last executing test programs: 9m8.845142618s ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000001d00)={[{@dax_inode}, {}, {@dioread_nolock}, {@resuid={'resuid', 0x3d, 0xee01}}, {@abort}, {@grpid}, {@nouid32}, {@resgid}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0100001200010029bd7000fedbdf25e00000010000000000000000000000007f0000010000000000000000000000004e2200004e2047060000003002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d233000000e0000001000000000000000000000000070000000000000008000000000000000400000000000000ffffffff00000000000000000000000040340000000000000300000000000000d73b000000000000ffffffffffffffff0500000000000000010000800000000001800000000000000000000400000000000000002abd7000000000000a00040412000000e900000000000000931a0000050019002b0000002c00"], 0x12c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x10000000000004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x84, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbabaaaaaaaabb86dd60c6dd0000103afffc010000000000000000000000000000ff0200000000000000000000000000018b009078200696f90000000000000007"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r5}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r3}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x7) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x19c, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x64, 0x14, {{'cmac(aes)\x00'}, 0xc0, 0x0, "e80c857b65087dea03da4c290569c738c39dac5defb806ba"}}]}, 0x19c}}, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r7) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000ffdbdf25040000003c0006800800060001000000060001000200000006000100020000000600010000000000080006000e000000060005f98b6cf6af3e8e35004e24000008000400080000000800030005000000"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001540)={'ip6tnl0\x00', &(0x7f00000014c0)={'syztnl1\x00', 0x0, 0x4, 0x1, 0xa8, 0x40, 0x1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8000, 0x9, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000001b80)={'ip_vti0\x00', &(0x7f0000001b40)={'gre0\x00', 0x0, 0xc1, 0x7800, 0x1b006178, 0x401, {{0x7, 0x4, 0x1, 0x21, 0x1c, 0x65, 0x0, 0x4, 0x29, 0x0, @broadcast, @multicast2, {[@lsrr={0x83, 0x7, 0x72, [@loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000001cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0xa0, r8, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x44040}, 0x80) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 9m7.698259176s ago: executing program 4 (id=14): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 9m7.079654025s ago: executing program 4 (id=22): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x4a5, &(0x7f0000000bc0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf5, 0x20000}, 0x20) 9m6.885560681s ago: executing program 4 (id=27): pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r0, 0xffffffffffffffff, 0xf3a, 0x4) 9m4.897632746s ago: executing program 4 (id=45): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000844) 9m4.835007255s ago: executing program 32 (id=45): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000844) 5m2.406970972s ago: executing program 2 (id=3477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair(0x1, 0x805, 0x0, 0x0) r3 = syz_clone(0x206000, &(0x7f0000001980), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, r3, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r4 = epoll_create1(0x80000) r5 