759.145:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19246 comm="syz.6.5416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb071ba94b code=0x7ffc0000 [ 305.619746][T19269] netlink: 'syz.2.5427': attribute type 5 has an invalid length. [ 305.642567][T19271] x_tables: ip_tables: osf match: only valid for protocol 6 [ 305.671056][T19273] siw: device registration error -23 [ 305.714103][T19277] siw: device registration error -23 [ 305.780147][T19283] lo speed is unknown, defaulting to 1000 [ 305.907945][T19283] loop1: detected capacity change from 0 to 512 [ 305.915566][T19283] EXT4-fs: Ignoring removed nobh option [ 305.921726][T19283] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 305.931981][T19283] EXT4-fs (loop1): 1 truncate cleaned up [ 305.939008][T19283] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.033828][T12468] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.119301][T19303] siw: device registration error -23 [ 306.158125][T19307] siw: device registration error -23 [ 306.320617][T19327] sg_write: data in/out 458719/57 bytes for SCSI command 0x0-- guessing data in; [ 306.320617][T19327] program syz.8.5451 not setting count and/or reply_len properly [ 306.361677][T19332] siw: device registration error -23 [ 306.371286][T19333] siw: device registration error -23 [ 306.379376][T19334] loop6: detected capacity change from 0 to 736 [ 306.394220][T19334] iso9660: Bad value for 'uid' [ 306.399060][T19334] iso9660: Bad value for 'uid' [ 306.410798][T19336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.430477][T19336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.446555][T19338] loop8: detected capacity change from 0 to 128 [ 306.478051][T19340] loop6: detected capacity change from 0 to 736 [ 306.485298][T19340] iso9660: Bad value for 'uid' [ 306.490115][T19340] iso9660: Bad value for 'uid' [ 306.748020][T19362] siw: device registration error -23 [ 306.764323][T19364] __nla_validate_parse: 8 callbacks suppressed [ 306.764342][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5466'. [ 306.783633][T19364] siw: device registration error -23 [ 306.803118][T19365] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 306.829560][T19365] xt_socket: unknown flags 0x4c [ 306.842178][T19343] ================================================================== [ 306.842217][T19343] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 306.842251][T19343] [ 306.842258][T19343] write to 0xffff88811a465114 of 4 bytes by task 19338 on cpu 0: [ 306.842283][T19343] xas_set_mark+0x12b/0x140 [ 306.842314][T19343] __folio_start_writeback+0x17b/0x370 [ 306.842349][T19343] __block_write_full_folio+0x53a/0x8f0 [ 306.842378][T19343] block_write_full_folio+0x2c1/0x2e0 [ 306.842402][T19343] mpage_writepages+0x710/0x1310 [ 306.842434][T19343] fat_writepages+0x24/0x30 [ 306.842462][T19343] do_writepages+0x1c6/0x310 [ 306.842505][T19343] file_write_and_wait_range+0x178/0x2f0 [ 306.842539][T19343] __generic_file_fsync+0x46/0x160 [ 306.842563][T19343] fat_file_fsync+0x49/0x100 [ 306.842584][T19343] vfs_fsync_range+0x10d/0x130 [ 306.842605][T19343] generic_file_write_iter+0x1ba/0x310 [ 306.842630][T19343] iter_file_splice_write+0x6bc/0xa80 [ 306.842667][T19343] direct_splice_actor+0x156/0x2a0 [ 306.842689][T19343] splice_direct_to_actor+0x311/0x670 [ 306.842723][T19343] do_splice_direct+0x119/0x1a0 [ 306.842760][T19343] do_sendfile+0x380/0x650 [ 306.842788][T19343] __x64_sys_sendfile64+0x105/0x150 [ 306.842815][T19343] x64_sys_call+0x2db1/0x3000 [ 306.842843][T19343] do_syscall_64+0xc0/0x2a0 [ 306.891541][T19372] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5468'. [ 306.893782][T19343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.893816][T19343] [ 306.893824][T19343] read to 0xffff88811a465114 of 4 bytes by task 19343 on cpu 1: [ 306.893845][T19343] xas_find_marked+0x5d7/0x620 [ 306.893884][T19343] find_get_entry+0x5d/0x380 [ 306.893908][T19343] filemap_get_folios_tag+0xb6/0x230 [ 306.893933][T19343] filemap_fdatawait_range+0x88/0x1e0 [ 306.893972][T19343] __writeback_single_inode+0xdb/0x7b0 [ 306.894006][T19343] writeback_single_inode+0x16d/0x3f0 [ 306.894034][T19343] sync_inode_metadata+0x6e/0xa0 [ 306.894065][T19343] __generic_file_fsync+0x109/0x160 [ 306.894086][T19343] fat_file_fsync+0x49/0x100 [ 306.894111][T19343] vfs_fsync_range+0x10d/0x130 [ 306.894136][T19343] generic_file_write_iter+0x1ba/0x310 [ 306.894166][T19343] iter_file_splice_write+0x6bc/0xa80 [ 306.894202][T19343] direct_splice_actor+0x156/0x2a0 [ 306.894223][T19343] splice_direct_to_actor+0x311/0x670 [ 306.894263][T19343] do_splice_direct+0x119/0x1a0 [ 306.894300][T19343] do_sendfile+0x380/0x650 [ 306.894326][T19343] __x64_sys_sendfile64+0x105/0x150 [ 306.894353][T19343] x64_sys_call+0x2db1/0x3000 [ 306.894383][T19343] do_syscall_64+0xc0/0x2a0 [ 306.894410][T19343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.894435][T19343] [ 306.894440][T19343] value changed: 0x0a000021 -> 0x04000021 [ 306.894455][T19343] [ 306.894460][T19343] Reported by Kernel Concurrency Sanitizer on: [ 306.894478][T19343] CPU: 1 UID: 0 PID: 19343 Comm: syz.8.5456 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 306.894514][T19343] Tainted: [W]=WARN [ 306.894523][T19343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.894538][T19343] ================================================================== [ 306.904417][T19373] loop7: detected capacity change from 0 to 256 [ 307.168082][T19373] msdos: Unknown parameter '01777777777777777777777' [ 307.208603][T19367] loop7: detected capacity change from 0 to 2048 [ 307.244347][T19367] loop7: p3 < > p4 < > [ 307.248544][T19367] loop7: partition table partially beyond EOD, truncated [ 307.258149][T19367] loop7: p3 start 4284289 is beyond EOD, truncated