last executing test programs: 16m42.149154576s ago: executing program 32 (id=22): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x1ff, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8ec, 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x35c4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)={0x60, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x30, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44001}, 0x4c020) 15m0.802371164s ago: executing program 33 (id=720): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x1, 0x40, 0x9e, 0xffff, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x65, 0x0, 0x82, 0x0, 0x0, @broadcast, @rand_addr=0x64010101, {[@noop, @noop, @generic={0x83, 0x4, "71e4"}, @ra={0x94, 0x4}]}}}}}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x8, 0x972b7f4f3f1deeec) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) fcntl$setpipe(r3, 0x407, 0xb) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) socket$inet6(0xa, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r7, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r6, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x80, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) 13m55.475531759s ago: executing program 34 (id=1306): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x80) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000890}, 0x880) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x8, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) r1 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x4, 0x1, 0xa1, 0x3, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000440)={0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x31}, &(0x7f0000000300)=""/2, 0x2, &(0x7f0000000340), &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3, {r1}}, 0x58) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x430, 0x2b, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@nested={0x41c, 0x111, 0x0, 0x1, [@nested={0x39, 0x7a, 0x0, 0x1, [@typed={0xc, 0x102, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x109}, @generic="4611540ad78c550dea8f9a62a6", @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x24}, @typed={0x8, 0xf, 0x0, 0x0, @pid=r3}, @nested={0x4, 0xe5}]}, @generic="3f8681ec873ac1c95058425babba9a514e0a61a5892f7f7a900bb4e2c0c59292b58a3cf3a8079a8ee86b3083fac0a136d49bf2645064c422f2277c582a2a41295cb497c8b944e65867c9db14d599b300dd654a98c1554a519f299010d79b58e5b13bbdc232768ff94d4712ea1afa20afefe08773948a8bc8b305b011d33c8a9dd8a8ce16885b32ffcaa5076716dea18a62fbb4933c5e3bdccb9e7f397b376056ccbc256ea89e0e728925c242ec75fc869ed77cff8ce924d7e89f6da2f4ec8ff70366ba646edff49d4e5befb7f1f98460f7f18a8b9d1fef1ceb135851b028e29130308e6b", @nested={0x256, 0x101, 0x0, 0x1, [@generic="6b7a6d4ae58914a50e0a0bce391f74515e35488fe2ef05defe6ead367d53e27daaf876cae6fcf90cb7cd352e9871c4d7a1cc11a2f077018884cda0a408284248971dcef201b78f6100015d8b88f53388614327678b862fd96a471577d6a6516bda4ba9d4c56ec3425289d6e9cc9fca8d6092082110", @typed={0x8, 0xfc, 0x0, 0x0, @pid}, @generic="24738dea72bf70e34c3d6c45155232414c77c5c4b35a16e2b71fddcdb65e6e8d741fa11a9cfd329d0e6159940fbd1a84a7ba32e1d2f9ba731a2d59c4e1aebdc6bb257c567b22d5cbd515ba9df1c81431330dfd81afbbb77ae1c1694efab7f5526e26bfd23197d2af73f9f47869653c40c24537e624c8879bf43b7d0badcf06fb178ae405f10fb73512354d45172a53579f04db16e1fcd74d7116d5e3944adba76bf9799b", @typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x95}, @nested={0x4, 0xb5}, @generic="a9e806fba81ba44b8590deb0b31bae17c6338960d31a445b162dd25861856b9d16c7069efe44713b1baa2b33e9c1889ca1ebc79d8cda13ca454042e55e487f7bbdcca07e5ea22fdbf80e804fc22434063e65e99d407c736ba8", @generic="6d9efc3a1fe8b9e28cf7218e5184ecb35d527ceead8be9a4e758726958f6efa4046f4a6d68746caefba9de75aa0604ca10ad6094881a6aaec5049fcf0cb6cb973816ea79ab6671b6109697dcd02274666df50e8c3e9874b2e49d9c968f015c55cd67950d7e61404d9a450381b66261047ef8db0dfad5bbe80b17e34fa26a967b50dccceabf71c49a86435f0863", @generic="cfc0071e652387573769b2bf60c2f345c7287c02fee43d80f97a13c3152a87ea732b768e6d4ef7", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x9f, 0x23, 0x0, 0x1, [@generic="227ed3d42ddce2fff24cf8448bb2ff9e2970953d30e23c0d8dd860b3514a360b1fcca2dbe92a240e8170c3772ab0bb3517cf30b2b7531abc1406a83641646bfe623b42b876c4c158dee47ebb7e635d016857fe251fe828704aac3188f145abdd63d84d3ca0ce51039579c43af3f99e00cd30bce106511694d16926ae1bce0956791dcf249d0ab67eebbe71980b0470e5d3a731cc684457", @typed={0x4, 0xae}]}]}]}, 0x430}, 0x1, 0x0, 0x0, 0x801}, 0x40070) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f00000001c0)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0xa}}, {@norecovery}, {@noauto_da_alloc}, {@minixdf}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@norecovery}, {@nouid32}]}, 0x3, 0x5ac, &(0x7f0000001000)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./file1\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x2027, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13m48.613764563s ago: executing program 35 (id=1363): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x231c6c12, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsold}, {@grpquota}, {@stripe={'stripe', 0x3d, 0xffff}}, {@grpjquota, 0x2e}, {@nouid32}, {@sysvgroups}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@jqfmt_vfsold}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==") openat(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) 11m37.425100532s ago: executing program 36 (id=2463): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x12) sendfile(r0, r0, 0x0, 0x7e4000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0xb, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x7, 0x941]}, 0x8) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) io_uring_enter(0xffffffffffffffff, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) ioctl$PPPIOCSACTIVE(r2, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/39, 0x27}], 0x1) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x3ff, @empty, 0xfffffffe}, 0x1c) 10m50.802785332s ago: executing program 37 (id=2834): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x40000008, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b38ff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 9m59.478577644s ago: executing program 38 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") (async) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') (async) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x277) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0xc) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9}, 0x0, 0x0, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, r1, 0x1) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x0, 0x0, 0x20, 0x40, 0x0, 0x200, 0x20, 0x459ed67272d2cca9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0xb1c}, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xffdf, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x3) unshare(0x22020400) (async) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) poll(0x0, 0x0, 0x9) (async) syz_open_procfs(0x0, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000140)="f79b76b1a967f9031fa4bbcbe2e63dd34000000000000000", 0x18}, {&(0x7f00000029c0)="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", 0x699}], 0x2) 9m4.959783452s ago: executing program 39 (id=3448): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1404, 0x800, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}}, 0x808) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x6, 0x8) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x7fffffff, 0x3, 0x9, 0x5, 0x5, 0x19, 0x8, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x7, 0x7, 0x6, 0x101, 0x3}}, &(0x7f0000000400)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000440)=@sack_info={r9, 0x9, 0x6}, &(0x7f0000000480)=0xc) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), r2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r10, 0x0, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c850}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000008c0)={r7, 0x20, &(0x7f0000000880)={&(0x7f0000000740)=""/230, 0xe6, 0x0, &(0x7f0000000840)=""/49, 0x31}}, 0x10) r12 = signalfd4(r4, &(0x7f0000000900)={[0x9]}, 0x8, 0x100000) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000600)=@raw=[@alu={0x7, 0x0, 0xa, 0x0, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0xcb}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x72, &(0x7f0000000680)=""/114, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x3, 0x0, 0x3, 0x8001}, 0x10, r11, r6, 0x9, &(0x7f0000000940)=[r7, r12, r7, r6, r7, r6, r7], &(0x7f0000000980)=[{0x3, 0x5, 0x9, 0xc}, {0x4, 0x3, 0xe, 0x8}, {0x4, 0x3, 0x4, 0x7}, {0x3, 0x1, 0x0, 0x8}, {0x5, 0x1, 0xe, 0x5}, {0x0, 0x1, 0xd, 0x2}, {0x3, 0x4, 0xf, 0x9}, {0x0, 0x4, 0x5, 0x7}, {0x3, 0x4, 0x2}], 0x10, 0x4}, 0x94) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000b00), 0x2, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r14, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r15, 0x400, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4010) ioctl$FIONCLEX(r13, 0x5450) close(r4) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r16) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r12, 0x89f3, &(0x7f0000000e80)={'gretap0\x00', &(0x7f0000000dc0)={'tunl0\x00', 0x0, 0x80, 0x40, 0x88, 0x6, {{0x1f, 0x4, 0x1, 0x6, 0x7c, 0x67, 0x0, 0xbe, 0x2f, 0x0, @multicast1, @remote, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x4, "1450"}, {0x6, 0x4, "a4df"}]}, @timestamp_prespec={0x44, 0x2c, 0x99, 0x3, 0x1, [{@multicast2, 0xb}, {@empty, 0xfffffff6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6f}, {@broadcast, 0xfffffffd}, {@local, 0x9}]}, @noop, @ssrr={0x89, 0x7, 0x6, [@multicast2]}, @timestamp={0x44, 0x20, 0xc4, 0x0, 0x5, [0x2, 0x7f, 0x4, 0x200, 0x77e, 0x400, 0xc]}, @ra={0x94, 0x4}]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000cc0)="b728605544f35470df1ca03fdc535cba08369ba2e4686fc96af73232b6fb9795f13704a85cf367e0819075fe8fa5443c8d68b91b4baf2e0008c4b8a7a575909cbc6f89f7ae5959cdbe7a32f7be654650e08ceb0b6df0a4b9f927e5e4bf0c7abe160f6e4a9859c0239b562203fa4b6b563675df0d57b32feb6519bfc0f7acafbfd4850efd1673b8868db8f6c6824bb434e9d1710229eb0f2f4eed4d7e520639213230d72c3e4bfa6a83a85dea0c11bab31d47d2b4faa10081c177604c0291bcced143e0d14491c52ce5c55d97d56ccff93cb53bcab77f8b7d1ce211eb8962473457c48e", 0xe3, 0x4010, &(0x7f0000000ec0)={0x11, 0xf8, r17, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) r18 = socket$phonet(0x23, 0x2, 0x1) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000f00)={0x0, r18, r3, 0x5, 0x7fffffff, '\x00', {0x1, 0xa, 0x84e, 0x1, 0x1, 0x4, 0x3ff, 0x2, {0x8, 0xa}, {0x5, 0xb}, {0x200, 0x6}, 0xfffffffffffffffb, 0x8b6, 0x6, 0xffff, 0x4, 0x5, 0x2, 0xffff, 0xc, 0x3, '\x00', 0x0, 0x1000, 0x3, 0x9}}) sendto$phonet(r6, &(0x7f0000000fc0)="693badb39aedcc72bb58e34ae47e", 0xe, 0x0, 0x0, 0x0) 8m58.772394332s ago: executing program 4 (id=3484): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x1, 0x80, 0xf0, 0x1, 0x0, 0x3, 0x0, 0x3, 0x9804, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x6, @perf_bp={&(0x7f0000000080), 0xc}, 0x0, 0x3, 0x1, 0x9, 0x776, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d000000000000000000000000000000000000038a0061"], 0x0, 0x43}, 0x28) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2d, 0x1, 0x3, 0x0, 0x0, 0x7, 0x500, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x100004, 0x1000, 0x20d6, 0x0, 0xa, 0x59, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0xb) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@dioread_lock}], [{@smackfshat}, {@seclabel}, {@dont_hash}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}, 0x3, 0x44b, &(0x7f0000001e00)="$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") getrlimit(0xc, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file1\x00', 0x1000000, &(0x7f0000000b40)=ANY=[], 0xfe, 0x121c, &(0x7f00000024c0)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 8m57.639468971s ago: executing program 4 (id=3486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, 0x0, &(0x7f0000000000)=0xfffffffffffffdf1) socket$inet(0x2, 0x2, 0x6a113fc2) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r2 = creat(&(0x7f0000000240)='./file0\x00', 0x179) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0xa00}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x5, 0x3, 0x7, 0x1}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000005000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000000280)="82ee0d134b13b40bdf2754d103d00bbeca4f49bc000b79fb4a45e71ec8a95ff14398b2a678e750d1ba485fc0a06b223a0d3b2f54062c34ff1827f4ee5cc1d646fb3b4f009ea64e184d9399e24d43077173761644f3bcc232a3816150018153035bc57fef15c5ff9cde1cfcc1c1ad95fe06d73124550ece13fe97df33d386c0cda0be92b198449a0c42874581411fc8", 0x8f, r0}, 0x68) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x8, 0x0, &(0x7f0000000000)) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x220040, 0x101, 0x2}, 0x18) ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f00000004c0)={r4, &(0x7f0000000180)='!\x00', 0x400000, &(0x7f00000001c0)={@_ha_fsid={[0x9, 0x8]}, {0x3ff, 0x7, 0x4, 0x401}}, 0x4, &(0x7f0000000440)={@_ha_fsid}, &(0x7f0000000480)=0x67}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r6, 0x1, 0x3, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711816000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(r5, &(0x7f0000000100)='./file0\x00', 0x4840, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x4, 0x25dfdbfb, {0xa, 0x40, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x13}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 8m56.541783067s ago: executing program 4 (id=3493): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x7fc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x5}}, @NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x38}}, 0x0) 8m56.518618528s ago: executing program 40 (id=3492): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x10000, &(0x7f0000000380)={[{@noauto_da_alloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) recvmmsg(0xffffffffffffffff, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001840)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0xffff}], 0x1, 0x2002, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) recvmmsg(r2, &(0x7f0000000f00)=[{{&(0x7f0000000180)=@ax25={{0x3, @bcast}, [@remote, @bcast, @null, @remote, @bcast, @netrom, @default, @rose]}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000002900)=""/135, 0x87}], 0x2, &(0x7f0000002a00)=""/142, 0x8e}, 0xa}, {{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000080)=""/56, 0x31}, {&(0x7f0000002b00)=""/183, 0xb7}, {&(0x7f0000002bc0)=""/164, 0xa4}, {&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)}], 0x2, &(0x7f0000003d80)=""/78, 0x4e}, 0x9}, {{&(0x7f0000003e00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004100)=[{&(0x7f0000003e80)=""/68, 0x44}, {&(0x7f0000000980)=""/90, 0x57}, {&(0x7f0000003f80)=""/150, 0x96}, {&(0x7f0000004040)=""/132, 0x84}], 0x4, &(0x7f0000004140)=""/42, 0x2a}, 0x2}, {{&(0x7f0000004180)=@ethernet={0x0, @local}, 0x80, &(0x7f0000004280)=[{&(0x7f0000004200)=""/74, 0x26}], 0x1, &(0x7f00000042c0)=""/44, 0x2c}, 0x8}, {{&(0x7f00000002c0)=@nfc, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)=""/139}, 0x7}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000740)=""/219}], 0x0, &(0x7f0000000880)=""/253}, 0x7}], 0x4, 0x10162, 0x0) fallocate(r1, 0x0, 0x9, 0x10001) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0xc0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x80143, 0x1ff) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000000080)) copy_file_range(r1, 0x0, r1, &(0x7f00000000c0)=0x863, 0x863, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x50, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) 8m56.5005681s ago: executing program 41 (id=3493): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'lo\x00'}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x7fc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x5}}, @NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r6, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}]}, 0x38}}, 0x0) 8m51.616867892s ago: executing program 42 (id=3518): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd7a, 0x2, 0x5, 0x7, 0x5f, 0x0, 0x3, 0x0, 0x200b}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000010c0)=""/178) r2 = accept4$vsock_stream(r0, 0x0, 0x0, 0x800) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaea, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x14100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f0000001180)={0x2, 0x4e24, @multicast1}, 0x10) r5 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r8, 0x540a, 0x5) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x9, 0x14}}, 0x80, 0x0}, 0x0) r10 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r10, 0x84, 0x84, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000340)={0x0, 0x10, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r11, 0x2}}, 0x18) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000001080)={0xf, 0x5, 0x1}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000380)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf9f391a07efe31f9}, @TCA_TBF_RATE64={0xc, 0x4, 0x4a66bdcb0d280f7f}, @TCA_TBF_PBURST={0x8, 0x7, 0x1b9e}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x4000, 0x8, 0x400, 0xdb}, {0x8, 0x0, 0x0, 0x5, 0x7, 0x312}, 0x4, 0xa0dc, 0x1d94}}]}}]}, 0x78}}, 0x0) 8m8.723211559s ago: executing program 43 (id=3743): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) 7m56.71136148s ago: executing program 44 (id=3779): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e20}, {0x2, 0x4e20, @loopback}, {0x2, 0x2, @empty}, 0x248, 0xa00, 0x0, 0x0, 0xfff5, 0x0, 0x0, 0x3, 0x1}) 7m7.641126116s ago: executing program 45 (id=4219): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m4.457774771s ago: executing program 46 (id=4235): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x7}, 0x0) 6m50.331041741s ago: executing program 4 (id=4236): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6m50.023744807s ago: executing program 4 (id=4317): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="840200001900010000000000fbdbdf251d0109002c01068028015b8024013a802001a0801c01618018019d801401638008006000", @ANYRES32=0x0, @ANYBLOB="a100a5000a9a4d93f413e36df3f02b2e0143dd23d1cd976176f57d82b950c8e80a1f64c0178b531e5d32d7af49732955439069835c866bd7c0421b138c077b28f2f12070263d9ddf07ec847e93dc12a92a1cdc053a1fa9de442dda336eb2c8b5621416fdef150089a453d26bc8190308197a6165d38b905c194653adf8387d3ab0ca0ac674b9a196eb827cd1bed0bfa85b87641049a4a51d1be1771e46065769a600000064009080e9866312b921c359bd0641b99b9ddb0befcd7ded027552572702db739ac52082b1f0431a0f5cea797af10302e1f8f904085eea3b567dc19cc6f09efcc20350d5a3004b14cc80d4a399f522fdb81c000000000000000000000000000000000000500012804c00f8804800738008008400", @ANYRES32=0x0, @ANYBLOB='\b\x00F\x00', @ANYRES32, @ANYBLOB="0c00a100090000000000000028002b800400c9801d0017004cb42ee3a03b5668ab4b3911ae4e379e45f284"], 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x0) 6m49.3879975s ago: executing program 4 (id=4321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 6m49.339735682s ago: executing program 47 (id=4321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x7fff, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00', 0xfffffffffffffd5e, 0x24000040, 0x0, 0x0) 6m29.475412949s ago: executing program 8 (id=4429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x401) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c0012800b0001006970766c616e00000c000280060002000100000008000500", @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r9) tkill(r9, 0x12) tkill(r9, 0x12) fcntl$setown(r2, 0x8, r9) (async) fcntl$setown(r2, 0x8, r9) ptrace(0x4208, r9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xffff}, &(0x7f0000000240)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xffff}, &(0x7f0000000240)=0xc) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 6m28.466802111s ago: executing program 8 (id=4432): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x100, 0x0) getdents64(r2, 0x0, 0x0) 6m28.278437371s ago: executing program 8 (id=4435): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 6m27.357809688s ago: executing program 8 (id=4438): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(0x0, 0x44000, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6m26.996742777s ago: executing program 8 (id=4439): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x166928aa01c4bcbe, 0x1, 0x8, &(0x7f0000000080)) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50, 0x1f00}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7f}, 0x100904, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRESHEX], 0x15) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 6m25.929307422s ago: executing program 8 (id=4449): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 6m25.770973761s ago: executing program 48 (id=4449): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 5m32.038937928s ago: executing program 7 (id=4788): socket(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffff25, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x200000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m31.661516958s ago: executing program 7 (id=4796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x208010, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x43}]}, 0x10) getsockopt$sock_buf(r0, 0x1, 0x1a, 0xfffffffffffffffd, &(0x7f00000003c0)=0x4d) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 5m31.460508558s ago: executing program 7 (id=4800): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000063110864000000008510000002000000850000008900000095000000000000009500a50500000000fee2011f987cbab26b67e618f2b45d7d352b01d7a2db1ad609a58156dedd4716645fddb1fe6021ed288ffad0292a43a6944b280c35b81b097ad5258b3ba9616c31b3f60ab711409f62f09b4b62164aa98f666f06282562e1ef9bfae832b0a52265e064e112d68bc2fe49a90f94c56bfdf598745466bd52dd09f8d5f7193617c8cc4c4342adaf92ac2cb11faf861418ad8634a132eafecf6893dc7e5ba9196013d8fc4785dd66c2946fed6a015e1a9ebbf106ae3ef63b00ebeceebb5eae3df77dbc56632498e25b108559b0657cd5091b2493f81d1e"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x6}, 