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xc000000b}) signalfd4(r5, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x2}, 0x1c) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x66) syz_clone3(&(0x7f00000000c0)={0x385200080, 0x0, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) r6 = socket(0x2, 0x2, 0x1) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000040)={0x2}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, 0x0}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 5m2.305498125s ago: executing program 2 (id=3478): syz_emit_ethernet(0x2056, &(0x7f0000002080)=ANY=[@ANYBLOB="ffffffffffff4983121b85a186dd600fe10420203afffe8000000000000000000000000000aaff0200000000000000000000000000018700907800000000000000000000000000000000000051689209c05602c38ea65a59a8d20cf10f4721a02aeae8ba6124599c49203dbc02733cd0d0698f44cdbd3f5d84ad37b5e7af38b258d90d4495f43100f47318f4bff0596d73f981a22fbb9e0efb5fd1fb8a580c161bc9cb5822a4233baf5b07941c6529c553e450a4d4f81ff19509fc97af68ed80ed63eb64e2ca76348c5a4f04b99b127e8e7425752a9d6a6a58a7643819048ae80b53e934528a999badd4d75f984b68459e765f34b540a1a46bf54a963aeefca5eb5019e35c8a00c8feefcb0cf6358ca9a99833f8a727c88ff20001684f46a22bb7ab0a45eaac8d58df93a42fcf329294e70f881baf99335f7986ce26e53c05f4b0bd98dd1053c85223004608e38f90bbca8fbdf8a13ca60a0aa6967ac86bdd32f71f93294e3b3549eff9fead2df9e4b7ce964dc37604b9db0add86e5eca23388574f3165844815a47b132653ddc7f13512a8056496c5f8f2296f2bb7c1dc5c0279dd8cb2ee2f5767fabbdc614be0ed94523de56cce4eb0820c68305b4cbad4077747e9b9893132e407945eaae83e609b97372b619d24754711bd67aaf8a6335b63713c5469a395bf1d8d77c8d2940c3e17c5ae6b927e9b23eb72420e469cd3993c701bdad0c7dd6ada16d6a1623a9845536c5cbba1e205d23f7b298bee155343b82f4bdf3fc40c57b9a2acad7950fc4f0679cbf169c939b80b217b263964a33f3738dd9039928395ecf89030d8d0e869360b1141c02aa70255a9d8a251159a831c65fdc25979de7fe65b8bff4261d9cef4a3db6cc8a926e7ae4141803a4459748270a3269b8c9884fb5739c4cb4863731559e57fa3a78320e3f5ef83ead3fec93e636653262b70b9441d8c7c2054e61c597ca11a584988ff3a06adeca96d80177e3bf8469127ebf9a34a2433cf888aa571068cb777c88eb7923f49465a20f1b974a57bc055cf2469bb29b2269a5214a754e4146c1008b1901fef880121dfaa2708e21ed00fb5ba4b7ff3065f736f61267e8c15f0d3f0b87273d7ae85094fbb85a93fd03f861816912c8e7fe2270193e2b8dda5757caa2f64fe1edac5b1043907a2efad1e7b0265e68de3811372a1a941b5976c93d1db36ef8b378ecb1fd476d4ba50ee6dcbc0f2a6f221b5cfd8ddbf431b505ea4e92209d17fe8c4da46e58c907affe8c6195602067b537110b2cdd841840b8b53bfcfeb110ac97e1f01d13d1331ad37f5d26bfaa6202afdd2127b8fc859fb5c0890cc357b60db9754e8fd86de3beda5ef558e9278f938b4dae58e254faecbff6e4b4a02f5d72a2f11d50211e2f4a26c10008c6d09cbb893260e4c560361790912864ec14ed8e6e17403f6548e84e097029c676fac4cfb51d4e20e73fc64ed4fec1fc038c7b4af4f52194876d96e68459f2106d4c007d28296c46aea52bcd5a16d63fb60284f943977895b5cf754f5320f19116a4cf175e6ac59be4350cd505b3f9d17265158cff2c7af453be5b2d1723d5aaf45110562d8f005b71aca40160c9050d19331211baca4e52b217772662f9e69f679c2732b963e2b4234930a45f0528f530f0d28f67aaa74550c1079619cc5e54264d80a9bf956efe93a741e42eff8207a6d4f50f9cc4ee8adfeac2e56beb6826f4c1cd7ecdadab5c1cb7b81175a6e997c7641b93ab9ee1f3f02a7c052f19afbe3cefd4d10effb5a3976273bd9220fb783ad50ffba3c7efa0d159466c8cd2f3df708056b656201c9e913ad0a26fbf04b2567a9b3f9e7fa426226f2375c34e0130ab9db11d8e21edba4ede8e0fa20bd68afbe67005019dcb7b5235ff73895f73c88651b5202bbd4c99e02b0dc68614317caa2893c7a76078b04e54b33eb216bf55763a5445f2e6637116cba71c8c1452e1321b9e8b3e8e240c03cc30a105692