0x94) socket$unix(0x1, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x2) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) (async) gettid() (async) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x6}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) (async) keyctl$unlink(0x9, 0x0, 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x6}, 0x94) (async) 5m31.21778497s ago: executing program 7 (id=4803): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x2}, 0x116214, 0x6, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xb) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000580), &(0x7f0000000880)) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) mount$bind(&(0x7f00000008c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @loopback, 0x0, 0x1, [@multicast2]}, 0x14) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmmsg(r5, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x40002000, &(0x7f0000008100)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x2004c180}, 0x8000) write$binfmt_register(r0, &(0x7f0000000580)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xe, 0x3a, '!)', 0x3a, 'msdos\x00', 0x3a, './file0/file0', 0x3a, [0x4f, 0x43, 0x16, 0x46, 0x43, 0x46]}, 0x3b) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/117, 0x75}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0x1a000}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 5m29.28165207s ago: executing program 7 (id=4811): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = getpid() fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) setsockopt$netlink_NETLINK_CAP_ACK(r9, 0x10e, 0xa, &(0x7f00000000c0)=0x4, 0x4) 5m26.656207916s ago: executing program 7 (id=4824): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="840200001900010000000000fbdbdf251d0109002c01068028015b8024013a802001a0801c01618018019d801401638008006000", @ANYRES32=0x0, @ANYBLOB="a100a5000a9a4d93f413e36df3f02b2e0143dd23d1cd976176f57d82b950c8e80a1f64c0178b531e5d32d7af49732955439069835c866bd7c0421b138c077b28f2f12070263d9ddf07ec847e93dc12a92a1cdc053a1fa9de442dda336eb2c8b5621416fdef150089a453d26bc8190308197a6165d38b905c194653adf8387d3ab0ca0ac674b9a196eb827cd1bed0bfa85b87641049a4a51d1be1771e46065769a600000064009080e9866312b921c359bd0641b99b9ddb0befcd7ded027552572702db739ac52082b1f0431a0f5cea797af10302e1f8f904085eea3b567dc19cc6f09efcc20350d5a3004b14cc80d4a399f522fdb81c00"/263, @ANYRES32=0x0, @ANYBLOB='\b\x00F\x00', @ANYRES32, @ANYBLOB="0c00a100090000000000000028002b800400c9801d0017004cb42ee3a03b5668ab4b3911ae4e379e45f284e4d167041a22"], 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x0) 5m26.655918316s ago: executing program 49 (id=4824): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="840200001900010000000000fbdbdf251d0109002c01068028015b8024013a802001a0801c01618018019d801401638008006000", @ANYRES32=0x0, @ANYBLOB="a100a5000a9a4d93f413e36df3f02b2e0143dd23d1cd976176f57d82b950c8e80a1f64c0178b531e5d32d7af49732955439069835c866bd7c0421b138c077b28f2f12070263d9ddf07ec847e93dc12a92a1cdc053a1fa9de442dda336eb2c8b5621416fdef150089a453d26bc8190308197a6165d38b905c194653adf8387d3ab0ca0ac674b9a196eb827cd1bed0bfa85b87641049a4a51d1be1771e46065769a600000064009080e9866312b921c359bd0641b99b9ddb0befcd7ded027552572702db739ac52082b1f0431a0f5cea797af10302e1f8f904085eea3b567dc19cc6f09efcc20350d5a3004b14cc80d4a399f522fdb81c00"/263, @ANYRES32=0x0, @ANYBLOB='\b\x00F\x00', @ANYRES32, @ANYBLOB="0c00a100090000000000000028002b800400c9801d0017004cb42ee3a03b5668ab4b3911ae4e379e45f284e4d167041a22"], 0x284}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4m55.367782873s ago: executing program 2 (id=5095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x430, 0x430, 0x308, 0x1e0, 0x308, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x600000000000000}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0xffffff00], [], 'macvtap0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@private=0xa010101}}}, {{@ipv6={@mcast2, @mcast2, [0xffffffff, 0xffffff00], [0x0, 0x0, 0xffffff00, 0xff000000], 'xfrm0\x00', 'netpci0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x2, 0x38}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2, 0x3}, {0x4, 0x4, 0x5}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x570) 4m55.366037413s ago: executing program 2 (id=5096): ioprio_set$uid(0x3, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./bus\x00', 0xd4) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r1, 0x2, &(0x7f00000002c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}]) 4m54.810652942s ago: executing program 2 (id=5099): socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="5c00000014006b0300000fd86e6c1d0002842afcffff564500004e23e3f58e76110165f4080000000000000000028d459e37000febffffffffbe9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000) 4m53.527690658s ago: executing program 2 (id=5102): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbdd, &(0x7f0000019200)="$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") munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r2 = msgget$private(0x0, 0x480) msgsnd(r2, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0x7fff, 0x0, 0xa45, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000001dc0)={0x0, 0x180, 0x40000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0xfffffffffffffd4a}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe800000000000"], 0xcfa4) msgrcv(r2, 0x0, 0x0, 0x0, 0x1400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={0x0}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f0000000000)=0xd9, 0x4) msgctl$IPC_RMID(r2, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x9, 0x44, 0x0, 0xd, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x8, 0x7f, 0x9b98, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tkill(0x0, 0x12) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m52.807744795s ago: executing program 2 (id=5114): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4003}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4m49.478046718s ago: executing program 2 (id=5120): r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_emit_ethernet(0x387, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e1ceee", 0x349, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @private1, {[@dstopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x6}]}, @routing={0x2, 0xa, 0x1, 0x0, 0x0, [@mcast2, @private0, @mcast1, @mcast2, @mcast1]}, @routing={0xff, 0xc, 0x1, 0xf8, 0x0, [@loopback, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @local]}, @fragment={0x33, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x67}, @routing={0x3a, 0x8, 0x2, 0x4, 0x0, [@mcast1, @empty, @empty, @ipv4={'\x00', '\xff\xff', @loopback}]}, @dstopts={0x4, 0x20, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x2, 0xc6, "2569aead4add8973c6fbb51b09c36c3d6b194aabe631e66f75f1d4f9181ebd878a9894500af2ffc5dde05c97351ef4faa4265d311dc8cdf9e5fbd6182d2cbad58b7a60c119e5500e48c3d5653ac32eb2f966a88959ee48b3f0d9a3a71b1307c696bcc93fe47fcc9b114e23df25c7f39da99a125d1085f819b494bf3e34e83822645bc3413dc663ae4b65e9c2b03ca2f81111216fbdbfdd0cdeaf345ac8a84c5e0cf1ef88a6d8a5c280e2eed55a32328a3a59917dce5740da4506d1274e4a2b741354958c4354"}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @pad1]}, @dstopts={0x0, 0x13, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0xfffa, [0xfffffffffffffff8, 0x1, 0x1, 0xff, 0x2, 0x6]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0xbb7c, [0x6, 0x10000, 0xfffffffffffffff8, 0x9, 0x2]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfe}, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0xc5, [0x6]}}, @generic={0xb, 0x13, "3d82df25c2786825647ca1d23c5c1cc67a913b"}, @padn]}, @dstopts={0x8, 0x8, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x4}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @mcast2}]}], @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x9, 0x1, 0x4e22, 0x4e22}}, [0x0]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4m49.268561639s ago: executing program 50 (id=5120): r0 = creat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, 0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xb) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_emit_ethernet(0x387, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@val={0x88a8, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "e1ceee", 0x349, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x26}, @private1, {[@dstopts={0x3a, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x80}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x6}]}, @routing={0x2, 0xa, 0x1, 0x0, 0x0, [@mcast2, @private0, @mcast1, @mcast2, @mcast1]}, @routing={0xff, 0xc, 0x1, 0xf8, 0x0, [@loopback, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @local]}, @fragment={0x33, 0x0, 0xd, 0x1, 0x0, 0x1e, 0x67}, @routing={0x3a, 0x8, 0x2, 0x4, 0x0, [@mcast1, @empty, @empty, @ipv4={'\x00', '\xff\xff', @loopback}]}, @dstopts={0x4, 0x20, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x4}, @enc_lim={0x4, 0x1, 0x4}, @generic={0x2, 0xc6, "2569aead4add8973c6fbb51b09c36c3d6b194aabe631e66f75f1d4f9181ebd878a9894500af2ffc5dde05c97351ef4faa4265d311dc8cdf9e5fbd6182d2cbad58b7a60c119e5500e48c3d5653ac32eb2f966a88959ee48b3f0d9a3a71b1307c696bcc93fe47fcc9b114e23df25c7f39da99a125d1085f819b494bf3e34e83822645bc3413dc663ae4b65e9c2b03ca2f81111216fbdbfdd0cdeaf345ac8a84c5e0cf1ef88a6d8a5c280e2eed55a32328a3a59917dce5740da4506d1274e4a2b741354958c4354"}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @pad1]}, @dstopts={0x0, 0x13, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x3, 0xfffa, [0xfffffffffffffff8, 0x1, 0x1, 0xff, 0x2, 0x6]}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x1, 0xbb7c, [0x6, 0x10000, 0xfffffffffffffff8, 0x9, 0x2]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xfe}, @calipso={0x7, 0x10, {0x1, 0x2, 0x4, 0xc5, [0x6]}}, @generic={0xb, 0x13, "3d82df25c2786825647ca1d23c5c1cc67a913b"}, @padn]}, @dstopts={0x8, 0x8, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x4}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @mcast2}]}], @payload_conn={{{0x19, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x3, 0x0, 0x0, 0xd, 0x0, 0x0, 0x4, 0x9, 0x1, 0x4e22, 0x4e22}}, [0x0]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4m20.665306867s ago: executing program 1 (id=5384): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r5, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4003}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4m19.123727787s ago: executing program 1 (id=5400): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) 4m18.988299244s ago: executing program 1 (id=5402): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r4, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r4, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x2, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_netdev_private(r5, 0x89f8, &(0x7f0000000240)="1a3e67d47fb4081a9885eefd39db523a0f657efc612cd255988b00b11ad8f570f91157dd7fe4dac43d228f8f0b458604ed0d046346b5977837752146a3aecf25619a04248fc523b189a629b1b1d35e6ec253029b0764662d5f348e8d7d75a25638c35b31ba7cd79c62855ac5549716823848f5633cbf6aa68675e21e7c636f96f1a768c5585c2e15df40ff98b05028bc13f5a9b2ab01cfadcb25d17febe490011dfa602f626a2137f058b6983d475986fc90caf517c72e39d276") r6 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='target PCI:'], 0x13) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000480)={0x2, 0x1, @status={[0xffffffffffffffff, 0x5, 0x6331, 0x3, 0x6, 0x4]}, [0x7, 0x4, 0xd, 0x1, 0x628, 0x4, 0x9, 0x3, 0xcf9, 0x9, 0x7, 0xb1b, 0x6, 0x7, 0x0, 0x8, 0x4, 0x8, 0x2, 0x6, 0x1, 0x10, 0x7fffffff, 0x1, 0x6, 0x4, 0x2, 0x3ff, 0xf8, 0x0, 0x1, 0x6, 0x9, 0xb, 0x3, 0x7, 0x0, 0xdc, 0x9, 0xfffffffffffffffe, 0x200, 0x7f, 0xfffffffffffffffb, 0x10001, 0x66f9, 0x2, 0x800, 0x0, 0x4, 0x6, 0x9, 0x80000001, 0x1, 0x1000, 0x2a14, 0x7fa1, 0x5, 0x10000, 0x9, 0xcab, 0x0, 0x6, 0x7fffffff, 0xd]}) (async) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x80, 0xc}}, 0x1c}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 4m18.561603376s ago: executing program 1 (id=5406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$XFS_IOC_DIOINFO(r0, 0x800c581e, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280), 0x1, 0x42f, &(0x7f0000000940)="$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") r1 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x1, 0x4, @local, 0x1}}}, &(0x7f0000000080)=0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000040)={r4, 0x3, 0x6, 0x1}, &(0x7f00000000c0)=0x10) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x8040) r8 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x0) fchdir(r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r10, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r10, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ptrace(0x10, r1) waitid(0x1, r1, 0x0, 0x61000006, &(0x7f0000000340)) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x5, 0x1, 0x20000}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000d80)={0x41c, 0x1a, 0xa01, 0x20000000, 0x0, {0x7}, [@typed={0x14, 0x138, 0x0, 0x0, @ipv6=@private2}, @nested={0xe2, 0x4c, 0x0, 0x1, [@generic="c0c97191a2f98b5d16a6d219b674047f1512afe89e37e4c48b9b7738dda7764a67d074f2b10049027fbcf3da485c0230a657c6cdcb4e8d627307d95f33839aa52b11", @typed={0x4, 0x51}, @typed={0x8, 0x4f, 0x0, 0x0, @u32}, @generic="a72fe596c62463f8b834fc93bc4a113e103bc20737167d476788709b8f626ed74f79c5a30fd4b8d74cb44afcd63ce0e6674d777ad7c9dafddfa57c27ff84357be884cf498954aa56a20d3ba1c8d7c8bbf36d70c7f0bc1628794b522868d1c09799c8675e067343f3056e0ab6048dd804859f207652ad568db723a8e36863f6798809afdb25a5780d2254e550194199b5"]}, @typed={0x8, 0xa1, 0x0, 0x0, @fd=r6}, @typed={0x8, 0xc5, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x31, 0x0, 0x0, @u32=0x10000}, @nested={0x2f5, 0x6b, 0x0, 0x1, [@nested={0x155, 0xa0, 0x0, 0x1, [@nested={0x4, 0xe1}, @generic="75684caac11f16b1a8fc588171aa43f58387b2f157bce642be7832807b7228dcf01296b18dc650e81faf48a578e97c8f5d66b00c0179a026816ab37ed4b11bf192b83ac04370811b16f28ae8bd", @typed={0x100, 0x15c, 0x0, 0x0, @binary="078fc2366ecad2628d78df1ce02bd636fb453869866099868d9a71ed1451134ab7be2f54336c0d9251bb81a979e6b465d128d50d11a2f5ecca3f49152a79d698910450beafd58ecdf1d6af0b10e75272adc6418ba153b23001d72b7c4c6ae3cc60405b7fbe142551e0c5f46d96dff5e144fdbc7956316a9631e6c0cf48209c374d6084e446263066bd9ad2ade2981f00a129b507429e7b7192b871de261fc659246c5c945d14fc1fa1ba69dfc63963f7b7320ed2131eeef5b9ef6ff4a9c167f230681d01d797845a2b94ba6b777df2341e2066ef7ce74be61a8ef05b99314ab92b317cb1784ccfb04a5bacf3127f0853ff59040458a9e5192a4e816d"}]}, @typed={0x8, 0x10a, 0x0, 0x0, @uid}, @generic="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", @generic="ca0513e08806cb595178f83959defc20ade6bf3a072a4ee2356eeb8e12fdd1c574a1dfc00e22dbf489bd0ad6842fa8c5ddfdb84807ea3ceda471fe4a4159a71896b811e73c28f73baa2bd0374201b959dcc6f0b8145de258ee5787deb7242ebf1bb5b938a06a22084280022361aa587d6925478982e5ccaf5b1c345ff714c43301577c7bfe8f51b469db7aeb5e4f501fee0a8ce1ec"]}]}, 0x41c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) creat(&(0x7f0000000000)='./file2\x00', 0x149) 4m17.791717495s ago: executing program 1 (id=5413): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getresuid(&(0x7f0000000f80), &(0x7f0000000fc0), &(0x7f0000001000)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x7, 0x0, {{0xb, 0x4, 0x3, 0x9, 0x2c, 0x65, 0x0, 0x2, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x2}, {[@lsrr={0x83, 0x17, 0x83, [@rand_addr=0x64010102, @local, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r0, r1, 0x2d, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x2, 0x0, &(0x7f00000000c0)=[0x200, 0x349], 0x4}}, 0x30) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) 4m17.081791392s ago: executing program 1 (id=5420): r0 = syz_io_uring_setup(0xe60, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0xfffffffc, 0x2b1, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000002400126e09001a0069706970000000001400028006001000000100000500090089000000", @ANYRES32=r1, @ANYRES64=r4, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) clock_gettime(0x0, &(0x7f0000005940)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x82, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0xb}, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, 0x28, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x88061, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)) (fail_nth: 4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800008444ecbc67275f9c0122001000910800000000000000000000005c5621d78b315398e7"], &(0x7f0000000000)='GPL\x00', 0x7, 0x5, &(0x7f0000000040)=""/5, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xa, 0x10}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) recvmmsg(r5, &(0x7f0000005740)=[{{&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000580)=""/60, 0x3c}, 0xc}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000900)=""/71, 0x47}], 0x5, &(0x7f0000000a00)=""/252, 0xfc}, 0x2}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x12a00000}, {{&(0x7f0000002200)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000002280)=""/178, 0xb2}], 0x1, &(0x7f0000002380)=""/58, 0x3a}, 0x4}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/142, 0x8e}], 0x1, &(0x7f0000002500)=""/86, 0x56}, 0xd}, {{&(0x7f0000002580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002600)=""/228, 0xe4}, {&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f0000000c40)=""/205, 0xcd}, {&(0x7f0000002900)=""/94, 0x5e}, {&(0x7f0000002a40)=""/238, 0xee}, {&(0x7f0000002b40)=""/37, 0x25}], 0x6, &(0x7f0000002c00)=""/4, 0x4}, 0x4}, {{&(0x7f0000002c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/58, 0x3a}, {&(0x7f0000004200)=""/251, 0xfb}, {&(0x7f0000004300)}, {&(0x7f0000004340)=""/150, 0x96}, {&(0x7f0000004400)=""/138, 0x8a}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000004540)=""/111, 0x6f}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x8, &(0x7f0000005640)=""/232, 0xe8}, 0xb}], 0x8, 0x10002, &(0x7f0000005980)={r7, r8+10000000}) setreuid(0xffffffffffffffff, 0xee01) gettid() 4m15.144728912s ago: executing program 51 (id=5420): r0 = syz_io_uring_setup(0xe60, &(0x7f0000000080)={0x0, 0x21b7, 0x800, 0xfffffffc, 0x2b1, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000002400126e09001a0069706970000000001400028006001000000100000500090089000000", @ANYRES32=r1, @ANYRES64=r4, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x24000001}, 0x80) clock_gettime(0x0, &(0x7f0000005940)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x82, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0xb}, 0x1, 0x1, 0x0, 0x0, 0x4, 0x0, 0x28, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x600000000000000, 0x0, 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x88061, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)) (fail_nth: 4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800008444ecbc67275f9c0122001000910800000000000000000000005c5621d78b315398e7"], &(0x7f0000000000)='GPL\x00', 0x7, 0x5, &(0x7f0000000040)=""/5, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0xa, 0x10}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8912, &(0x7f0000000080)) recvmmsg(r5, &(0x7f0000005740)=[{{&(0x7f0000000240)=@caif=@rfm, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000580)=""/60, 0x3c}, 0xc}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/191, 0xbf}, {&(0x7f0000000900)=""/71, 0x47}], 0x5, &(0x7f0000000a00)=""/252, 0xfc}, 0x2}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f00000021c0)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}, 0x12a00000}, {{&(0x7f0000002200)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000002280)=""/178, 0xb2}], 0x1, &(0x7f0000002380)=""/58, 0x3a}, 0x4}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002400)=""/142, 0x8e}], 0x1, &(0x7f0000002500)=""/86, 0x56}, 0xd}, {{&(0x7f0000002580)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002600)=""/228, 0xe4}, {&(0x7f0000002700)=""/177, 0xb1}, {&(0x7f0000000c40)=""/205, 0xcd}, {&(0x7f0000002900)=""/94, 0x5e}, {&(0x7f0000002a40)=""/238, 0xee}, {&(0x7f0000002b40)=""/37, 0x25}], 0x6, &(0x7f0000002c00)=""/4, 0x4}, 0x4}, {{&(0x7f0000002c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f00000059c0)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f00000041c0)=""/58, 0x3a}, {&(0x7f0000004200)=""/251, 0xfb}, {&(0x7f0000004300)}, {&(0x7f0000004340)=""/150, 0x96}, {&(0x7f0000004400)=""/138, 0x8a}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000004540)=""/111, 0x6f}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x8, &(0x7f0000005640)=""/232, 0xe8}, 0xb}], 0x8, 0x10002, &(0x7f0000005980)={r7, r8+10000000}) setreuid(0xffffffffffffffff, 0xee01) gettid() 4.83639419s ago: executing program 6 (id=7650): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) lsetxattr$security_capability(0x0, &(0x7f0000000100), &(0x7f0000000140)=@v2={0x2000000, [{0x4, 0x3}, {0x4, 0x4}]}, 0x14, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close_range(r4, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4003}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local}, {@in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x22}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x40040d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 3.766949066s ago: executing program 6 (id=7657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x70bd2c, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}, @IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}]}}}]}, 0x54}, 0x1, 0x4000000}, 0x8000) 3.629797473s ago: executing program 6 (id=7659): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000000}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@alu={0x4, 0x0, 0x8, 0x2, 0x1, 0x18, 0xffffffffffffffff}, @map_fd={0x18, 0x8}, @alu={0x7, 0x0, 0xa, 0x5, 0x6, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1e659d8a9fec86bd}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0xa, 0xfffffffe, 0x2}, 0x10, 0x19d0c, 0xffffffffffffffff, 0x0, &(0x7f0000000c80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xe784}], 0x1}}], 0x1, 0x4000800) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000240)=0x20042, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000540)=0x3a) syz_open_pts(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000000000000005001e"], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, 0x0, 0x2000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000080000027600000000000000270000000000000095000000000000004f9624109d1d4bdfe1bcd914fe43fdbf87045eaabe54b890245e894a4ebdf17c55ccbb2cdf8dd1f7c797daafab366fbd9b3af3f753fe690cd0d25faec905bffc4941bf70b526fdf7502bc864ae51f08fdcfd1cb249ee7bcf84068270dcfcd9495f4acba4ea2e51aad41770"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x51}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000940)=ANY=[@ANYBLOB="0a00000016000000b40000000500000000000000", @ANYRES32, @ANYBLOB="0000f28a28a7cf3afc1098000000000001000000", @ANYRESHEX, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000780)="ac077c0c478a471d3a3830015b652cd113fd56aff1a22261ec5a0cf63271792376316e8ea9378e946c246db6734c4b60ed6acddce81889eba0c1398055d6d4cc423efa34d2d1e99c5e385c71e6eafeabe98c6ca6d25b1114da9610f970a5f54861e2880ef3a016dd9565380516899a16f456ff42ea5df2f518ea9d569875ca8c2bce110680e163a06f8f64fa3172d77e53001d76a14442e6644b567571e0d3d80efdffcad85f2e728706d5056ab64920bd2ca33ce469f6960dc5316dd30e982a36a80b7184dc5acb17f22dfc3bc549f02e6dc3e53c43e7a976984c0c413c3d056c1fd40f4e5e4ce60be9d076", 0x0}, 0x20) unshare(0x6a040000) 3.194361796s ago: executing program 0 (id=7667): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1562, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 5) 3.176182536s ago: executing program 0 (id=7669): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') sendfile(r0, r1, 0x0, 0x3) (fail_nth: 11) 3.101759s ago: executing program 6 (id=7673): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'ip6tnl0\x00', &(0x7f00000008c0)={'ip6_vti0\x00', 0x0, 0xd07c521296c84c7b, 0x5, 0x3, 0xffffff00, 0x23, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x8, 0x7800, 0x6, 0x5}}) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0/file0/..\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_tracing={0x1a, 0x25, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40000000}, [@alu={0x7, 0x0, 0x5, 0x5, 0x5, 0x18, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @printk={@lu}, @alu={0x4, 0x1, 0xd, 0x4, 0xa, 0xfffffffffffffff0, 0x8}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}]}, &(0x7f0000000800)='syzkaller\x00', 0x8c66, 0x0, 0x0, 0x41000, 0x2, '\x00', r2, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000009c0)={0x4, 0xd, 0x9, 0x4050}, 0x10, 0x28f20, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) getpid() r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, 0x0, 0x1c1840, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000000000004000000000000000a002000fc00000002040000"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x1, 0x40, 0x2, 0x4}, {0x0, 0x8, 0x2, 0x3}, {0x0, 0x2, 0x7a, 0x8}, {0x9fb, 0x6, 0x9, 0x6}]}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000340)=0x51) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000080850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x3, 0x1c, 0x67, 0x0, 0x65, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x4e24, 0x8}}}}}, 0x0) r9 = io_uring_setup(0x7945, &(0x7f00000000c0)={0x0, 0xfcf3, 0x8, 0x0, 0x266, 0x0, r5}) io_uring_register$IORING_REGISTER_PROBE(r9, 0x8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x16, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6894}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xa}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit]}, &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x6, 0xfff, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000580)=[r10, r5], &(0x7f00000005c0)=[{0x4, 0x2, 0xa, 0x2}, {0x5, 0x5, 0x5, 0x3}, {0x5, 0x4, 0xe, 0x8}], 0x10, 0x40}, 0x94) 2.747178999s ago: executing program 0 (id=7674): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x5bd20d9d, 0x800000, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x107200, 0x0) futex(&(0x7f0000004000), 0x0, 0x40000001, 0x0, &(0x7f0000004000)=0x1, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0180180000000000000010000071612be30003000000010000000000000e0000000000000000005f00"], 0x0, 0x2b}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)='F', 0x1) 2.601697886s ago: executing program 6 (id=7676): setpgid(0x0, 0x0) tkill(0x0, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x301381, 0x1d0) close_range(r0, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0}, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, r3, 0x0) ptrace$setsig(0x4203, r2, 0x5, &(0x7f0000000080)={0x28, 0x5, 0x7fffffff}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, r3, 0xffffffffffffffff, 0xee00, 0x0, 0x192, 0x3}, 0x0, 0x3, 0xaa, 0x7, 0x0, 0x0, 0xff}) 2.592432327s ago: executing program 6 (id=7677): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x20004011) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x200000400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0efffffff]}, 0x8) r7 = dup2(r3, r4) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000140)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000200)=0xfffffff0, 0x4) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x1) 2.289820192s ago: executing program 9 (id=7682): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={r3, r4, r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd000511000460"], 0xfdef) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x1200840, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x3, 0x3a7, &(0x7f0000000140)="$eJzs3UFoHFUYAOB/M5tsoq3JQRAFYfQmaG2rIHoxoaRQzKXKUvUgBttqyUahwcX20DRexGOhRz1581APHnrzIirSmwevVpCqeNDeCpY+mZ3Z7Gw2sUXZ1uL3HZY/7/3/mzezk+xksvvy+nysHJ2M41evXonp6UY05w/Mx7VGzEUWfWdj1NQ2bQDA3eFaSvFHKkV8cSsljfHPCgAYp97r/5u7ay3vfz2IvxrJT+Wr/+TtmBsAMB7V7/8z9bZsS870SNXMuKcFAIxR8fofzVrDoyMptT/1N0euDQCAu89Lr7z6wsJSxIt5Ph2x+kG33W3Hc4P+heNxIjpxLPbGbFyPKN8oUDw0eo8HDy0t7s3zfD1+not2UdFtR6yud9vllcJC1qtvxb6Yjbmqvnq3QUopO/j50uK+vCcizq53J4tRVhvd9mTvLsPCTJz44Z44Fvsjj/tH6iMOLS1uXpO0i+32tj8ZsTG4b1HMf0/MxndvxDvRiaORRUr9y5qlxTP78vxAWtrVGNSvd9utOLp5FEbvgAAAAAAAAAAAAAAAAAAAAAAAwL+xp1x7Z3ee53Ob6+ekwfo9e6qEqv/eiGj31gtsl/XV+kAb5fpAqZUipd/fe6L9YRZD6wP1FvgZWl+nGRN3dtcBAAAAAAAAAAAAAAAAAADgP2Pt1FQsdzrHTq6dOr1SD9ZPrp2aiIii5e1vL3w5E8M5M9UAw1VDQbNKqXXlg6qU9ZNTNpRTBVmx8UazbPn04uaMazm1vRiUTwxyWlu6hoLdj/z00emV/ggPZ/2qG4OcLLbdr9PZ8DSGgtX7ygH7Led3Pj6jwf6b5FxOKW3TNVMEZ14brYpGRHPHqf7DIBXBN1feevCptf5JkEqPPT575PL5T35dWe4UWy50OlMn166nleXq6+1PtpGg1T9tstr506hOtkb9TGguP33j8K4dRt4YblnOvv/t5YfOXapaJmpP0zbTSEcuDVre3SYnKzf62dauqTIoprnZ9XwRFMdoZJzyu6QVNz0sz8TOR+zc4oUnb1L+wMfzyxfP/PjLrT7dtR8SFuoAAAAAAAAAAAAAAAAAAIDbovZZ8Ur1Yd/Jv6t69vD4ZwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt8/g//9vBjGxsaXl1oI/16PfciT6Xa1iwJiqbXHuDu4tAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/V38FAAD//3hWTZc=") setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x400, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'sit0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x6}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0xfd, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x108, 0x170, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0x427, 0x6e, 0xef, 0x3}}, @common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x4}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.184644658s ago: executing program 0 (id=7685): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x3482, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x6) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x8, 0xfff, 0x8, 0x15d, 0x1a, "41e5f1010c2d293dddd1d2ed57dc6c242e8a5c"}) recvmsg$can_bcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x42) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5}, 0x8) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01007000fddbdf252100000024002d800500f0ff000000000500360528a355c0d9010030000000b5000300080000000800020003000000080003000000000000000000008d1382553c643d77d1783237e12367837be8922c4bedee009bd03e0ae1fb2da395e7f2185a9df2c213b4a8cde889322415e3ee20010000560b564ba4fb933fc926ae4edd72dc59ad8f3901b5c2fc98ab173dde1b40794e19fc37a52720b8b4eab8ccc0cef9bfd20d7bc791b92db80b7df317c9e31b246139b41dbc3075c1449eae56ea24e763c28c1b355a963db3b393e170c5407d626d", @ANYRES32=r8, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4042440}, 0x900) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) r10 = syz_open_procfs$userns(r2, &(0x7f0000000200)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00022abd7000ffdbdf251400000008000300", @ANYRES32=r9, @ANYBLOB="40001d00e4a0eea35155d9e21e473b248805fa8b8691d03947ff3a58b5a776d119952a4620e550ffb93864d797bd93575cd08df2f5eda6a1b64b771926267ffad989818378efe5b1eb1ee38edd531f0065ce1e9ea0d532b0ffb1b84485c4ffd0482cc8265f84bf5acf17ad2c6c1326938e4a4dec4639963fe0dd4a4314d7ac5108b869422b1ff8d69cfdb5fa110138e9d6c552498959ad0ec8e3", @ANYRES32=r10, @ANYBLOB="08001c00", @ANYRES32=r2, @ANYBLOB="0c00060000000000000000000c0006000300000003000000"], 0x44}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20004004) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x4}, &(0x7f0000000140)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a31000000005c000000030a010100000000f1000000010000000900030073797a32000000001c0008800c00014000000000000000090c00024000030000000000040900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r12 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800), 0x0, 0x4000) io_uring_enter(r12, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.103538442s ago: executing program 3 (id=7690): r0 = socket(0x2c, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000380)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x20973, 0x1c080, 0x0, 0x201}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f00000006c0)={{r3}, "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"}) futex(0x0, 0x80, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffff25, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0xfb) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x13c, 0x19, 0x1, 0x5000000, 0x0, {{@in6=@empty, @in=@dev={0xac, 0x14, 0x14, 0x42}, 0x4e23, 0x0, 0x0, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff, 0x0, 0x0, 0xffff}, {0x0, 0x5}}, [@tmpl={0x84, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x5}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in=@remote, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x4, 0x4}]}]}, 0x13c}}, 0x4894) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x19, '\x00', 0x0, 0x38}, 0x94) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r6, &(0x7f00000001c0)='9', 0x1, 0x20004015, &(0x7f0000000280)={0xa, 0x4622, 0x8, @private2={0xfc, 0x2, '\x00', 0x4}, 0xfffffffe}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.002930707s ago: executing program 3 (id=7693): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0xb, 0x9, 0xb6, 0x24, 0xcb, 0x180, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x10, 0xa, 0x6b13, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0x5, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff4, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x1ff, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xff, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x2, 0x7, 0xc4c, 0x400045e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0x6, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x8, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0xb, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0xe, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xfffefffd, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x4, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x7, 0x0, 0x80000000, 0xd, 0x2, 0x8001, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x6, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x9, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x8000000, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6708, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x2, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0x4000ff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0x10, 0x3, 0xe, 0x8, 0x1000, 0x4, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x1, 0x3, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x9, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x7, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9b3, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0xa, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x4, 0x7f, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x8, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x3fc, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x1, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x80400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x401, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0xb6f, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.963915529s ago: executing program 3 (id=7694): r0 = socket$kcm(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0xfc}], 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800240600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002080090780000080a0000000900007add"], 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x11, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) lseek(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="1400000033000b2d29493cbfbf2f9b", 0xf}, {&(0x7f0000000600)="f9124dbbf6", 0x5}], 0x2}, 0x0) 1.905736522s ago: executing program 9 (id=7695): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x8}, 0x0, 0x5bd20d9d, 0x800000, 0x7, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x107200, 0x0) futex(&(0x7f0000004000), 0x0, 0x40000001, 0x0, &(0x7f0000004000)=0x1, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0180180000000000000010000071612be30003000000010000000000000e0000000000000000005f00"], 0x0, 0x2b}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$PROG_LOAD(0x5, 0x0, 0x0) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) write$binfmt_misc(r3, &(0x7f0000000100)='F', 0x1) 1.858167514s ago: executing program 3 (id=7696): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0x40082104, &(0x7f0000000100)) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff327310ffff0000000000000002"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xfefffffe, 0x2) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.406579488s ago: executing program 0 (id=7697): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x5a, 0x3e0000, 0x80000000}], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(0x0, 0x0, 0xdffffffc00000000, 0xffffffffffffffff, 0x9) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) eventfd2(0x8, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES64=r5], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x44000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) get_robust_list(0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES16=r5, @ANYRES64=r7, @ANYRES32=r9, @ANYBLOB="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", @ANYRESOCT=r5, @ANYRES64=r4], 0x0) close(0x3) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, 0x0, 0x4000) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, &(0x7f0000001f40)=""/4073, 0x45, 0xfe9, 0x1}, 0x28) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000080)={'veth0_macvtap\x00', &(0x7f00000000c0)=@ethtool_regs={0x12}}) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x4, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, r3, 0x3) 1.044103947s ago: executing program 9 (id=7699): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0xf4, 0x20, &(0x7f00000004c0)="06f2acfd18b8b60faab487e74a87490e27b512f3fc1e6390bee7a61ffde1cdf22afbffbbe0ea47e6306c55b0ca4cac1b0c7ea1b0036f3918e721c5c85e7cb4dcb736698cd9d5a330b80c0535ea761b215af33c430cf0e6b45dc93d8ed5b6749ca21d6bc471e20b590bad07f37ca95b63f366cd083ca05a49f3de152a7d3553f253455c893e822c52a993c8d24b13b6a364ecf1a4dff460cf844e5c58cf4ffa67c4300fa2fca07ac7eab79e3a0811b07362171b44ca655312dd2207d24d587d2b2fcd0b63baf56874bd1cbb940f552ac00fcf230b5713c9ce40e16b2777f9851e0b279ce98187e0ce2c61470c28bd9decd6dda790", &(0x7f0000000080)=""/32, 0x800, 0x0, 0xe0, 0x0, &(0x7f00000005c0)="2cc27ab7848ce45562bf7e02837b3aea7be3e82752dc5cd7e4c70795ff40c081ac4994cb90d300bd9eb8c70bc6dff61a565ed88658be6024b18835b0090d0efe087099feb0650effb07dfe50560a9d76bef147c1993b9ac7001549f5b3c6507f09347fe5c83ff0a8f06bb98aeb06a6fdb91c1854cdf5dab91ba007532b5b91c7af96317e8e348d42b12a58b5ae5d764887b333a76dc96f529b71b8b06aac2461e47b9253be017f8d53d3e31ff90d138c346f8cdcbda631a5a3f96c2719e25af7dcb907cca215dc951bafabb792dd9e0b6d87367f31ab5409c6e3bb0752dafd46", &(0x7f00000006c0), 0x5, 0x0, 0x9}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) sendmsg$nl_xfrm(r1, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) close(r0) socket$inet6(0xa, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x4001, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x14, r8, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000428bd7000fedbdf25020000000900010073797a31000000000900030073797a31000000000900000073797a3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) unshare(0x8040480) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) dup(r4) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x0) 890.017175ms ago: executing program 9 (id=7700): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x300, &(0x7f00000000c0)) 889.598235ms ago: executing program 9 (id=7701): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@tcp6}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x2, 0x241) r2 = perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x2a, 0x1, 0xfd, 0x0, 0x0, 0x0, 0xb801b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200e}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) 813.866579ms ago: executing program 9 (id=7702): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a010102003ea5694796ef5060890f5102800c00028005000100000000000800074000"/112], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000201050000000000000000010300"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) chroot(&(0x7f0000000180)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000fed000/0x10000)=nil) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10f2192d002dbd7000030822a2c36f89029547c5659d6fa1b0e80e6a2bfdee942ba0ee4a0795375a16690688710e4cad6738e6e882fa061399541bdf9345af417839cb52816402855e250916151d1a2d9e6a1862a0f314d2ab5f729cecd652d6549f6f904810e40ce353da77461937216117400df25855eb2d5b58bf9bab8a801efc1b83131c72e5fbdf029251ec6f1602d3b28c", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000800) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x51040000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x34, r3, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4800) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0xffffffff, 0x4) 285.048916ms ago: executing program 0 (id=7703): set_mempolicy(0x5, &(0x7f0000000380)=0x3, 0x9) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r2) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 201.72105ms ago: executing program 3 (id=7704): lstat(0x0, &(0x7f0000000040)) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f00000000c0)=""/4096, 0x1000, 0x2, &(0x7f00000010c0)=@llc={0x1a, 0x304, 0x3, 0x0, 0x3, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x18, &(0x7f00000019c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xd3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query, @map_fd={0x18, 0x9, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8153}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001a80)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001b00)={0x0, 0x0, 0xfffffff7, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001b40)=[0x1, 0x1], &(0x7f0000001b80)=[{0x1, 0x5, 0xa, 0x9}, {0x0, 0x3, 0xc, 0x4}], 0x10, 0x6}, 0x94) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001c80)={@multicast1, @multicast1}, &(0x7f0000001cc0)=0xc) sched_setscheduler(0x0, 0x0, &(0x7f0000001d40)=0x10) timer_create(0x7, &(0x7f0000001d80)={0x0, 0x35}, &(0x7f0000001dc0)=0x0) clock_gettime(0x0, &(0x7f0000001e00)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000001e40)={{r1, r2+10000000}, {0x0, 0x989680}}, 0x0) setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000002080), 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000002380)={{0x84, @multicast2, 0x4e21, 0x3, 'lblc\x00', 0x10, 0x3, 0x7d}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x4, 0x3, 0x1, 0x31}}, 0x44) close(0xffffffffffffffff) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f00000026c0)={&(0x7f0000002400)=0x38, 0x7e3, &(0x7f0000002440)=[{}, {}, {}], &(0x7f0000002680)}) pipe2(&(0x7f0000002800), 0x80000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x1c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60040801}, 0x20040000) 201.38636ms ago: executing program 5 (id=7705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x0, &(0x7f00000000c0)=""/179, &(0x7f0000000180)=0xb3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x24}}, 0xffffffd5) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001900)={0x10, 0x1f, 0x1, 0x70bd29}, 0x10}], 0x1, 0x0, 0x0, 0x4800}, 0x0) 174.943391ms ago: executing program 5 (id=7706): r0 = socket$kcm(0x10, 0x3, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000380)=[{0x1, 0x0, {0x2, 0xff, 0x4}, {0x1, 0x0, 0x4}, 0xff, 0xff}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x0, 0xf0}, 0xfc}], 