a96763c0c0a1fed4a5790ed95517dcab48985b78e04df14842654ad783b7646c55f5399cf1a90aec4c1e97c2a7e6f46da01b31f00f9866192b66bdf4c50db0bab913205f7006c9a42ca7f01afc8cfba7d88b40cc049bc621bf4252467a6add73c49b83f2942a4a6bbbf88086b34ca5b169e7f5d9c7cb2ff0cc974ca7d573cff47bb22ace7bfc8d4ff989d56f8fc3d15efc737269e103b94afe4fc74f9ab015507ede9d60e267d3cd8967b2d4bd37cb7f2b1500900541eab821ed86e28b4c0b2049d5b98920947727290db885d9014b1c45fdd63e013476becb1e2c8791736bfeab8677ef848d4f5815ff014a3982d7412b2d1e175593b247aeadeadb22b767e24b03d4298c6b4aac4c2b13f998ab7dba8e0990b254f919882f017062ce8826f5bdb2e54dedc7fa4b0685b51728def701847c46926be371ba3287044a9419244f1de62d3752e8896bd04531fe0bd19e018b4c45427b1daaaed04e1f62812b2a659e524db4f89ad9f263f3d55c8c6abd6dc6d4a9abe90ed4bfc1c808fae84f118af3cec0ff74c1221fda060b6beac46bef6ee8017ac7484b75fcf83604c64d7953cd48904955bbdd6f0ccaca4966f41eafcdf51f569a9b55f30c8c0f7226afd1c663fa134ea1f43c44f19714c2bcad5bc2a3f726b8445c1271343ea21f4ea73089134e0342a363353fa8decc37ad8c63b72312302ae86b8891bb3cf139a66d63eb4ce50930f037b28deb9c96cbd64374cf920a6ad579a54801616f8b0b312ea2ba42f324e3b50fcde32632b24dcb30cc3dc0603b21c764cf864febd0e9034a49ec58e7218bf19a4aa8cb9f427613555f52633f9f16ea3acac92c0d093b0e62634868ef0c05e47af25028de2774795ed773fdf9ca2e02e9e21b57adcb5814f0d7136300709a55f3fb20dd598bb0e0ddbdb2a625becf97dada4d8698fbd1789a7e25028f48728091ec781cec123291c1f552de0e1594e51bdd9cb15e1045b44468e34a50e8b481e50710eb8d12c2becb603bae59d3db19d1e508dc3d3fe9358ca1d675cec5a1b5d1ac0bfb0aad31e31f052cfc85b7e4455cae348f6f2d66e7c3dde295c1721291bc3811f96e10af7072ed8e014d760e72dbf0d37a727e2117e163bea54c948a69f1cd710f1af5650c7c4ae8b7193226172bcd980253ba43c0362f77c4384fbfaf16bde5855035096cdb8c751a77fe761fa4e1f956b67a652d7b38ab5538682c8135e616f54006a1e68c1cf151f9a161fffd0222529941f6fda0549425e246b8f5fc34e9a00cc5f3370bf15b8fa993dc7ec7ae2da8e1a41fc9052dda98d35d11b82146ab92b79607a2179b0a7148d1c4902b40bdc63b4f945ebc2793a52bc30d2fbe0d409087ba9db071b12fb7f3fbd1c355a4c9d9f387fb12d05654096e58489d3cf1bf0fe8a929aea17b10bf77498dea0147a904310f737f5d72d3758ccf0ca023ccbaff5ab9945b0672aad8b5180daee7af459d08e0375f41395189159b1803ae1fe16a8f343bce73a407b6cc04d8e67b6201afb13a430c3d055e36bb5bd58a4d6b7577ce8b68cf24ed528af562372b37a879217689dc77cfc6d85b23a7efaed131cd95ec8150a8a24bcbb5bf0de1d1c9364886804b37d089465ee576dc5770cce1295404e60c27c9de14f560040d1cc48284d471f6c93e81f84a43b0358576c96f7acdea57b7752957911938e9484b82ea72b89bf2a569065f04f97e4db53e827b689beeb0c9f2352f248c705ac5f712da65ee5ce0ce8d8784142f288e51c5be76822264a368d9cf82fc7ac83ef022778978570bb922c32cc67e9f08eac91ed67963951664a03575b051e18a21b4277dc07e180f9f6dd8c4e9bdfac06999f2b5f89ad2b0cb9f03bf7ce7aa5cf0b5eae8b7fc1fa9786ac7704919d57b6ebaaa93875d0c5de31e62126a02e3ee9fa1323981fbe5a435732cac068313fc08f4f36449a1e73126fa4e655ec826d13219ca9fa5ac3f140d99320b61f017494a76d29f3a45637be658b41b71fd77179cf4823e65e37c0f47a6425640a24d4420b324daa908d50a7b62a5caf713c14227552958c2c631484f8532aed4adc981646b7d3299e0b3be3dd93185f8b1fd9bdf4cb341a4cd01dce4ad6946ca5507d3294fc22cfb7b72b45018da7fe313bec3040d1873ec1e64c7836d6d06aa1bd0d7d9f61168231c2fee125c395f3738c671cc7af55e943f9fe5aac35d5d09557da498517235be5005d3ac4fdf89f3a0b1f6912cee977fd18e5aacdd040014865503a48df1dba7c7e4c8d3260b438009901e0858bbf23c8b8f1bd1637bd5e5df8fb2fa40c4fef381559e3890799f57de382b0ab6dca3aae7aac868853b88b6e7ddc1ea35c8ea81103b744fdc0cd61217bc1c2231f235a0eaf79ebef295ba79a8b9d3ed2741eeb4dcb1087717ca30a9ca98af7c4cebcd53ca7