0x40) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800240600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002080090780000080a0000000900007add"], 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x11, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) lseek(0xffffffffffffffff, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="1400000033000b2d29493cbfbf2f9b", 0xf}, {&(0x7f0000000600)="f9124dbbf6", 0x5}], 0x2}, 0x0) 134.932763ms ago: executing program 5 (id=7707): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x3f, 0x0, &(0x7f0000000240)={0x1, 0xf, 0x0, 0x2c5}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) close(0x3) socket(0x2, 0x80805, 0x0) 61.867697ms ago: executing program 5 (id=7708): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000880)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x2a0, 0x100, 0xffffffff, 0x100, 0x1a8, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {0x22e}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x4, 0x80000000, 0x81, 0xc, 0xfffffffe, 0x80000000, 0x27e3, 0x0, 0x40}, {0x67a}}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@socket0={{0x20}}, @common=@addrtype={{0x30}, {0x0, 0x102, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @port=0x4e22, @port=0x4e22}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) fsopen(0x0, 0x0) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 61.715847ms ago: executing program 5 (id=7709): set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0xecffffff, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 22.31829ms ago: executing program 5 (id=7710): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000010000000100000"], 0x0, 0x32}, 0x28) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xb, 0x9}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x4005}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="315a597e9df06d8b8955a476c7b331ffa31ffc68ffa8d526e1b9e235cfc594227d4f81d4ee2d6ec3220ba5fdd921b96e6cca36f2986310dfb5e11d1e4f4c8dbd61c82f0a26", 0x33}], 0x1, 0xe7b, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) connect$unix(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x1, 0x21, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x7, 0x6, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x800000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0x0, 0xee01, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x40, 0xa3) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000005c0)) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=7711): socket$netlink(0x10, 0x3, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c183, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) name_to_handle_at(r3, &(0x7f0000000040)='./file7/file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1200) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x101680, 0x2, 0xfffffffc, 0x0, 0x5, 0xa50, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$sock(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000009c0)=[@txtime={{0x18, 0x1, 0x3d, 0x13b}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x30}, 0x8000) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x23, 0x5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x10c}}, 0x0) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2404c050}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000040)="b907ef19edfff0", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24004000) (async) setsockopt$sock_attach_bpf(r8, 0x29, 0x4b, 0x0, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r9, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="680200000005010100000000000000000000000154020100030000002e000000fc05ff070002210073797a300000000000000000000000000000000000000000000000000000000076d43e67701cad3d7b190bde46144d60000018d30effa541f3079a979dd303bf9ec4a6db18f6d982111ff308b2542eba0d4914cd862a377ae942ee4249957e8b0800060000000000500800000100810001000000030000000900080003000000e60b0000910c080d02000000000800000004b000020000000300000005005ccf00000000008000000300090003000000b6"], 0x268}, 0x1, 0x0, 0x0, 0x24044010}, 0x80) kernel console output (not intermixed with test programs): de [ 973.234807][ T546] geneve1: entered allmulticast mode [ 973.269811][ T551] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6920'. [ 973.325263][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6922'. [ 973.338111][ T553] bond1: (slave veth3): Enslaving as an active interface with an up link [ 973.351710][ T553] bond1: entered promiscuous mode [ 973.356878][ T553] veth3: entered promiscuous mode [ 973.362108][ T553] bond1: entered allmulticast mode [ 973.367514][ T553] veth3: entered allmulticast mode [ 973.374067][ T553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 973.396208][ T560] set_capacity_and_notify: 2 callbacks suppressed [ 973.396249][ T560] loop5: detected capacity change from 0 to 512 [ 973.468459][ T560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.532507][ T570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.577528][ T575] loop6: detected capacity change from 0 to 256 [ 973.584436][ T575] msdos: Bad value for 'uid' [ 973.590089][ T575] msdos: Bad value for 'uid' [ 973.610778][ T570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.679410][ T575] syzkaller0: entered promiscuous mode [ 973.691379][ T575] syzkaller0: entered allmulticast mode [ 973.778230][ T570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.801139][ T593] loop9: detected capacity change from 0 to 128 [ 974.028740][ T570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.116030][T23693] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.138559][ T6172] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.152772][T23713] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.165405][T23713] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.366810][ T629] FAULT_INJECTION: forcing a failure. [ 974.366810][ T629] name failslab, interval 1, probability 0, space 0, times 0 [ 974.379562][ T629] CPU: 1 UID: 0 PID: 629 Comm: syz.6.6951 Tainted: G W syzkaller #0 PREEMPT(full) [ 974.379603][ T629] Tainted: [W]=WARN [ 974.379610][ T629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 974.379624][ T629] Call Trace: [ 974.379632][ T629] [ 974.379642][ T629] __dump_stack+0x1d/0x30 [ 974.379679][ T629] dump_stack_lvl+0x95/0xd0 [ 974.379730][ T629] dump_stack+0x15/0x1b [ 974.379757][ T629] should_fail_ex+0x263/0x280 [ 974.379789][ T629] ? u32_init+0x25d/0x3d0 [ 974.379814][ T629] should_failslab+0x8c/0xb0 [ 974.379864][ T629] __kmalloc_cache_noprof+0x5f/0x400 [ 974.379891][ T629] u32_init+0x25d/0x3d0 [ 974.379913][ T629] ? __pfx_u32_reoffload+0x10/0x10 [ 974.379944][ T629] tcf_proto_create+0x130/0x1a0 [ 974.380063][ T629] tc_new_tfilter+0xad2/0x1200 [ 974.380117][ T629] ? __pfx_tc_new_tfilter+0x10/0x10 [ 974.380157][ T629] rtnetlink_rcv_msg+0x64b/0x720 [ 974.380269][ T629] ? avc_has_perm_noaudit+0xab/0x130 [ 974.380362][ T629] netlink_rcv_skb+0x123/0x220 [ 974.380416][ T629] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 974.380493][ T629] rtnetlink_rcv+0x1c/0x30 [ 974.380522][ T629] netlink_unicast+0x5a8/0x680 [ 974.380553][ T629] netlink_sendmsg+0x5c8/0x6f0 [ 974.380597][ T629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.380646][ T629] ____sys_sendmsg+0x563/0x5b0 [ 974.380681][ T629] ___sys_sendmsg+0x195/0x1e0 [ 974.380773][ T629] __x64_sys_sendmsg+0xd4/0x160 [ 974.380816][ T629] x64_sys_call+0x194c/0x3020 [ 974.380846][ T629] do_syscall_64+0x12c/0x3b0 [ 974.380875][ T629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.380978][ T629] RIP: 0033:0x7fd2b95ac819 [ 974.381000][ T629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.381024][ T629] RSP: 002b:00007fd2b8007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.381079][ T629] RAX: ffffffffffffffda RBX: 00007fd2b9825fa0 RCX: 00007fd2b95ac819 [ 974.381093][ T629] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 974.381105][ T629] RBP: 00007fd2b8007090 R08: 0000000000000000 R09: 0000000000000000 [ 974.381118][ T629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.381135][ T629] R13: 00007fd2b9826038 R14: 00007fd2b9825fa0 R15: 00007fffff4b5228 [ 974.381194][ T629] [ 974.886777][ T653] openvswitch: netlink: Message has 8 unknown bytes. [ 975.051739][T23693] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.060290][T23693] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.069581][T23693] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.081422][T23693] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 975.121928][ T664] FAULT_INJECTION: forcing a failure. [ 975.121928][ T664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 975.136011][ T664] CPU: 0 UID: 0 PID: 664 Comm: syz.0.6966 Tainted: G W syzkaller #0 PREEMPT(full) [ 975.136072][ T664] Tainted: [W]=WARN [ 975.136080][ T664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 975.136094][ T664] Call Trace: [ 975.136102][ T664] [ 975.136111][ T664] __dump_stack+0x1d/0x30 [ 975.136157][ T664] dump_stack_lvl+0x95/0xd0 [ 975.136190][ T664] dump_stack+0x15/0x1b [ 975.136254][ T664] should_fail_ex+0x263/0x280 [ 975.136298][ T664] should_fail+0xb/0x20 [ 975.136329][ T664] should_fail_usercopy+0x1a/0x20 [ 975.136409][ T664] _copy_from_user+0x1c/0xb0 [ 975.136433][ T664] ___sys_sendmsg+0xc1/0x1e0 [ 975.136538][ T664] __x64_sys_sendmsg+0xd4/0x160 [ 975.136580][ T664] x64_sys_call+0x194c/0x3020 [ 975.136647][ T664] do_syscall_64+0x12c/0x3b0 [ 975.136677][ T664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.136723][ T664] RIP: 0033:0x7fbc7b97c819 [ 975.136744][ T664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.136827][ T664] RSP: 002b:00007fbc7a3cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.136849][ T664] RAX: ffffffffffffffda RBX: 00007fbc7bbf5fa0 RCX: 00007fbc7b97c819 [ 975.136864][ T664] RDX: 0000000004000850 RSI: 0000200000009b40 RDI: 0000000000000003 [ 975.136918][ T664] RBP: 00007fbc7a3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 975.136935][ T664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.136949][ T664] R13: 00007fbc7bbf6038 R14: 00007fbc7bbf5fa0 R15: 00007ffff8422158 [ 975.136983][ T664] [ 975.476010][ T678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 975.553386][ T678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 975.643977][ T670] __nla_validate_parse: 4 callbacks suppressed [ 975.644001][ T670] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6968'. [ 975.709229][ T680] loop5: detected capacity change from 0 to 8192 [ 975.723554][ T688] loop9: detected capacity change from 0 to 512 [ 975.758608][ T688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 975.774009][ T680] loop5: p1 < > p2 p4 < p5 > [ 975.785543][ T680] loop5: partition table partially beyond EOD, truncated [ 975.787113][ T695] FAULT_INJECTION: forcing a failure. [ 975.787113][ T695] name failslab, interval 1, probability 0, space 0, times 0 [ 975.797891][ T680] loop5: p1 start 134217728 is beyond EOD, [ 975.805722][ T695] CPU: 0 UID: 0 PID: 695 Comm: syz.0.6977 Tainted: G W syzkaller #0 PREEMPT(full) [ 975.805828][ T695] Tainted: [W]=WARN [ 975.805838][ T695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 975.805856][ T695] Call Trace: [ 975.805866][ T695] [ 975.805876][ T695] __dump_stack+0x1d/0x30 [ 975.805908][ T695] dump_stack_lvl+0x95/0xd0 [ 975.805945][ T695] dump_stack+0x15/0x1b [ 975.806017][ T695] should_fail_ex+0x263/0x280 [ 975.806058][ T695] should_failslab+0x8c/0xb0 [ 975.806142][ T695] kmem_cache_alloc_noprof+0x66/0x3f0 [ 975.806164][ T695] ? do_getname+0x2e/0x1c0 [ 975.806197][ T695] do_getname+0x2e/0x1c0 [ 975.806219][ T695] user_path_at+0x28/0x100 [ 975.806253][ T695] __se_sys_quotactl+0xaf/0x660 [ 975.806279][ T695] ? restore_fpregs_from_fpstate+0x61/0x110 [ 975.806385][ T695] __x64_sys_quotactl+0x55/0x70 [ 975.806419][ T695] x64_sys_call+0x1a2a/0x3020 [ 975.806527][ T695] do_syscall_64+0x12c/0x3b0 [ 975.806567][ T695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.806591][ T695] RIP: 0033:0x7fbc7b97c819 [ 975.806612][ T695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.806633][ T695] RSP: 002b:00007fbc7a3cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 975.806653][ T695] RAX: ffffffffffffffda RBX: 00007fbc7bbf5fa0 RCX: 00007fbc7b97c819 [ 975.806736][ T695] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000202 [ 975.806761][ T695] RBP: 00007fbc7a3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 975.806820][ T695] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 975.806915][ T695] R13: 00007fbc7bbf6038 R14: 00007fbc7bbf5fa0 R15: 00007ffff8422158 [ 975.806941][ T695] [ 975.809406][ T680] truncated [ 975.996365][ T680] loop5: p2 size 591360 extends beyond EOD, truncated [ 976.013384][ T680] loop5: p5 size 591360 extends beyond EOD, truncated [ 976.042679][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 976.070633][ T700] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26217 sclass=netlink_route_socket pid=700 comm=syz.0.6980 [ 976.084134][ T700] netlink: 'syz.0.6980': attribute type 29 has an invalid length. [ 976.093614][ T28] audit: type=1400 audit(976.145:23831): avc: denied { write } for pid=699 comm="syz.0.6980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 976.159596][ T705] netlink: 36 bytes leftover after parsing attributes in process `syz.9.6981'. [ 976.292344][ T712] dummy0: entered promiscuous mode [ 976.326442][ T712] dummy0: left promiscuous mode [ 976.384019][ T3009] loop5: p1 < > p2 p4 < p5 > [ 976.397764][ T723] vlan3: entered promiscuous mode [ 976.402940][ T723] team0: entered promiscuous mode [ 976.405492][ T3009] loop5: partition table partially beyond EOD, [ 976.408645][ T723] team_slave_0: entered promiscuous mode [ 976.414444][ T3009] truncated [ 976.415432][ T723] team_slave_1: entered promiscuous mode [ 976.432274][ T3009] loop5: p1 start 134217728 is beyond EOD, truncated [ 976.439379][ T3009] loop5: p2 size 591360 extends beyond EOD, truncated [ 976.447600][ T3009] loop5: p5 size 591360 extends beyond EOD, truncated [ 976.536644][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 976.537418][ T6371] udevd[6371]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 976.554832][ T3315] udevd[3315]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 976.581191][ T735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.590552][ T730] netlink: 'syz.6.6992': attribute type 4 has an invalid length. [ 976.599615][ T735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.617057][ T730] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6992'. [ 976.633595][ T730] .`: renamed from bond0 [ 976.652987][ T28] audit: type=1400 audit(976.695:23832): avc: denied { mounton } for pid=736 comm="syz.3.6995" path="/226/file0" dev="tmpfs" ino=1255 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 976.653024][ T737] 9pnet_fd: Insufficient options for proto=fd [ 976.653895][ T739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=739 comm=syz.0.6996 [ 976.954513][ T760] netlink: 564 bytes leftover after parsing attributes in process `syz.9.7004'. [ 976.963973][ T760] netlink: 564 bytes leftover after parsing attributes in process `syz.9.7004'. [ 976.985570][ T760] loop9: detected capacity change from 0 to 512 [ 977.003139][ T760] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 977.015599][ T760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 977.032941][ T760] System zones: 1-12 [ 977.037679][ T760] EXT4-fs (loop9): 1 truncate cleaned up [ 977.044149][ T760] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 977.061304][ T764] FAULT_INJECTION: forcing a failure. [ 977.061304][ T764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.074613][ T764] CPU: 0 UID: 0 PID: 764 Comm: syz.0.7005 Tainted: G W syzkaller #0 PREEMPT(full) [ 977.074653][ T764] Tainted: [W]=WARN [ 977.074662][ T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 977.074676][ T764] Call Trace: [ 977.074684][ T764] [ 977.074724][ T764] __dump_stack+0x1d/0x30 [ 977.074764][ T764] dump_stack_lvl+0x95/0xd0 [ 977.074795][ T764] dump_stack+0x15/0x1b [ 977.074867][ T764] should_fail_ex+0x263/0x280 [ 977.074919][ T764] should_fail+0xb/0x20 [ 977.074953][ T764] should_fail_usercopy+0x1a/0x20 [ 977.075064][ T764] _copy_from_user+0x1c/0xb0 [ 977.075089][ T764] do_sock_getsockopt+0x122/0x570 [ 977.075182][ T764] __x64_sys_getsockopt+0x11d/0x1a0 [ 977.075229][ T764] x64_sys_call+0x2dcf/0x3020 [ 977.075255][ T764] do_syscall_64+0x12c/0x3b0 [ 977.075321][ T764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.075342][ T764] RIP: 0033:0x7fbc7b97c819 [ 977.075370][ T764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 977.075436][ T764] RSP: 002b:00007fbc7a3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 977.075455][ T764] RAX: ffffffffffffffda RBX: 00007fbc7bbf5fa0 RCX: 00007fbc7b97c819 [ 977.075468][ T764] RDX: 0000000000000074 RSI: 000000000000006b RDI: 0000000000000003 [ 977.075480][ T764] RBP: 00007fbc7a3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 977.075561][ T764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 977.075573][ T764] R13: 00007fbc7bbf6038 R14: 00007fbc7bbf5fa0 R15: 00007ffff8422158 [ 977.075591][ T764] [ 977.308870][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 977.502690][ T782] loop9: detected capacity change from 0 to 164 [ 977.753053][ T794] loop6: detected capacity change from 0 to 512 [ 977.815036][ T800] netlink: 564 bytes leftover after parsing attributes in process `syz.0.7017'. [ 977.835444][ T800] netlink: 564 bytes leftover after parsing attributes in process `syz.0.7017'. [ 978.020760][ T804] loop5: detected capacity change from 0 to 512 [ 978.163066][ T804] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 978.812688][ T808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.821234][ T808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.912057][ T812] loop6: detected capacity change from 0 to 512 [ 978.932222][ T812] EXT4-fs: Ignoring removed nobh option [ 978.947920][T20958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.949139][ T812] EXT4-fs (loop6): write access unavailable, skipping orphan cleanup [ 978.965590][ T812] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 978.984770][ T812] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7021'. [ 978.995659][ T815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7022'. [ 979.014553][T29598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 979.035405][ T815] bond1: (slave macvlan3): Opening slave failed [ 979.043638][ T818] loop6: detected capacity change from 0 to 512 [ 979.279314][ T822] futex_wake_op: syz.5.7025 tries to shift op by 32; fix this program [ 979.449303][ T830] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7027'. [ 979.475146][ T830] veth5: entered allmulticast mode [ 979.488214][ T830] bond2: (slave veth5): Enslaving as an active interface with an up link [ 979.518436][ T28] audit: type=1326 audit(979.565:23833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.542245][ T28] audit: type=1326 audit(979.565:23834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.566663][ T28] audit: type=1326 audit(979.565:23835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.589690][ T28] audit: type=1326 audit(979.565:23836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.613126][ T28] audit: type=1326 audit(979.565:23837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.636776][ T28] audit: type=1326 audit(979.565:23838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.659719][ T28] audit: type=1326 audit(979.565:23839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.689584][ T28] audit: type=1326 audit(979.565:23840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 979.719965][ T830] bond2 (unregistering): (slave veth5): Releasing backup interface [ 979.730119][ T830] bond2 (unregistering): Released all slaves [ 979.800312][ T844] loop6: detected capacity change from 0 to 512 [ 980.210165][ T850] loop5: detected capacity change from 0 to 512 [ 980.322328][ T850] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 980.337385][ T850] EXT4-fs (loop5): mount failed [ 981.156987][ T28] kauditd_printk_skb: 216 callbacks suppressed [ 981.157008][ T28] audit: type=1326 audit(980.715:24057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 981.812272][ T28] audit: type=1326 audit(980.715:24058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=834 comm="syz.5.7029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd3e64c819 code=0x7ffc0000 [ 982.012537][ T865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 982.021268][ T865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 982.243324][ T6172] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.251604][ T6172] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.259905][ T6172] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.268310][ T6172] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.284861][ T876] __nla_validate_parse: 1 callbacks suppressed [ 982.284880][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7041'. [ 982.476350][ T887] bond2: option fail_over_mac: invalid value (127) [ 982.484633][ T887] bond2 (unregistering): Released all slaves [ 982.503565][ T886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7045'. [ 982.520594][ T886] bond2 (unregistering): Released all slaves [ 982.646645][ T893] loop9: detected capacity change from 0 to 512 [ 982.653891][ T893] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 982.670673][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.678873][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.687011][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.695307][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.703294][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.711326][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.719275][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.727336][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.738790][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.747315][ T893] FAT-fs (loop9): error, invalid access to FAT (entry 0x0fffff00) [ 982.774729][ T28] audit: type=1326 audit(982.785:24059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.797967][ T28] audit: type=1326 audit(982.785:24060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.826291][ T28] audit: type=1326 audit(982.785:24061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.856285][ T28] audit: type=1326 audit(982.785:24062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.879281][ T28] audit: type=1326 audit(982.785:24063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.902743][ T28] audit: type=1326 audit(982.785:24064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.925780][ T28] audit: type=1326 audit(982.785:24065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.949918][ T28] audit: type=1326 audit(982.785:24066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=897 comm="syz.0.7049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 982.953048][ T6172] kworker/u8:13: attempt to access beyond end of device [ 982.953048][ T6172] loop9: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 983.024075][ T903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7051'. [ 983.034757][ T906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7053'. [ 983.046961][ T907] FAULT_INJECTION: forcing a failure. [ 983.046961][ T907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.068647][ T907] CPU: 0 UID: 0 PID: 907 Comm: syz.3.7052 Tainted: G W syzkaller #0 PREEMPT(full) [ 983.068703][ T907] Tainted: [W]=WARN [ 983.068714][ T907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 983.068733][ T907] Call Trace: [ 983.068741][ T907] [ 983.068750][ T907] __dump_stack+0x1d/0x30 [ 983.068784][ T907] dump_stack_lvl+0x95/0xd0 [ 983.068862][ T907] dump_stack+0x15/0x1b [ 983.068896][ T907] should_fail_ex+0x263/0x280 [ 983.069002][ T907] should_fail+0xb/0x20 [ 983.069059][ T907] should_fail_usercopy+0x1a/0x20 [ 983.069110][ T907] _copy_from_user+0x1c/0xb0 [ 983.069156][ T907] ___sys_sendmsg+0xc1/0x1e0 [ 983.069213][ T907] __x64_sys_sendmsg+0xd4/0x160 [ 983.069320][ T907] x64_sys_call+0x194c/0x3020 [ 983.069356][ T907] do_syscall_64+0x12c/0x3b0 [ 983.069386][ T907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.069471][ T907] RIP: 0033:0x7f2fa364c819 [ 983.069493][ T907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.069514][ T907] RSP: 002b:00007f2fa209f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 983.069595][ T907] RAX: ffffffffffffffda RBX: 00007f2fa38c5fa0 RCX: 00007f2fa364c819 [ 983.069678][ T907] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 983.069731][ T907] RBP: 00007f2fa209f090 R08: 0000000000000000 R09: 0000000000000000 [ 983.069746][ T907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.069764][ T907] R13: 00007f2fa38c6038 R14: 00007f2fa38c5fa0 R15: 00007ffd2e320e78 [ 983.069794][ T907] [ 983.107926][ T909] loop9: detected capacity change from 0 to 512 [ 983.150753][ T911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7055'. [ 983.221524][ T909] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 983.274961][ T909] EXT4-fs error (device loop9): xattr_find_entry:337: inode #15: comm syz.9.7054: corrupted xattr entries [ 983.291125][ T909] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 983.293892][ T909] EXT4-fs (loop9): 1 truncate cleaned up [ 983.303129][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 983.303153][ C1] EXT4-fs (loop9): initial error at time 983: xattr_find_entry:337: inode 15 [ 983.303187][ C1] EXT4-fs (loop9): last error at time 983: xattr_find_entry:337: inode 15 [ 983.341827][ T909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.359193][ T909] EXT4-fs error (device loop9): ext4_iget_extra_inode:5128: inode #15: comm syz.9.7054: corrupted in-inode xattr: e_name out of bounds [ 983.415974][ T909] netlink: 'syz.9.7054': attribute type 1 has an invalid length. [ 983.440586][ T909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 983.553117][ T909] sctp: [Deprecated]: syz.9.7054 (pid 909) Use of int in maxseg socket option. [ 983.553117][ T909] Use struct sctp_assoc_value instead [ 983.600760][ T909] vlan2: entered allmulticast mode [ 983.637707][ T931] loop3: detected capacity change from 0 to 164 [ 983.687280][ T936] netlink: 'syz.9.7054': attribute type 11 has an invalid length. [ 983.706532][ T909] bond2: entered allmulticast mode [ 983.727059][ T936] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7054'. [ 983.762359][ T909] bond2: (slave geneve2): making interface the new active one [ 983.782509][ T909] geneve2: entered allmulticast mode [ 983.810512][ T909] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 984.152707][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.284108][ T943] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7065'. [ 984.501319][ T950] loop3: detected capacity change from 0 to 2048 [ 984.518009][ T952] gtp0: entered promiscuous mode [ 984.523049][ T952] gtp0: entered allmulticast mode [ 984.652253][ T955] loop9: detected capacity change from 0 to 512 [ 984.861635][ T960] vhci_hcd vhci_hcd.0: invalid port number 23 [ 985.086537][ T955] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 985.099144][ T950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.162851][T28348] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.309971][ T973] loop6: detected capacity change from 0 to 1764 [ 985.369846][ T973] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7066'. [ 985.378981][ T973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7066'. [ 985.390317][ T973] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 985.522830][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7075'. [ 985.911210][ T957] Process accounting resumed [ 986.135884][ T995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26217 sclass=netlink_route_socket pid=995 comm=syz.0.7082 [ 986.160864][ T995] netlink: 'syz.0.7082': attribute type 29 has an invalid length. [ 987.224402][ T1017] loop5: detected capacity change from 0 to 512 [ 987.267979][ T1017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 987.379444][ T1025] __nla_validate_parse: 1 callbacks suppressed [ 987.379464][ T1025] netlink: 564 bytes leftover after parsing attributes in process `syz.9.7095'. [ 987.426073][ T1025] netlink: 564 bytes leftover after parsing attributes in process `syz.9.7095'. [ 987.439378][ T1032] loop9: detected capacity change from 0 to 512 [ 987.450358][ T1029] netlink: 'syz.0.7097': attribute type 29 has an invalid length. [ 987.464574][ T1017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 987.487780][ T1032] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 987.503551][ T1017] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 987.521842][ T1017] EXT4-fs (loop5): mount failed [ 987.550833][ T1032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 987.571752][ T1032] System zones: 1-12 [ 987.582283][ T1032] EXT4-fs (loop9): 1 truncate cleaned up [ 987.588989][ T1032] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 987.605139][ T1016] loop5: detected capacity change from 0 to 128 [ 987.647378][ T28] kauditd_printk_skb: 76 callbacks suppressed [ 987.647397][ T28] audit: type=1326 audit(987.696:24143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 987.680413][ T1016] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 987.767477][ T1016] nfs4: Unknown parameter 'PL' [ 987.783162][ T28] audit: type=1326 audit(987.696:24144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 987.851107][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 987.864511][T20958] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 987.874189][ T28] audit: type=1326 audit(987.696:24145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 987.905787][ T28] audit: type=1326 audit(987.696:24146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 987.928719][ T28] audit: type=1326 audit(987.696:24147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 987.951668][ T28] audit: type=1326 audit(987.696:24148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 988.158075][ T1049] loop5: detected capacity change from 0 to 2048 [ 988.298059][ T1049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 988.485981][ T1049] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 5: comm syz.5.7102: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=7952, size=124 fake=0 [ 988.876457][T20958] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.017541][ T28] audit: type=1326 audit(987.696:24149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 989.040767][ T28] audit: type=1326 audit(987.696:24150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 989.464524][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7112'. [ 989.488374][ T28] audit: type=1326 audit(987.696:24151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 989.511424][ T28] audit: type=1326 audit(987.696:24152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1043 comm="syz.3.7100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 989.550910][ T1083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7112'. [ 989.676259][ T1086] netlink: 10 bytes leftover after parsing attributes in process `syz.9.7114'. [ 989.691163][ T1086] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7114'. [ 989.728666][ T1086] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7114'. [ 989.746356][ T1083] ip6gretap0: entered promiscuous mode [ 989.807221][ T1083] syz_tun: entered promiscuous mode [ 990.192050][ T1094] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7116'. [ 990.531675][ T1112] vlan3: entered promiscuous mode [ 990.561649][ T1112] bond0: entered promiscuous mode [ 990.575569][ T1112] bond_slave_0: entered promiscuous mode [ 990.581559][ T1112] bond_slave_1: entered promiscuous mode [ 991.223334][ T1141] 9pnet_fd: Insufficient options for proto=fd [ 991.763854][ T1160] loop6: detected capacity change from 0 to 1764 [ 991.781164][ T1160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7135'. [ 991.790732][ T1160] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7135'. [ 991.800788][ T1160] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 992.115743][ T1167] loop5: detected capacity change from 0 to 1024 [ 992.142552][ T1167] EXT4-fs: test_dummy_encryption option not supported [ 992.306172][ T1161] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 992.480278][ T1174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.516618][ T1174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.546397][ T1176] loop9: detected capacity change from 0 to 512 [ 992.570594][ T1176] EXT4-fs: Ignoring removed oldalloc option [ 992.593740][ T1176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 992.660155][ T1176] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 992.717641][ T28] kauditd_printk_skb: 681 callbacks suppressed [ 992.717658][ T28] audit: type=1400 audit(992.766:24834): avc: denied { mounton } for pid=1183 comm="syz.5.7152" path="/syzcgroup/unified/syz5" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 992.787007][ T28] audit: type=1400 audit(992.796:24835): avc: denied { bind } for pid=1175 comm="syz.9.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 993.008908][ T28] audit: type=1400 audit(993.056:24836): avc: denied { write } for pid=1175 comm="syz.9.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 993.300822][ T1201] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7158'. [ 993.355568][ T1204] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7159'. [ 994.189943][ T1215] program syz.5.7163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.226586][ T28] audit: type=1326 audit(994.266:24837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.379509][ T28] audit: type=1326 audit(994.276:24838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.403694][ T28] audit: type=1326 audit(994.276:24839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.445405][ T28] audit: type=1326 audit(994.276:24840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.522732][ T28] audit: type=1326 audit(994.306:24841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.634821][ T1230] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7168'. [ 994.683550][ T28] audit: type=1326 audit(994.306:24842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.706822][ T28] audit: type=1326 audit(994.306:24843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.9.7167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f0778c819 code=0x7ffc0000 [ 994.969298][ T1227] loop9: detected capacity change from 0 to 512 [ 995.107129][ T1227] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 995.125250][ T1227] EXT4-fs (loop9): mount failed [ 995.409942][ T1236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.573697][ T1236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.605827][ T1238] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7170'. [ 996.201809][ T391] bridge_slave_1: left allmulticast mode [ 996.228463][ T391] bridge_slave_1: left promiscuous mode [ 996.261242][ T391] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.296165][ T391] bridge_slave_0: left allmulticast mode [ 996.324900][ T391] bridge_slave_0: left promiscuous mode [ 996.342990][ T391] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.487152][ T1263] usb usb7: usbfs: process 1263 (syz.3.7177) did not claim interface 0 before use [ 996.497215][ T391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.508525][ T391] bond_slave_0: left promiscuous mode [ 996.514200][ T1263] FAULT_INJECTION: forcing a failure. [ 996.514200][ T1263] name failslab, interval 1, probability 0, space 0, times 0 [ 996.528580][ T391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 996.537541][ T1263] CPU: 1 UID: 0 PID: 1263 Comm: syz.3.7177 Tainted: G W syzkaller #0 PREEMPT(full) [ 996.537617][ T1263] Tainted: [W]=WARN [ 996.537624][ T1263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 996.537637][ T1263] Call Trace: [ 996.537643][ T1263] [ 996.537651][ T1263] __dump_stack+0x1d/0x30 [ 996.537737][ T1263] dump_stack_lvl+0x95/0xd0 [ 996.537769][ T1263] dump_stack+0x15/0x1b [ 996.537843][ T1263] should_fail_ex+0x263/0x280 [ 996.537933][ T1263] should_failslab+0x8c/0xb0 [ 996.537959][ T1263] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 996.537993][ T1263] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 996.538101][ T1263] ? kstrdup_const+0x3e/0x50 [ 996.538137][ T1263] kstrdup+0x3e/0xd0 [ 996.538216][ T1263] kstrdup_const+0x3e/0x50 [ 996.538255][ T1263] __kernfs_new_node+0x42/0x400 [ 996.538344][ T1263] ? vprintk_emit+0x572/0x600 [ 996.538376][ T1263] ? dev_vprintk_emit+0x242/0x2a0 [ 996.538409][ T1263] kernfs_new_node+0xd0/0x140 [ 996.538512][ T1263] kernfs_create_link+0x70/0x130 [ 996.538601][ T1263] sysfs_do_create_link_sd+0x6a/0x100 [ 996.538672][ T1263] sysfs_create_link+0x51/0x70 [ 996.538713][ T1263] driver_sysfs_add+0x54/0x160 [ 996.538751][ T1263] device_bind_driver+0x17/0x60 [ 996.538844][ T1263] usb_driver_claim_interface+0x1af/0x280 [ 996.538958][ T1263] claimintf+0x113/0x190 [ 996.538985][ T1263] proc_do_submiturb+0xee2/0x1d00 [ 996.539071][ T1263] proc_submiturb+0x7b/0xa0 [ 996.539105][ T1263] usbdev_ioctl+0xcb4/0x1750 [ 996.539185][ T1263] ? __pfx_usbdev_ioctl+0x10/0x10 [ 996.539221][ T1263] __se_sys_ioctl+0xce/0x140 [ 996.539267][ T1263] __x64_sys_ioctl+0x43/0x50 [ 996.539310][ T1263] x64_sys_call+0x1563/0x3020 [ 996.539373][ T1263] do_syscall_64+0x12c/0x3b0 [ 996.539399][ T1263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.539465][ T1263] RIP: 0033:0x7f2fa364c819 [ 996.539485][ T1263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.539509][ T1263] RSP: 002b:00007f2fa209f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.539534][ T1263] RAX: ffffffffffffffda RBX: 00007f2fa38c5fa0 RCX: 00007f2fa364c819 [ 996.539553][ T1263] RDX: 0000200000000380 RSI: 000000008038550a RDI: 0000000000000003 [ 996.539648][ T1263] RBP: 00007f2fa209f090 R08: 0000000000000000 R09: 0000000000000000 [ 996.539666][ T1263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.539683][ T1263] R13: 00007f2fa38c6038 R14: 00007f2fa38c5fa0 R15: 00007ffd2e320e78 [ 996.539710][ T1263] [ 996.540034][ T391] bond_slave_1: left promiscuous mode [ 996.800905][ T391] bond0 (unregistering): Released all slaves [ 996.808878][ T391] bond1 (unregistering): Released all slaves [ 996.845321][ T1277] loop9: detected capacity change from 0 to 128 [ 996.872995][ T1277] FAT-fs (loop9): bogus number of reserved sectors [ 996.879980][ T391] tipc: Left network mode [ 996.897162][ T1277] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 996.927042][ T1277] FAT-fs (loop9): Can't find a valid FAT filesystem [ 996.934471][ T1281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.954203][ T1281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.112250][ T1305] netlink: 'syz.9.7184': attribute type 8 has an invalid length. [ 997.127918][ T1303] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.7185'. [ 997.159151][ T3048] 8021q: adding VLAN 0 to HW filter on device eth21 [ 997.175791][ T391] hsr_slave_0: left promiscuous mode [ 997.181878][ T391] hsr_slave_1: left promiscuous mode [ 997.227472][ T391] team_slave_1 (unregistering): left promiscuous mode [ 997.234883][ T391] team0 (unregistering): Port device team_slave_1 removed [ 997.245724][ T391] team_slave_0 (unregistering): left promiscuous mode [ 997.252963][ T391] team0 (unregistering): Port device team_slave_0 removed [ 997.257688][ T1314] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.7186'. [ 997.298740][ T1241] chnl_net:caif_netlink_parms(): no params data found [ 997.340042][ T1241] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.347217][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.354540][ T1241] bridge_slave_0: entered allmulticast mode [ 997.363332][ T1241] bridge_slave_0: entered promiscuous mode [ 997.370426][ T1241] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.377613][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.384905][ T1241] bridge_slave_1: entered allmulticast mode [ 997.391661][ T1241] bridge_slave_1: entered promiscuous mode [ 997.434779][ T1241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.448628][ T1241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.476040][ T1320] loop6: detected capacity change from 0 to 1024 [ 997.487866][ T1241] team0: Port device team_slave_0 added [ 997.494811][ T1241] team0: Port device team_slave_1 added [ 997.502472][ T1320] EXT4-fs: Ignoring removed oldalloc option [ 997.546322][ T1241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.571759][ T1241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.619380][ T1241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.642438][ T1241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 997.682557][ T1241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 997.746525][ T1241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.782021][ T1341] netlink: 1363 bytes leftover after parsing attributes in process `syz.9.7193'. [ 997.819245][ T3048] 8021q: adding VLAN 0 to HW filter on device eth22 [ 997.829543][ T1353] vlan3: entered promiscuous mode [ 997.849318][ T1241] hsr_slave_0: entered promiscuous mode [ 997.861889][ T1241] hsr_slave_1: entered promiscuous mode [ 997.868217][ T1241] debugfs: 'hsr0' already exists in 'hsr' [ 997.874192][ T1241] Cannot create hsr debugfs directory [ 997.894301][ T1357] loop9: detected capacity change from 0 to 512 [ 997.910140][ T1357] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 997.961243][ T1357] EXT4-fs (loop9): 1 orphan inode deleted [ 997.985166][ T1357] EXT4-fs (loop9): 1 truncate cleaned up [ 998.008946][ T1357] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.092353][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.120324][ T1370] netlink: 'syz.6.7199': attribute type 29 has an invalid length. [ 998.364152][ T1397] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7206'. [ 998.385013][ T28] kauditd_printk_skb: 222 callbacks suppressed [ 998.404292][ T1409] loop6: detected capacity change from 0 to 512 [ 998.407515][ T28] audit: type=1400 audit(998.426:25066): avc: denied { execute } for pid=1404 comm="syz.0.7208" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 998.553356][ T1422] netlink: 'syz.6.7212': attribute type 29 has an invalid length. [ 998.590738][ T1241] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 998.617444][ T1241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 998.674544][ T1241] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 998.705717][ T1241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 998.716769][ T1241] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 998.734171][ T1241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 998.754811][ T1241] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 998.870939][ T28] audit: type=1326 audit(998.816:25067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 998.894900][ T28] audit: type=1326 audit(998.816:25068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 998.920575][ T1241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 998.939633][ T28] audit: type=1326 audit(998.816:25070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.015996][ T1446] loop6: detected capacity change from 0 to 1024 [ 999.059375][ T28] audit: type=1326 audit(998.816:25071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.142418][ T28] audit: type=1326 audit(998.816:25072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.335806][ T1241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.390928][ T1241] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.418915][ T28] audit: type=1326 audit(998.816:25069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.481357][ T28] audit: type=1326 audit(998.816:25073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.504740][ T28] audit: type=1326 audit(998.816:25074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.555005][ T391] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.562158][ T391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.699846][ T391] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.707131][ T391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.758997][ T28] audit: type=1326 audit(998.816:25075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1435 comm="syz.3.7214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 999.917444][ T1241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 999.927844][ T1241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1000.189867][ T1457] loop6: detected capacity change from 0 to 128 [ 1000.263449][ T1241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.397482][ T1461] loop6: detected capacity change from 0 to 764 [ 1000.645772][ T1241] veth0_vlan: entered promiscuous mode [ 1000.657659][ T1241] veth1_vlan: entered promiscuous mode [ 1000.679978][ T1241] veth0_macvtap: entered promiscuous mode [ 1000.698066][ T1241] veth1_macvtap: entered promiscuous mode [ 1000.723515][ T1241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.748798][ T1241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1000.770350][ T6172] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.790058][ T6172] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.905459][ T6172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.023187][ T6172] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.058357][ T1489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7220'. [ 1001.730315][ T1505] netlink: 'syz.5.7223': attribute type 29 has an invalid length. [ 1001.936317][ T1507] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7224'. [ 1003.392119][ T1569] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7234'. [ 1003.413142][ T6172] Bluetooth: hci0: Frame reassembly failed (-84) [ 1003.472855][ T1576] loop6: detected capacity change from 0 to 2048 [ 1003.595808][ T1584] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.7238'. [ 1003.710702][ T1557] loop5: detected capacity change from 0 to 128 [ 1003.881940][ T1587] netlink: 'syz.5.7232': attribute type 1 has an invalid length. [ 1004.335561][ T1604] vhci_hcd vhci_hcd.0: invalid port number 23 [ 1004.450759][ T1609] loop5: detected capacity change from 0 to 512 [ 1004.464793][ T1609] EXT4-fs (loop5): 1 truncate cleaned up [ 1004.471063][ T1609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.476294][ T1607] FAULT_INJECTION: forcing a failure. [ 1004.476294][ T1607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1004.512735][ T1607] CPU: 0 UID: 0 PID: 1607 Comm: syz.9.7246 Tainted: G W syzkaller #0 PREEMPT(full) [ 1004.512851][ T1607] Tainted: [W]=WARN [ 1004.512860][ T1607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1004.512875][ T1607] Call Trace: [ 1004.512885][ T1607] [ 1004.512895][ T1607] __dump_stack+0x1d/0x30 [ 1004.512948][ T1607] dump_stack_lvl+0x95/0xd0 [ 1004.512977][ T1607] dump_stack+0x15/0x1b [ 1004.513004][ T1607] should_fail_ex+0x263/0x280 [ 1004.513107][ T1607] should_fail+0xb/0x20 [ 1004.513172][ T1607] should_fail_usercopy+0x1a/0x20 [ 1004.513212][ T1607] _copy_to_user+0x20/0xa0 [ 1004.513244][ T1607] simple_read_from_buffer+0xb5/0x130 [ 1004.513272][ T1607] proc_fail_nth_read+0x10e/0x150 [ 1004.513350][ T1607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1004.513386][ T1607] vfs_read+0x1ab/0x7f0 [ 1004.513450][ T1607] ? __rcu_read_unlock+0x4e/0x70 [ 1004.513479][ T1607] ? __fget_files+0x184/0x1c0 [ 1004.513526][ T1607] ? mutex_lock+0x57/0x90 [ 1004.513590][ T1607] ksys_read+0xdc/0x1a0 [ 1004.513659][ T1607] __x64_sys_read+0x40/0x50 [ 1004.513695][ T1607] x64_sys_call+0x2886/0x3020 [ 1004.513733][ T1607] do_syscall_64+0x12c/0x3b0 [ 1004.513762][ T1607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1004.513788][ T1607] RIP: 0033:0x7f7f0774d04e [ 1004.513867][ T1607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1004.513889][ T1607] RSP: 002b:00007f7f061e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1004.513913][ T1607] RAX: ffffffffffffffda RBX: 00007f7f061e76c0 RCX: 00007f7f0774d04e [ 1004.513929][ T1607] RDX: 000000000000000f RSI: 00007f7f061e70a0 RDI: 0000000000000006 [ 1004.513945][ T1607] RBP: 00007f7f061e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1004.513960][ T1607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1004.513974][ T1607] R13: 00007f7f07a06038 R14: 00007f7f07a05fa0 R15: 00007ffd072ec028 [ 1004.513996][ T1607] [ 1004.902073][ T1630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7252'. [ 1004.938412][ T1632] loop9: detected capacity change from 0 to 1024 [ 1004.952517][ T1632] EXT4-fs: Ignoring removed orlov option [ 1005.010142][ T1632] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.7253: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1005.036201][ T1632] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 1005.036425][ T1632] EXT4-fs error (device loop9): ext4_quota_enable:7228: comm syz.9.7253: Bad quota inode: 4, type: 1 [ 1005.045749][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1005.045774][ C1] EXT4-fs (loop9): initial error at time 1005: ext4_ext_check_inode:521: inode 4 [ 1005.045812][ C1] EXT4-fs (loop9): last error at time 1005: ext4_ext_check_inode:521: inode 4 [ 1005.130830][ T1632] loop9: lost filesystem error report for type 5 error -117 [ 1005.131466][ T1632] EXT4-fs warning (device loop9): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1005.172203][ T1632] EXT4-fs (loop9): mount failed [ 1005.434998][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 1005.441351][T32380] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1005.482973][ T1637] usb usb7: usbfs: process 1637 (syz.6.7255) did not claim interface 0 before use [ 1005.517362][ T1637] FAULT_INJECTION: forcing a failure. [ 1005.517362][ T1637] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.580733][ T1637] CPU: 1 UID: 0 PID: 1637 Comm: syz.6.7255 Tainted: G W syzkaller #0 PREEMPT(full) [ 1005.580778][ T1637] Tainted: [W]=WARN [ 1005.580789][ T1637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1005.580824][ T1637] Call Trace: [ 1005.580832][ T1637] [ 1005.580842][ T1637] __dump_stack+0x1d/0x30 [ 1005.580875][ T1637] dump_stack_lvl+0x95/0xd0 [ 1005.580905][ T1637] dump_stack+0x15/0x1b [ 1005.580937][ T1637] should_fail_ex+0x263/0x280 [ 1005.581025][ T1637] should_failslab+0x8c/0xb0 [ 1005.581053][ T1637] __kmalloc_node_track_caller_noprof+0xc3/0x550 [ 1005.581128][ T1637] ? kstrdup_const+0x3e/0x50 [ 1005.581184][ T1637] kstrdup+0x3e/0xd0 [ 1005.581323][ T1637] kstrdup_const+0x3e/0x50 [ 1005.581358][ T1637] __kernfs_new_node+0x42/0x400 [ 1005.581389][ T1637] ? irqentry_exit+0x7d/0x5b0 [ 1005.581489][ T1637] kernfs_new_node+0xd0/0x140 [ 1005.581558][ T1637] kernfs_create_link+0x70/0x130 [ 1005.581582][ T1637] sysfs_do_create_link_sd+0x6a/0x100 [ 1005.581615][ T1637] sysfs_create_link+0x51/0x70 [ 1005.581715][ T1637] driver_sysfs_add+0x54/0x160 [ 1005.581748][ T1637] device_bind_driver+0x17/0x60 [ 1005.581778][ T1637] usb_driver_claim_interface+0x1af/0x280 [ 1005.581847][ T1637] claimintf+0x113/0x190 [ 1005.581867][ T1637] proc_do_submiturb+0xee2/0x1d00 [ 1005.581901][ T1637] proc_submiturb+0x7b/0xa0 [ 1005.581982][ T1637] usbdev_ioctl+0xcb4/0x1750 [ 1005.582023][ T1637] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1005.582062][ T1637] __se_sys_ioctl+0xce/0x140 [ 1005.582131][ T1637] __x64_sys_ioctl+0x43/0x50 [ 1005.582220][ T1637] x64_sys_call+0x1563/0x3020 [ 1005.582248][ T1637] do_syscall_64+0x12c/0x3b0 [ 1005.582281][ T1637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.582325][ T1637] RIP: 0033:0x7fd2b95ac819 [ 1005.582347][ T1637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1005.582371][ T1637] RSP: 002b:00007fd2b8007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.582398][ T1637] RAX: ffffffffffffffda RBX: 00007fd2b9825fa0 RCX: 00007fd2b95ac819 [ 1005.582414][ T1637] RDX: 0000200000000380 RSI: 000000008038550a RDI: 0000000000000003 [ 1005.582429][ T1637] RBP: 00007fd2b8007090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.582445][ T1637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.582458][ T1637] R13: 00007fd2b9826038 R14: 00007fd2b9825fa0 R15: 00007fffff4b5228 [ 1005.582497][ T1637] [ 1005.898366][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1005.960995][ T1642] Cannot find set identified by id 0 to match [ 1006.005128][ T1646] netlink: 'syz.6.7258': attribute type 1 has an invalid length. [ 1006.029071][ T1646] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7258'. [ 1006.038723][ T1651] netlink: 140 bytes leftover after parsing attributes in process `syz.9.7253'. [ 1006.046197][ T1645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1006.055339][ T1645] IPv6: NLM_F_CREATE should be set when creating new route [ 1006.071839][ T1650] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7256'. [ 1006.103662][ T1650] syzkaller0: entered promiscuous mode [ 1006.116160][ T1650] syzkaller0: entered allmulticast mode [ 1006.141112][ T1650] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7256'. [ 1006.153835][ T1655] FAULT_INJECTION: forcing a failure. [ 1006.153835][ T1655] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.173764][ T1655] CPU: 1 UID: 0 PID: 1655 Comm: syz.3.7261 Tainted: G W syzkaller #0 PREEMPT(full) [ 1006.173800][ T1655] Tainted: [W]=WARN [ 1006.173808][ T1655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1006.173822][ T1655] Call Trace: [ 1006.173830][ T1655] [ 1006.173871][ T1655] __dump_stack+0x1d/0x30 [ 1006.173940][ T1655] dump_stack_lvl+0x95/0xd0 [ 1006.173970][ T1655] dump_stack+0x15/0x1b [ 1006.174058][ T1655] should_fail_ex+0x263/0x280 [ 1006.174092][ T1655] ? io_drain_req+0x67/0x330 [ 1006.174132][ T1655] should_failslab+0x8c/0xb0 [ 1006.174186][ T1655] __kmalloc_cache_noprof+0x5f/0x400 [ 1006.174237][ T1655] ? __rcu_read_unlock+0x4e/0x70 [ 1006.174275][ T1655] io_drain_req+0x67/0x330 [ 1006.174313][ T1655] ? io_queue_sqe_fallback+0x129/0x140 [ 1006.174405][ T1655] io_queue_sqe_fallback+0x131/0x140 [ 1006.174449][ T1655] io_submit_sqes+0xd39/0x1170 [ 1006.174485][ T1655] __se_sys_io_uring_enter+0x255/0xfb0 [ 1006.174562][ T1655] ? mutex_lock+0x57/0x90 [ 1006.174601][ T1655] ? mutex_unlock+0x4e/0x90 [ 1006.174638][ T1655] ? fput+0x8f/0xc0 [ 1006.174673][ T1655] __x64_sys_io_uring_enter+0x78/0x90 [ 1006.174697][ T1655] x64_sys_call+0x1e16/0x3020 [ 1006.174725][ T1655] do_syscall_64+0x12c/0x3b0 [ 1006.174754][ T1655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.174842][ T1655] RIP: 0033:0x7f2fa364c819 [ 1006.174864][ T1655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.174886][ T1655] RSP: 002b:00007f2fa209f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1006.174911][ T1655] RAX: ffffffffffffffda RBX: 00007f2fa38c5fa0 RCX: 00007f2fa364c819 [ 1006.174929][ T1655] RDX: 0000000000006933 RSI: 00000000000008ae RDI: 0000000000000000 [ 1006.174978][ T1655] RBP: 00007f2fa209f090 R08: 0000000000000000 R09: 000000000000effd [ 1006.174993][ T1655] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 1006.175009][ T1655] R13: 00007f2fa38c6038 R14: 00007f2fa38c5fa0 R15: 00007ffd2e320e78 [ 1006.175088][ T1655] [ 1007.264920][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 1007.265005][ T28] audit: type=1400 audit(1007.317:25261): avc: denied { read } for pid=1676 comm="syz.0.7268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1007.291105][ T1677] usb usb7: usbfs: process 1677 (syz.0.7268) did not claim interface 0 before use [ 1007.364764][ T1683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7271'. [ 1007.405441][ T28] audit: type=1400 audit(1007.447:25262): avc: denied { execute } for pid=1680 comm="syz.6.7270" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1007.564211][ T1687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7273'. [ 1007.611326][ T28] audit: type=1400 audit(1007.657:25263): avc: denied { mount } for pid=1702 comm="syz.9.7277" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1007.642095][ T1706] loop6: detected capacity change from 0 to 256 [ 1007.660936][ T1706] loop6: detected capacity change from 0 to 512 [ 1007.667657][ T1706] EXT4-fs: Ignoring removed mblk_io_submit option [ 1007.674230][ T1706] ext4: Unknown parameter 'euid' [ 1007.689552][ T1706] loop6: detected capacity change from 0 to 128 [ 1007.709045][ T28] audit: type=1400 audit(1007.657:25264): avc: denied { mounton } for pid=1702 comm="syz.9.7277" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1007.762036][ T28] audit: type=1400 audit(1007.787:25265): avc: denied { unmount } for pid=25294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1007.788466][ T1710] loop5: detected capacity change from 0 to 512 [ 1007.842307][ T1710] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1007.862297][ T1717] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7281'. [ 1007.908398][ T1710] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1007.924731][ T1721] loop9: detected capacity change from 0 to 512 [ 1007.934361][ T1710] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7279: Corrupt directory, running e2fsck is recommended [ 1007.949721][ T1710] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 1007.959091][ T1721] EXT4-fs (loop9): 1 truncate cleaned up [ 1007.979761][ T1710] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.7279: corrupted in-inode xattr: e_name out of bounds [ 1007.999478][ T1721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.043655][ T1710] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1008.043850][ T1710] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7279: couldn't read orphan inode 15 (err -117) [ 1008.053369][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1008.053392][ C0] EXT4-fs (loop5): initial error at time 1008: ext4_iget_extra_inode:5128: inode 15 [ 1008.053432][ C0] EXT4-fs (loop5): last error at time 1008: ext4_iget_extra_inode:5128: inode 15 [ 1008.094794][ T1710] loop5: lost filesystem error report for type 5 error -117 [ 1008.126692][ T1710] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1008.169051][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.228190][ T1710] random: crng reseeded on system resumption [ 1008.327617][ T1710] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1008.354566][ T1710] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1008.364709][ T1710] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7279: Corrupt directory, running e2fsck is recommended [ 1008.395380][ T1710] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1008.416494][ T1710] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 1008.426992][ T1710] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.7279: Corrupt directory, running e2fsck is recommended [ 1008.505023][ T1743] loop6: detected capacity change from 0 to 256 [ 1008.562429][ T28] audit: type=1400 audit(1008.577:25266): avc: denied { setattr } for pid=1742 comm="syz.6.7291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1008.563434][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1009.303340][ T28] audit: type=1326 audit(1009.347:25267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.6.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b95ac819 code=0x7ffc0000 [ 1009.332737][ T28] audit: type=1326 audit(1009.377:25268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.6.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b95ac819 code=0x7ffc0000 [ 1009.384145][ T28] audit: type=1326 audit(1009.377:25269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.6.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2b95ac819 code=0x7ffc0000 [ 1009.433705][ T28] audit: type=1326 audit(1009.377:25270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1768 comm="syz.6.7299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd2b95ac819 code=0x7ffc0000 [ 1010.265567][ T1774] FAULT_INJECTION: forcing a failure. [ 1010.265567][ T1774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.355134][ T1774] CPU: 0 UID: 0 PID: 1774 Comm: syz.0.7300 Tainted: G W syzkaller #0 PREEMPT(full) [ 1010.355238][ T1774] Tainted: [W]=WARN [ 1010.355248][ T1774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1010.355266][ T1774] Call Trace: [ 1010.355276][ T1774] [ 1010.355287][ T1774] __dump_stack+0x1d/0x30 [ 1010.355376][ T1774] dump_stack_lvl+0x95/0xd0 [ 1010.355408][ T1774] dump_stack+0x15/0x1b [ 1010.355440][ T1774] should_fail_ex+0x263/0x280 [ 1010.355478][ T1774] should_fail+0xb/0x20 [ 1010.355565][ T1774] should_fail_usercopy+0x1a/0x20 [ 1010.355678][ T1774] _copy_from_user+0x1c/0xb0 [ 1010.355699][ T1774] do_sock_getsockopt+0x122/0x570 [ 1010.355739][ T1774] __x64_sys_getsockopt+0x11d/0x1a0 [ 1010.355850][ T1774] x64_sys_call+0x2dcf/0x3020 [ 1010.355903][ T1774] do_syscall_64+0x12c/0x3b0 [ 1010.355930][ T1774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.355953][ T1774] RIP: 0033:0x7fbc7b97c819 [ 1010.355972][ T1774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.356080][ T1774] RSP: 002b:00007fbc7a3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1010.356102][ T1774] RAX: ffffffffffffffda RBX: 00007fbc7bbf5fa0 RCX: 00007fbc7b97c819 [ 1010.356120][ T1774] RDX: 0000000000000074 RSI: 000000000000006b RDI: 0000000000000003 [ 1010.356156][ T1774] RBP: 00007fbc7a3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.356169][ T1774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.356182][ T1774] R13: 00007fbc7bbf6038 R14: 00007fbc7bbf5fa0 R15: 00007ffff8422158 [ 1010.356202][ T1774] [ 1010.621209][ T1777] loop6: detected capacity change from 0 to 512 [ 1010.972426][ T1783] vlan3: entered promiscuous mode [ 1010.984178][ T1783] geneve1: entered promiscuous mode [ 1010.995870][ T1783] vlan3: entered allmulticast mode [ 1011.006271][ T1783] geneve1: entered allmulticast mode [ 1011.164361][ T1794] __nla_validate_parse: 2 callbacks suppressed [ 1011.164384][ T1794] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7306'. [ 1011.834710][ T1824] loop6: detected capacity change from 0 to 512 [ 1012.376803][ T1824] loop6: detected capacity change from 0 to 512 [ 1012.823040][ T1856] netlink: 'syz.9.7322': attribute type 10 has an invalid length. [ 1012.889395][ T1856] ipvlan0: entered allmulticast mode [ 1012.941185][ T1856] veth0_vlan: entered allmulticast mode [ 1012.974621][ T1856] team0: Device ipvlan0 failed to register rx_handler [ 1013.029896][ T1859] loop5: detected capacity change from 0 to 1764 [ 1013.125743][ T1859] loop5: detected capacity change from 0 to 1024 [ 1013.163603][ T1859] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1013.173100][ T1859] System zones: 0-1, 3-36 [ 1013.241232][ T1859] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.7324: bad orphan inode 134217728 [ 1013.265798][ T1859] loop5: lost filesystem error report for type 5 error -117 [ 1013.275509][ T1859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1013.401943][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.764677][ T1867] loop5: detected capacity change from 0 to 1764 [ 1013.783164][ T1867] isofs_fill_super: get root inode failed [ 1013.935356][ T1874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7330'. [ 1013.944839][ T1874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7330'. [ 1014.157998][ T1880] team0: Device gtp1 is of different type [ 1014.348394][ T1808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1014.523686][ T1908] tmpfs: Bad value for 'mpol' [ 1014.671597][ T1916] loop9: detected capacity change from 0 to 512 [ 1014.720077][ T1916] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1014.751563][ T1924] veth0: entered promiscuous mode [ 1014.763217][ T1924] veth0: left promiscuous mode [ 1014.785887][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1014.883631][ T1931] FAULT_INJECTION: forcing a failure. [ 1014.883631][ T1931] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.933743][ T1931] CPU: 0 UID: 0 PID: 1931 Comm: syz.3.7351 Tainted: G W syzkaller #0 PREEMPT(full) [ 1014.933789][ T1931] Tainted: [W]=WARN [ 1014.933799][ T1931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1014.933815][ T1931] Call Trace: [ 1014.933824][ T1931] [ 1014.933835][ T1931] __dump_stack+0x1d/0x30 [ 1014.933948][ T1931] dump_stack_lvl+0x95/0xd0 [ 1014.933973][ T1931] dump_stack+0x15/0x1b [ 1014.934037][ T1931] should_fail_ex+0x263/0x280 [ 1014.934082][ T1931] should_failslab+0x8c/0xb0 [ 1014.934109][ T1931] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 1014.934163][ T1931] ? __d_alloc+0x37/0x340 [ 1014.934202][ T1931] __d_alloc+0x37/0x340 [ 1014.934241][ T1931] d_alloc+0x2e/0x100 [ 1014.934278][ T1931] lookup_one_qstr_excl+0x95/0x240 [ 1014.934315][ T1931] filename_create+0x155/0x220 [ 1014.934407][ T1931] filename_mkdirat+0x81/0x300 [ 1014.934431][ T1931] __se_sys_mkdirat+0x32/0xf0 [ 1014.934482][ T1931] __x64_sys_mkdirat+0x43/0x50 [ 1014.934507][ T1931] x64_sys_call+0x2c4e/0x3020 [ 1014.934586][ T1931] do_syscall_64+0x12c/0x3b0 [ 1014.934621][ T1931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.934648][ T1931] RIP: 0033:0x7f2fa364c819 [ 1014.934664][ T1931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.934682][ T1931] RSP: 002b:00007f2fa209f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1014.934747][ T1931] RAX: ffffffffffffffda RBX: 00007f2fa38c5fa0 RCX: 00007f2fa364c819 [ 1014.934796][ T1931] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1014.934809][ T1931] RBP: 00007f2fa209f090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.934825][ T1931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.934879][ T1931] R13: 00007f2fa38c6038 R14: 00007f2fa38c5fa0 R15: 00007ffd2e320e78 [ 1014.934903][ T1931] [ 1015.154735][ T1938] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7354'. [ 1015.164067][ T1938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.346078][ T1938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.354882][ T1960] loop9: detected capacity change from 0 to 764 [ 1016.361773][ T1960] iso9660: Unknown parameter '@' [ 1016.637854][ T1974] team_slave_0: entered promiscuous mode [ 1016.643711][ T1974] team_slave_1: entered promiscuous mode [ 1016.655460][ T1974] vlan4: entered promiscuous mode [ 1016.678003][ T1974] team0: entered promiscuous mode [ 1016.922088][ T1940] Set syz1 is full, maxelem 65536 reached [ 1016.993718][ T1988] loop9: detected capacity change from 0 to 164 [ 1017.019115][ T1988] FAULT_INJECTION: forcing a failure. [ 1017.019115][ T1988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1017.032443][ T1988] CPU: 0 UID: 0 PID: 1988 Comm: syz.9.7370 Tainted: G W syzkaller #0 PREEMPT(full) [ 1017.032483][ T1988] Tainted: [W]=WARN [ 1017.032535][ T1988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1017.032551][ T1988] Call Trace: [ 1017.032558][ T1988] [ 1017.032568][ T1988] __dump_stack+0x1d/0x30 [ 1017.032616][ T1988] dump_stack_lvl+0x95/0xd0 [ 1017.032650][ T1988] dump_stack+0x15/0x1b [ 1017.032739][ T1988] should_fail_ex+0x263/0x280 [ 1017.032813][ T1988] should_fail+0xb/0x20 [ 1017.032892][ T1988] should_fail_usercopy+0x1a/0x20 [ 1017.032934][ T1988] _copy_from_user+0x1c/0xb0 [ 1017.032961][ T1988] do_handle_open+0x40b/0x790 [ 1017.033080][ T1988] __x64_sys_open_by_handle_at+0x44/0x50 [ 1017.033116][ T1988] x64_sys_call+0x153d/0x3020 [ 1017.033302][ T1988] do_syscall_64+0x12c/0x3b0 [ 1017.033336][ T1988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.033366][ T1988] RIP: 0033:0x7f7f0778c819 [ 1017.033444][ T1988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.033468][ T1988] RSP: 002b:00007f7f061e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1017.033505][ T1988] RAX: ffffffffffffffda RBX: 00007f7f07a05fa0 RCX: 00007f7f0778c819 [ 1017.033524][ T1988] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 1017.033542][ T1988] RBP: 00007f7f061e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.033560][ T1988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.033629][ T1988] R13: 00007f7f07a06038 R14: 00007f7f07a05fa0 R15: 00007ffd072ec028 [ 1017.033649][ T1988] [ 1017.238023][ T1991] rock: directory entry would overflow storage [ 1017.248762][ T1991] rock: sig=0x4d4e, size=5, remaining=4 [ 1017.257748][ T1991] isofs: isofs_export_get_parent(): child directory not normalized! [ 1017.395238][ T1996] netlink: 'syz.9.7372': attribute type 12 has an invalid length. [ 1017.403293][ T1996] netlink: 'syz.9.7372': attribute type 29 has an invalid length. [ 1017.439475][ T1996] netlink: 148 bytes leftover after parsing attributes in process `syz.9.7372'. [ 1017.533432][ T28] kauditd_printk_skb: 213 callbacks suppressed [ 1017.533453][ T28] audit: type=1326 audit(1017.578:25484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2001 comm="syz.9.7375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f0778c819 code=0x0 [ 1017.727993][ T2009] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 1017.745704][ T2009] loop5: detected capacity change from 0 to 512 [ 1017.757576][ T2009] EXT4-fs (loop5): 1 orphan inode deleted [ 1017.769915][ T2009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.954012][ T2019] netlink: 'syz.3.7380': attribute type 10 has an invalid length. [ 1017.983686][ T2015] loop6: detected capacity change from 0 to 512 [ 1018.030196][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7373'. [ 1018.428009][ T2031] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7383'. [ 1018.480836][ T2030] batadv0: left allmulticast mode [ 1018.552326][ T2030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.594584][ T2030] ipvlan0: left allmulticast mode [ 1018.599955][ T2030] veth0_vlan: left allmulticast mode [ 1018.619971][ T2030] ip6tnl1: left allmulticast mode [ 1018.638833][ T2030] veth5: left allmulticast mode [ 1018.649765][ T2030] vlan2: left allmulticast mode [ 1018.659421][ T2030] bond2: left allmulticast mode [ 1018.668381][ T2030] geneve2: left allmulticast mode [ 1018.696106][ T2031] geneve3: entered promiscuous mode [ 1018.702370][ T28] audit: type=1326 audit(1018.748:25485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2026 comm="syz.6.7382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd2b95ac819 code=0x0 [ 1018.728578][ T6161] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.751054][ T6161] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.776743][ T6161] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.801463][ T6161] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.896274][ T2044] netlink: 'syz.0.7387': attribute type 9 has an invalid length. [ 1018.905036][ T2044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7387'. [ 1018.917608][ T2044] macvlan0: entered promiscuous mode [ 1018.923440][ T2044] macvlan0: entered allmulticast mode [ 1019.061505][ T2053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7391'. [ 1019.083725][ T2053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.094881][ T2053] bridge_slave_1 (unregistering): left allmulticast mode [ 1019.101972][ T2053] bridge_slave_1 (unregistering): left promiscuous mode [ 1019.109043][ T2053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.270564][ T2063] loop6: detected capacity change from 0 to 1024 [ 1020.205378][ T2088] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7403'. [ 1020.280894][ T2091] loop9: detected capacity change from 0 to 128 [ 1020.338603][ T2091] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1020.432719][ T28] audit: type=1400 audit(1020.478:25486): avc: denied { remount } for pid=2087 comm="syz.9.7404" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1020.539776][ T2100] 9p: Bad value for 'wfdno' [ 1020.766025][ T28] audit: type=1400 audit(1020.588:25487): avc: denied { mounton } for pid=2087 comm="syz.9.7404" path="/450/file0" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1020.844049][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1020.893892][ T2103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2103 comm=syz.3.7403 [ 1021.271536][ T2119] FAULT_INJECTION: forcing a failure. [ 1021.271536][ T2119] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.285056][ T2119] CPU: 1 UID: 0 PID: 2119 Comm: syz.5.7406 Tainted: G W syzkaller #0 PREEMPT(full) [ 1021.285091][ T2119] Tainted: [W]=WARN [ 1021.285101][ T2119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1021.285118][ T2119] Call Trace: [ 1021.285130][ T2119] [ 1021.285138][ T2119] __dump_stack+0x1d/0x30 [ 1021.285168][ T2119] dump_stack_lvl+0x95/0xd0 [ 1021.285195][ T2119] dump_stack+0x15/0x1b [ 1021.285227][ T2119] should_fail_ex+0x263/0x280 [ 1021.285297][ T2119] ? alloc_pipe_info+0xad/0x340 [ 1021.285323][ T2119] should_failslab+0x8c/0xb0 [ 1021.285350][ T2119] __kmalloc_cache_noprof+0x5f/0x400 [ 1021.285385][ T2119] alloc_pipe_info+0xad/0x340 [ 1021.285436][ T2119] splice_direct_to_actor+0x591/0x670 [ 1021.285490][ T2119] ? irqentry_exit+0x527/0x5b0 [ 1021.285515][ T2119] ? __pfx_direct_splice_actor+0x10/0x10 [ 1021.285679][ T2119] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 1021.285731][ T2119] do_splice_direct+0x119/0x1a0 [ 1021.285776][ T2119] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1021.285804][ T2119] do_sendfile+0x382/0x650 [ 1021.285840][ T2119] __x64_sys_sendfile64+0x105/0x150 [ 1021.285871][ T2119] x64_sys_call+0x2dc4/0x3020 [ 1021.285900][ T2119] do_syscall_64+0x12c/0x3b0 [ 1021.285926][ T2119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.285953][ T2119] RIP: 0033:0x7f8b4632c819 [ 1021.285975][ T2119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.286047][ T2119] RSP: 002b:00007f8b44d7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1021.286067][ T2119] RAX: ffffffffffffffda RBX: 00007f8b465a5fa0 RCX: 00007f8b4632c819 [ 1021.286134][ T2119] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1021.286151][ T2119] RBP: 00007f8b44d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.286169][ T2119] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 1021.286185][ T2119] R13: 00007f8b465a6038 R14: 00007f8b465a5fa0 R15: 00007ffdff540f78 [ 1021.286268][ T2119] [ 1021.606791][ T2135] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7415'. [ 1021.617936][ T2135] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7415'. [ 1021.636738][ T2135] loop5: detected capacity change from 0 to 512 [ 1021.669596][ T2135] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1021.696287][ T2135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 1021.713477][ T2135] System zones: 1-12 [ 1021.726850][ T2143] SET target dimension over the limit! [ 1021.790587][ T2143] netlink: 108 bytes leftover after parsing attributes in process `syz.6.7414'. [ 1021.800902][ T2135] EXT4-fs (loop5): 1 truncate cleaned up [ 1021.807391][ T2135] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1021.918487][ T28] audit: type=1326 audit(1021.968:25488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2154 comm="syz.3.7417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x0 [ 1021.956799][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.139040][ T2178] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7421'. [ 1022.197176][ T2187] FAULT_INJECTION: forcing a failure. [ 1022.197176][ T2187] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.210120][ T2187] CPU: 1 UID: 0 PID: 2187 Comm: syz.0.7423 Tainted: G W syzkaller #0 PREEMPT(full) [ 1022.210214][ T2187] Tainted: [W]=WARN [ 1022.210224][ T2187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1022.210271][ T2187] Call Trace: [ 1022.210285][ T2187] [ 1022.210296][ T2187] __dump_stack+0x1d/0x30 [ 1022.210385][ T2187] dump_stack_lvl+0x95/0xd0 [ 1022.210420][ T2187] dump_stack+0x15/0x1b [ 1022.210492][ T2187] should_fail_ex+0x263/0x280 [ 1022.210535][ T2187] should_failslab+0x8c/0xb0 [ 1022.210562][ T2187] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1022.210642][ T2187] ? sctp_get_port_local+0x438/0xae0 [ 1022.210693][ T2187] sctp_get_port_local+0x438/0xae0 [ 1022.210752][ T2187] sctp_do_bind+0x398/0x4b0 [ 1022.210794][ T2187] sctp_setsockopt_bindx+0x1c9/0x2c0 [ 1022.210842][ T2187] sctp_setsockopt+0x7de/0xea0 [ 1022.210954][ T2187] sock_common_setsockopt+0x69/0x80 [ 1022.210980][ T2187] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1022.211002][ T2187] __sys_setsockopt+0x184/0x200 [ 1022.211030][ T2187] __x64_sys_setsockopt+0x64/0x80 [ 1022.211066][ T2187] x64_sys_call+0x2327/0x3020 [ 1022.211119][ T2187] do_syscall_64+0x12c/0x3b0 [ 1022.211154][ T2187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.211187][ T2187] RIP: 0033:0x7fbc7b97c819 [ 1022.211209][ T2187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.211233][ T2187] RSP: 002b:00007fbc7a3cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1022.211260][ T2187] RAX: ffffffffffffffda RBX: 00007fbc7bbf5fa0 RCX: 00007fbc7b97c819 [ 1022.211279][ T2187] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 1022.211305][ T2187] RBP: 00007fbc7a3cf090 R08: 0000000000000010 R09: 0000000000000000 [ 1022.211318][ T2187] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1022.211331][ T2187] R13: 00007fbc7bbf6038 R14: 00007fbc7bbf5fa0 R15: 00007ffff8422158 [ 1022.211351][ T2187] [ 1022.601765][ T2209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7426'. [ 1022.721133][ T2225] FAULT_INJECTION: forcing a failure. [ 1022.721133][ T2225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.743663][ T2225] CPU: 1 UID: 0 PID: 2225 Comm: syz.5.7427 Tainted: G W syzkaller #0 PREEMPT(full) [ 1022.743747][ T2225] Tainted: [W]=WARN [ 1022.743757][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1022.743830][ T2225] Call Trace: [ 1022.743839][ T2225] [ 1022.743849][ T2225] __dump_stack+0x1d/0x30 [ 1022.743881][ T2225] dump_stack_lvl+0x95/0xd0 [ 1022.743909][ T2225] dump_stack+0x15/0x1b [ 1022.743947][ T2225] should_fail_ex+0x263/0x280 [ 1022.744007][ T2225] should_fail+0xb/0x20 [ 1022.744093][ T2225] should_fail_usercopy+0x1a/0x20 [ 1022.744127][ T2225] _copy_from_user+0x1c/0xb0 [ 1022.744152][ T2225] io_submit_one+0x52/0x1350 [ 1022.744258][ T2225] __se_sys_io_submit+0xfb/0x280 [ 1022.744378][ T2225] __x64_sys_io_submit+0x43/0x50 [ 1022.744515][ T2225] x64_sys_call+0x19d5/0x3020 [ 1022.744543][ T2225] do_syscall_64+0x12c/0x3b0 [ 1022.744575][ T2225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.744664][ T2225] RIP: 0033:0x7f8b4632c819 [ 1022.744684][ T2225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.744780][ T2225] RSP: 002b:00007f8b44d7f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1022.744801][ T2225] RAX: ffffffffffffffda RBX: 00007f8b465a5fa0 RCX: 00007f8b4632c819 [ 1022.744815][ T2225] RDX: 00002000000002c0 RSI: 0000000000000002 RDI: 00007f8b470e4000 [ 1022.744831][ T2225] RBP: 00007f8b44d7f090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.744919][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.744932][ T2225] R13: 00007f8b465a6038 R14: 00007f8b465a5fa0 R15: 00007ffdff540f78 [ 1022.744957][ T2225] [ 1022.907128][ T2235] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7428'. [ 1022.970850][ T2235] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7428'. [ 1022.992411][ T2235] loop5: detected capacity change from 0 to 512 [ 1023.001977][ T2235] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1023.016080][ T2235] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 1023.026931][ T2235] System zones: 1-12 [ 1023.034272][ T2235] EXT4-fs (loop5): 1 truncate cleaned up [ 1023.042183][ T2235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.129887][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.441706][ T2289] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7439'. [ 1023.531591][ T2299] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7441'. [ 1023.541447][ T2299] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7441'. [ 1023.554734][ T2299] loop5: detected capacity change from 0 to 512 [ 1023.586482][ T2299] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1023.600572][ T2299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 1023.608894][ T2299] System zones: 1-12 [ 1023.613566][ T2299] EXT4-fs (loop5): 1 truncate cleaned up [ 1023.619777][ T2299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1023.764610][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.795246][ T2305] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7444'. [ 1023.827510][ T2305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7444'. [ 1023.862305][ T2305] loop5: detected capacity change from 0 to 2048 [ 1024.317725][ T2317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.326905][ T2317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.346968][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7447'. [ 1024.547006][ T2332] netlink: 564 bytes leftover after parsing attributes in process `syz.5.7454'. [ 1024.575075][ T2335] loop9: detected capacity change from 0 to 512 [ 1024.583895][ T2332] loop5: detected capacity change from 0 to 512 [ 1024.590941][ T2335] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1024.608454][ T2332] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1024.609174][ T2335] EXT4-fs (loop9): 1 truncate cleaned up [ 1024.626551][ T2332] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 1024.634887][ T2332] System zones: 1-12 [ 1024.639550][ T2332] EXT4-fs (loop5): 1 truncate cleaned up [ 1024.645773][ T2335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.673471][ T2332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1024.700544][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.747222][ T2347] IPv6: NLM_F_CREATE should be specified when creating new route [ 1024.844731][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.854523][ T6172] Bluetooth: hci0: Frame reassembly failed (-84) [ 1024.990060][ T2358] loop9: detected capacity change from 0 to 1764 [ 1025.867474][ T2379] loop6: detected capacity change from 0 to 512 [ 1025.879006][ T2381] loop5: detected capacity change from 0 to 512 [ 1025.913922][ T2381] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #17: comm syz.5.7470: iget: bogus i_mode (0) [ 1026.077920][ T2381] loop5: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1026.078054][ T2381] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7470: couldn't read orphan inode 17 (err -117) [ 1026.087356][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1026.087373][ C1] EXT4-fs (loop5): initial error at time 1026: ext4_orphan_get:1397: inode 17 [ 1026.087415][ C1] EXT4-fs (loop5): last error at time 1026: ext4_orphan_get:1397: inode 17 [ 1026.131123][ T2383] veth5: entered allmulticast mode [ 1026.166100][ T2383] bond3: (slave veth5): Enslaving as an active interface with an up link [ 1026.315718][ T2381] loop5: lost filesystem error report for type 5 error -117 [ 1026.316340][ T2381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1026.417622][ T2012] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 1026.545372][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1026.736630][ T2411] FAULT_INJECTION: forcing a failure. [ 1026.736630][ T2411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.799252][ T2411] CPU: 1 UID: 0 PID: 2411 Comm: syz.9.7482 Tainted: G W syzkaller #0 PREEMPT(full) [ 1026.799298][ T2411] Tainted: [W]=WARN [ 1026.799375][ T2411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1026.799391][ T2411] Call Trace: [ 1026.799401][ T2411] [ 1026.799413][ T2411] __dump_stack+0x1d/0x30 [ 1026.799451][ T2411] dump_stack_lvl+0x95/0xd0 [ 1026.799640][ T2411] dump_stack+0x15/0x1b [ 1026.799676][ T2411] should_fail_ex+0x263/0x280 [ 1026.799720][ T2411] should_fail+0xb/0x20 [ 1026.799773][ T2411] should_fail_usercopy+0x1a/0x20 [ 1026.799824][ T2411] _copy_from_user+0x1c/0xb0 [ 1026.799852][ T2411] kstrtouint_from_user+0x69/0xf0 [ 1026.799917][ T2411] ? 0xffffffff81000000 [ 1026.799939][ T2411] ? selinux_file_permission+0x1e1/0x320 [ 1026.799983][ T2411] proc_fail_nth_write+0x50/0x160 [ 1026.800088][ T2411] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1026.800248][ T2411] vfs_write+0x269/0x9f0 [ 1026.800295][ T2411] ? __rcu_read_unlock+0x4e/0x70 [ 1026.800334][ T2411] ? __fget_files+0x184/0x1c0 [ 1026.800403][ T2411] ? mutex_lock+0x57/0x90 [ 1026.800452][ T2411] ksys_write+0xdc/0x1a0 [ 1026.800512][ T2411] __x64_sys_write+0x40/0x50 [ 1026.800561][ T2411] x64_sys_call+0x27e1/0x3020 [ 1026.800682][ T2411] do_syscall_64+0x12c/0x3b0 [ 1026.800732][ T2411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.800765][ T2411] RIP: 0033:0x7f7f0774d04e [ 1026.800788][ T2411] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1026.800815][ T2411] RSP: 002b:00007f7f061e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.800871][ T2411] RAX: ffffffffffffffda RBX: 00007f7f061e76c0 RCX: 00007f7f0774d04e [ 1026.800900][ T2411] RDX: 0000000000000001 RSI: 00007f7f061e70a0 RDI: 0000000000000004 [ 1026.800918][ T2411] RBP: 00007f7f061e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.800937][ T2411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.800955][ T2411] R13: 00007f7f07a06038 R14: 00007f7f07a05fa0 R15: 00007ffd072ec028 [ 1026.801054][ T2411] [ 1027.021954][ T2422] loop5: detected capacity change from 0 to 512 [ 1027.030228][T32380] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1027.047820][ T2422] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1027.060360][ T28] audit: type=1400 audit(1027.109:25489): avc: denied { setopt } for pid=2424 comm="syz.0.7486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1027.089038][ T2422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c028, mo2=0002] [ 1027.098730][ T2422] System zones: 1-12 [ 1027.194736][ T2433] bond0: entered promiscuous mode [ 1027.204058][ T2433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1027.225642][ T2422] EXT4-fs (loop5): 1 truncate cleaned up [ 1027.233281][ T2422] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1027.316974][ T2441] can: request_module (can-proto-0) failed. [ 1027.346244][ T1241] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.363160][ T2441] loop6: detected capacity change from 0 to 512 [ 1027.374505][ T2447] loop9: detected capacity change from 0 to 1764 [ 1027.632285][ T2447] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1027.750364][ T28] audit: type=1326 audit(1027.779:25490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1027.773477][ T28] audit: type=1326 audit(1027.789:25492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1027.796984][ T28] audit: type=1326 audit(1027.789:25493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1027.977213][ T28] audit: type=1326 audit(1027.779:25491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1028.817917][ T28] audit: type=1326 audit(1027.789:25494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1028.841315][ T28] audit: type=1326 audit(1027.789:25495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1028.864533][ T28] audit: type=1326 audit(1027.789:25496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1029.840984][ T28] audit: type=1326 audit(1027.789:25497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1029.864553][ T28] audit: type=1326 audit(1027.789:25498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2463 comm="syz.0.7499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fbc7b97c819 code=0x7ffc0000 [ 1030.380048][ T2469] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.387457][ T2469] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.463796][ T401] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.516006][ T401] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.567125][ T401] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.600103][ T401] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.639416][ T401] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.682701][ T401] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.692475][ T401] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.701000][ T401] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.764716][ T2478] __nla_validate_parse: 15 callbacks suppressed [ 1030.764735][ T2478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7503'. [ 1030.885726][ T2480] loop6: detected capacity change from 0 to 8192 [ 1032.466137][ T2516] loop6: detected capacity change from 0 to 512 [ 1032.733323][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7516'. [ 1032.950957][ T2523] netlink: 'syz.6.7517': attribute type 9 has an invalid length. [ 1032.993883][ T2523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7517'. [ 1033.042836][ T2523] macvlan2: entered promiscuous mode [ 1033.063869][ T2523] hsr0: entered promiscuous mode [ 1033.084038][ T2523] macvlan2: entered allmulticast mode [ 1033.098585][ T2523] hsr0: entered allmulticast mode [ 1033.117277][ T2523] hsr_slave_0: entered allmulticast mode [ 1033.132505][ T2523] hsr_slave_1: entered allmulticast mode [ 1033.291312][ T2498] Set syz1 is full, maxelem 65536 reached [ 1034.164710][ T2554] netlink: 112 bytes leftover after parsing attributes in process `syz.6.7529'. [ 1034.392413][ T2566] loop6: detected capacity change from 0 to 512 [ 1034.485023][ T2565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7532'. [ 1035.013908][ T2569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.030496][ T2569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.050743][ T2581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7537'. [ 1035.164645][ T2585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.173479][ T2585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.182429][ T2587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.191442][ T2587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.237531][ T2592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.246229][ T2592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.519396][ T2607] loop6: detected capacity change from 0 to 1764 [ 1035.531865][ T2607] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7549'. [ 1035.541384][ T2607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7549'. [ 1035.551506][ T2607] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1035.640805][ T2612] loop6: detected capacity change from 0 to 512 [ 1035.826561][ T2621] loop9: detected capacity change from 0 to 512 [ 1035.835208][ T2621] EXT4-fs: Ignoring removed bh option [ 1035.843421][ T2621] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 1035.861009][ T2627] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7557'. [ 1035.870107][ T2621] EXT4-fs (loop9): 1 truncate cleaned up [ 1035.875570][ T2621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.891608][ T2627] netlink: 9 bytes leftover after parsing attributes in process `syz.6.7557'. [ 1035.915617][ T2621] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7555: bg 0: block 465: padding at end of block bitmap is not set [ 1035.942592][ T2621] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1035.956606][ T2621] EXT4-fs (loop9): This should not happen!! Data will be lost [ 1035.956606][ T2621] [ 1035.959059][ T2633] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1035.967366][ T2621] EXT4-fs (loop9): Total free blocks count 0 [ 1035.982888][ T2621] EXT4-fs (loop9): Free/Dirty block details [ 1035.989061][ T2621] EXT4-fs (loop9): free_blocks=0 [ 1035.994563][ T2621] EXT4-fs (loop9): dirty_blocks=66 [ 1035.999739][ T2621] EXT4-fs (loop9): Block reservation details [ 1036.005710][ T2633] netlink: 'syz.0.7559': attribute type 1 has an invalid length. [ 1036.026329][ T2638] hub 8-0:1.0: USB hub found [ 1036.031116][ T2638] hub 8-0:1.0: 8 ports detected [ 1036.038364][ T2633] bond4: (slave bridge1): making interface the new active one [ 1036.048695][ T2633] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 1036.063384][ T2621] EXT4-fs (loop9): i_reserved_data_blocks=66 [ 1036.083870][ T2634] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 1036.199930][ T2634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1036.219127][ T2633] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1036.237223][ T2641] loop6: detected capacity change from 0 to 1764 [ 1036.250664][ T2641] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7561'. [ 1036.259750][ T2641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7561'. [ 1036.269950][ T2641] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1036.294043][ T2634] macvlan1: entered promiscuous mode [ 1036.299424][ T2634] macvlan1: entered allmulticast mode [ 1036.333394][ T396] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 1036.385730][ T2652] batadv0: entered promiscuous mode [ 1036.391504][ T2652] debugfs: 'hsr1' already exists in 'hsr' [ 1036.400327][ T2652] Cannot create hsr debugfs directory [ 1036.407049][ T2652] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1036.418523][ T2652] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1036.429732][ T2652] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1036.440050][ T2652] batadv0: left promiscuous mode [ 1036.511015][ T2660] bridge0: port 3(batadv0) entered blocking state [ 1036.517794][ T2660] bridge0: port 3(batadv0) entered disabled state [ 1036.526118][ T2660] batadv0: entered allmulticast mode [ 1036.532078][ T2660] batadv0: entered promiscuous mode [ 1036.539886][ T28] kauditd_printk_skb: 864 callbacks suppressed [ 1036.539925][ T28] audit: type=1326 audit(1036.589:26363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.3.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 1036.585761][ T28] audit: type=1326 audit(1036.619:26364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.3.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 1036.609563][ T28] audit: type=1326 audit(1036.619:26365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.3.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 1036.659145][ T28] audit: type=1326 audit(1036.619:26366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.3.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 1036.709975][ T2669] netlink: 'syz.6.7570': attribute type 13 has an invalid length. [ 1036.719093][ T28] audit: type=1326 audit(1036.689:26367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2659 comm="syz.3.7566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fa364c819 code=0x7ffc0000 [ 1036.745701][ T2669] netlink: 'syz.6.7570': attribute type 17 has an invalid length. [ 1036.807543][ T2669] 8021q: adding VLAN 0 to HW filter on device .` [ 1036.817043][ T2669] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.849218][ T2669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1036.954782][ T2673] hugetlbfs: syz.9.7571 (2673): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1037.002856][ T6161] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1037.012184][ T6161] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1037.043789][ T2681] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7574'. [ 1037.150709][ T2689] loop6: detected capacity change from 0 to 512 [ 1037.508120][ T2689] syzkaller0: entered promiscuous mode [ 1037.514443][ T2689] syzkaller0: entered allmulticast mode [ 1037.521666][ T2699] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 1037.785806][ T2712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1037.811390][ T2712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7587'. [ 1037.823083][ T2689] loop6: detected capacity change from 0 to 512 [ 1037.831199][ T2689] ext4: Unknown parameter 'hash' [ 1038.005999][ T28] audit: type=1400 audit(1038.059:26368): avc: denied { accept } for pid=2720 comm="syz.0.7590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1038.090469][ T2737] loop5: detected capacity change from 0 to 1024 [ 1038.100810][ T2737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.109586][ T2737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.174431][ T2739] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1038.174431][ T2739] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1038.258867][ T2741] netlink: 199580 bytes leftover after parsing attributes in process `syz.9.7597'. [ 1038.363197][ T2752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.371758][ T2752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.403480][ T2756] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.458479][ T2756] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.505085][ T2756] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.529871][ T2760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7606'. [ 1038.564231][ T2756] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.599576][T23713] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.618425][T23713] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.632904][T23713] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.641628][T23713] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1038.673160][ T2772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1038.700197][ T28] audit: type=1400 audit(1038.749:26369): avc: denied { name_bind } for pid=2753 comm="syz.0.7603" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1041.188150][ T2812] loop6: detected capacity change from 0 to 1024 [ 1041.266060][ T2820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.291546][ T2820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.380214][ T2818] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1041.387898][ T2818] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1041.395230][ T2818] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1041.403894][ T2818] xt_hashlimit: max too large, truncated to 1048576 [ 1041.500749][ T2825] __nla_validate_parse: 4 callbacks suppressed [ 1041.500769][ T2825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7631'. [ 1042.016131][ T28] audit: type=1326 audit(1042.070:26370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.040463][ T28] audit: type=1326 audit(1042.070:26371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.064638][ T28] audit: type=1326 audit(1042.070:26372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.088331][ T28] audit: type=1326 audit(1042.070:26373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.111665][ T28] audit: type=1326 audit(1042.080:26374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.145262][ T2843] futex_wake_op: syz.6.7636 tries to shift op by 32; fix this program [ 1042.192456][ T28] audit: type=1326 audit(1042.080:26375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.351211][ T28] audit: type=1326 audit(1042.080:26376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.405906][ T2849] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1042.450417][ T28] audit: type=1326 audit(1042.080:26377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.478770][ T28] audit: type=1326 audit(1042.080:26378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.512091][ T2849] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1042.522150][ T2854] xt_hashlimit: max too large, truncated to 1048576 [ 1042.649348][ T28] audit: type=1326 audit(1042.080:26379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2842 comm="syz.5.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4632c819 code=0x7ffc0000 [ 1042.717181][ T2849] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1042.799341][ T2859] loop9: detected capacity change from 0 to 128 [ 1042.835728][ T2852] loop5: detected capacity change from 0 to 512 [ 1042.876288][ T2852] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1042.891625][ T2852] EXT4-fs (loop5): mount failed [ 1043.007187][ T2857] netlink: 'syz.9.7638': attribute type 10 has an invalid length. [ 1043.083268][ T2857] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7638'. [ 1043.094938][ T2857] : entered promiscuous mode [ 1043.100008][ T2857] bridge0: port 3() entered blocking state [ 1043.106075][ T2857] bridge0: port 3() entered disabled state [ 1043.130679][ T2857] : entered allmulticast mode [ 1043.145199][ T2857] bridge0: entered allmulticast mode [ 1043.161524][ T2857] : left allmulticast mode [ 1043.178936][ T2857] bridge0: left allmulticast mode [ 1044.192662][ T2867] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1044.200202][ T2867] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1044.207548][ T2867] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 1044.216354][ T2867] xt_hashlimit: max too large, truncated to 1048576 [ 1044.431141][ T2878] loop5: detected capacity change from 0 to 512 [ 1044.504669][ T2878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1044.523949][ T2878] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.7645: iget: bad i_size value: 38620345925642 [ 1044.541646][ T2878] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1044.542576][ T2878] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.7645: couldn't read orphan inode 15 (err -117) [ 1044.551854][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 1044.551877][ C1] EXT4-fs (loop5): initial error at time 1044: ext4_orphan_get:1397: inode 15 [ 1044.551913][ C1] EXT4-fs (loop5): last error at time 1044: ext4_orphan_get:1397: inode 15 [ 1044.588357][ T2878] loop5: lost filesystem error report for type 5 error -117 [ 1044.593807][ T2878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.620769][ T2829] Set syz1 is full, maxelem 65536 reached [ 1044.670038][ T2880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7646'. [ 1044.700492][ T2886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.709500][ T2886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.722088][ T2880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.736456][ T2878] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7645: bg 0: block 5: invalid block bitmap [ 1044.751170][ T2878] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 528 with error 28 [ 1044.763587][ T2878] EXT4-fs (loop5): This should not happen!! Data will be lost [ 1044.763587][ T2878] [ 1044.773255][ T2878] EXT4-fs (loop5): Total free blocks count 0 [ 1044.779397][ T2878] EXT4-fs (loop5): Free/Dirty block details [ 1044.785352][ T2878] EXT4-fs (loop5): free_blocks=0 [ 1044.790579][ T2878] EXT4-fs (loop5): dirty_blocks=528 [ 1044.798057][ T2885] EXT4-fs (loop5): shut down requested (1) [ 1044.804008][ T2878] EXT4-fs (loop5): Block reservation details [ 1044.814852][ T2878] EXT4-fs (loop5): i_reserved_data_blocks=528 [ 1044.893147][ T2890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7649'. [ 1045.900235][ T2940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7655'. [ 1045.947615][ T2940] macvtap1: entered promiscuous mode [ 1045.958712][ T2940] dummy0: entered promiscuous mode [ 1045.964256][ T2940] macvtap1: entered allmulticast mode [ 1045.969723][ T2940] dummy0: entered allmulticast mode [ 1046.003161][ T2961] gtp0: entered promiscuous mode [ 1046.008174][ T2961] gtp0: entered allmulticast mode [ 1046.198337][ T2977] loop9: detected capacity change from 0 to 512 [ 1046.231907][ T2977] EXT4-fs: Ignoring removed orlov option [ 1046.314537][ T2981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7662'. [ 1046.412646][ T2977] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.458578][ T2992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2992 comm=syz.0.7665 [ 1046.549960][ T3003] FAULT_INJECTION: forcing a failure. [ 1046.549960][ T3003] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1046.569912][T25294] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.595161][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: syz.0.7669 Tainted: G W syzkaller #0 PREEMPT(full) [ 1046.595268][ T3003] Tainted: [W]=WARN [ 1046.595278][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1046.595297][ T3003] Call Trace: [ 1046.595306][ T3003] [ 1046.595316][ T3003] __dump_stack+0x1d/0x30 [ 1046.595354][ T3003] dump_stack_lvl+0x95/0xd0 [ 1046.595456][ T3003] dump_stack+0x15/0x1b [ 1046.595503][ T3003] should_fail_ex+0x263/0x280 [ 1046.595544][ T3003] should_fail+0xb/0x20 [ 1046.595613][ T3003] should_fail_usercopy+0x1a/0x20 [ 1046.595649][ T3003] _copy_to_user+0x20/0xa0 [ 1046.595676][ T3003] simple_read_from_buffer+0xb5/0x130 [ 1046.595709][ T3003] proc_fail_nth_read+0x10e/0x150 [ 1046.595820][ T3003] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1046.595863][ T3003] vfs_read+0x1ab/0x7f0 [ 1046.595904][ T3003] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1046.596000][ T3003] ? __rcu_read_unlock+0x4e/0x70 [ 1046.596093][ T3003] ? __fget_files+0x184/0x1c0 [ 1046.596124][ T3003] ? mutex_lock+0x57/0x90 [ 1046.596173][ T3003] ksys_read+0xdc/0x1a0 [ 1046.596260][ T3003] __x64_sys_read+0x40/0x50 [ 1046.596296][ T3003] x64_sys_call+0x2886/0x3020 [ 1046.596333][ T3003] do_syscall_64+0x12c/0x3b0 [ 1046.596358][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.596426][ T3003] RIP: 0033:0x7fbc7b93d04e [ 1046.596443][ T3003] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1046.596531][ T3003] RSP: 002b:00007fbc7a3cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1046.596555][ T3003] RAX: ffffffffffffffda RBX: 00007fbc7a3cf6c0 RCX: 00007fbc7b93d04e [ 1046.596571][ T3003] RDX: 000000000000000f RSI: 00007fbc7a3cf0a0 RDI: 0000000000000006 [ 1046.596585][ T3003] RBP: 00007fbc7a3cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.596600][ T3003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.596616][ T3003] R13: 00007fbc7bbf6038 R14: 00007fbc7bbf5fa0 R15: 00007ffff8422158 [ 1046.596659][ T3003] [ 1046.992996][ T3019] loop5: detected capacity change from 0 to 512 [ 1047.038905][ T3019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1047.086687][ T3019] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 1047.108917][ T3019] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1047.135052][ T3019] EXT4-fs (loop5): mount failed [ 1047.263984][ T3031] 9p: Bad value for 'rfdno' [ 1047.278985][ T3031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7678'. [ 1047.293830][ T3035] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7679'. [ 1047.335561][ T3041] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7681'. [ 1047.345702][ T3039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7680'. [ 1047.384872][ T3043] loop9: detected capacity change from 0 to 256 [ 1047.412036][ T3043] FAT-fs (loop9): Directory bread(block 64) failed [ 1047.420954][ T3043] FAT-fs (loop9): Directory bread(block 65) failed [ 1047.427269][ T3045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7683'. [ 1047.429191][ T3043] FAT-fs (loop9): Directory bread(block 66) failed [ 1047.450495][ T3043] FAT-fs (loop9): Directory bread(block 67) failed [ 1047.460270][ T3043] FAT-fs (loop9): Directory bread(block 68) failed [ 1047.467670][ T3043] FAT-fs (loop9): Directory bread(block 69) failed [ 1047.481608][ T3043] FAT-fs (loop9): Directory bread(block 70) failed [ 1047.488344][ T3043] FAT-fs (loop9): Directory bread(block 71) failed [ 1047.495389][ T3043] FAT-fs (loop9): Directory bread(block 72) failed [ 1047.504066][ T3043] FAT-fs (loop9): Directory bread(block 73) failed [ 1047.526848][ T3043] vlan3: entered promiscuous mode [ 1047.533276][ T3043] gretap0: entered promiscuous mode [ 1047.797925][ T3085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7694'. [ 1048.544114][ T3101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.561765][ T3101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.675763][ T3105] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7699'. [ 1048.711330][ T3105] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7699'. [ 1049.077806][ T3115] loop9: detected capacity change from 0 to 1764 [ 1049.091193][ T3115] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7702'. [ 1049.100191][ T3115] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7702'. [ 1049.111601][ T3115] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1049.708772][ T3141] ================================================================== [ 1049.716932][ T3141] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 1049.724465][ T3141] [ 1049.726821][ T3141] write to 0xffff88821618c400 of 8 bytes by task 3140 on cpu 1: [ 1049.734488][ T3141] mas_wmb_replace+0x1512/0x1760 [ 1049.739468][ T3141] mas_wr_store_entry+0x54ff/0x5ad0 [ 1049.744711][ T3141] mas_store_prealloc+0x43e/0x690 [ 1049.749778][ T3141] vma_complete+0x3c7/0x850 [ 1049.754319][ T3141] __split_vma+0x593/0x640 [ 1049.758759][ T3141] vma_modify+0xb4b/0xca0 [ 1049.763124][ T3141] vma_modify_flags+0x182/0x210 [ 1049.768012][ T3141] mprotect_fixup+0x3a2/0x680 [ 1049.772723][ T3141] do_mprotect_pkey+0x6ae/0x960 [ 1049.777689][ T3141] __x64_sys_mprotect+0x48/0x60 [ 1049.782613][ T3141] x64_sys_call+0x2768/0x3020 [ 1049.787348][ T3141] do_syscall_64+0x12c/0x3b0 [ 1049.791966][ T3141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.797884][ T3141] [ 1049.800235][ T3141] read to 0xffff88821618c400 of 8 bytes by task 3141 on cpu 0: [ 1049.807793][ T3141] mtree_range_walk+0x350/0x490 [ 1049.812805][ T3141] mas_walk+0x1cc/0x370 [ 1049.817070][ T3141] lock_vma_under_rcu+0xc9/0x210 [ 1049.822031][ T3141] do_user_addr_fault+0x232/0x1050 [ 1049.827181][ T3141] exc_page_fault+0x62/0xa0 [ 1049.831718][ T3141] asm_exc_page_fault+0x26/0x30 [ 1049.836592][ T3141] [ 1049.839119][ T3141] value changed: 0xffff88821a77cc0e -> 0xffff88821618c400 [ 1049.846247][ T3141] [ 1049.848594][ T3141] Reported by Kernel Concurrency Sanitizer on: [ 1049.854762][ T3141] CPU: 0 UID: 0 PID: 3141 Comm: syz.3.7711 Tainted: G W syzkaller #0 PREEMPT(full) [ 1049.865637][ T3141] Tainted: [W]=WARN [ 1049.869543][ T3141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1049.879708][ T3141] ==================================================================