e5ee7f3326ca352366831d6275b2657b3b399f7287d798a6dd7633634b37b1f61fff60e6277e3dd28daf25019956af9d1e7e90c76485bc0b60ce0461445b0d0ed687e8e99d2ca26c4f4487bd688edb908bc7ef897c597c453ba202478fcdbdbb722937b62996331b714260bfd70c6302d4fae9cf98c8296c6d76a8f644d9aacade6a23ad7639e23c9404856eb651aa13532c385adf2568f4e93f3c7057a53ffd29dea9653d2c220127ae8262f3455d2a2f4bc07d82b26c76ab06622be857c0c90f50c1155635c519ea1c5fd6cd43e7d9776676b45b86f6044ce77d41d80e6a0bab4de174c56efe7932bd7cdc47993ad48dabc2105ffbc5d9658741f60c3e99a81e77ba3c4d1b3bdc7a0a470b0346e3afca55936589134c9236882fc75cc07666cc14ccb03896e91d3b74e36d56ef9de9a4757ab29d4755bf5c5ce758f7f78e709198e2b62b7eba805d6c00520be4d85db68cb235890e58b69ec4971d4984e1f015841b1a66b736145b7259d5611dd8f9af5fcc4015a4b61cd9761da4ca23ec80d12fd18e3c4e18969ef262cbb5fc80c61fdfe7cbabb775ce6ce4d60cad7837e69b9a0318b580d276727890530289683ede4f924f58b0b8891def5dd85c374f5b74cb71964e181a36b0202d9587cd682e03d45eb9a49040e4830ceb494eba6ccd74353d7c55a3fc463e95b68afc447cb698ddbea5acd5f7f069b8392bf000523c81a3d37f7ebdf4b109099391d54443f39ba77f5431bafebe9d15780145a1b1903642a94be0e78118a0d9d4ae6f6dc43dabc9d58a115a12baef6e8406c7659f07d593aed65a37d2e2ee2ec1064435c2aef8031585b0c8283578222abd27488cce4c25bfd8ffce21cf49ac271ccfaf002d29b506a2e20f5e038a9ee5a51d2313e8e91035f3ce438733bbfe77a6fb79c10aff61e74603e84979649353b716c30b575df8b974e84e13c512e4924e8b8908c3ae7b137f7231c60e1874b02010c034ea680605cbe59bcc29db8eaf34d4cf3a14565e9b0a5e677487ad5916626f229836882781d4f396ccd4e9087b919ae8ddbff9bc901ca1be98d5857b161e303c41a6954232fbd1ced71faeec2b2c715d3a717842116631db249fc77b357be9a60d53545cbcd589f6d4e8daecec35452d7b38f6ad06f4d2d6fbddf01e2bbcacd9796f8b8d3e9ae91fd345685c3adbaff23a1cb397b40ed21001387a3024cd44ededd116b24f5290fc94923fcf2d3e041af84713df8b48ec3c506857697383ed4605cc31e6653f39db2c99886e0c3c94ab1cc86e63c2d33b2402e380a3576f9e79ea5293d21812b4be6896e564f56f9bef10b1e4003e428340f4b289ba01ebc37d792e57c9858a36a8462180724a214de9b9e44a24561b709ba8a59fe9237958c1400b4427dcc748770e037a1024dc6efff8a8066fe32d8c795539b9bf151909d2df6959fcc5559d74250b4e25ce1897987b10000a57f50efcc48763b0a8af3cf9d86f7e4c11e4cff500bd3941c41137b3166165daeb57e5b6263affa1faff7e34295c98cf2d3a63b6a918012980123d4a22db60e1104cfd91882adbf22ecbb0871722bcc6d10a421dd20a0198d179889616710d9fab21b7a7c072efc5ab2e99bd2b7c307d5501423c17d2e1a183a186077086894c860bf80c74c39223b2e25c0d3a1d0b1e16f11241a99a555128e265b967d8dadce3e0c910221ca828ad6ce7a3d92e00a5104e5eb0c6d18ad39aa2d35e6c778994bbd0b06617574451d2a2f48028246f07cf649417902ee329cc4f6d3b6dd0bf91f072a6ddd73b9f6a5746a0cfe4db6ba03e782e5bfda0a212967de46d7c378753824d700e45eee8dc82e325fbf3773788b43383be21a9469dd4fefdd7f436d6f2c3cf3de6577fefc1885c38b98809f832afc4605157b113dd61e4ac0e40cb0b31a4b2a579c4d95442c02564704604aa47f0bf2928cdf9881663a70dd1fd490dd16698757789cba01eec35d6457ba077d278860ea3ed15906b0ea1cb90b20e532c4b552f6de8c4bc6b111f3ec4a259966c91ee6832d814c5dc30667a100c1c3d0c469131371efe7993324fa4a50c08c57f7f13aff64e3637906fc14c62ecc55a611d67b7c234a42790afdc89488da642a63e344ebca2ac02511a3106c753534871eb5017fb873ea8dd7c6021855e228f1838e5d79c4d632ab02c3b46df12782c6052c8222037c11e1b40ee4779f7b2efdd7512bfca3f83d892b0cd078c076412e02e541cb7278a6a86a91916daaf4cbde5064def62b2b67fd8798ebc1be714835d6c6983756a6183f346bbe17153ee4f303cf2d873926c71df52b65cf61bf28ef23d0fbbfda021aa20b5a090e6416b952fb6368d8634b31d642023e8ecb6d17b533a5e4c34dedcc78b5a8cd5f4fd5add8066bf0bc885e9ee4c7d5e696190034ab6a98f7fe06db416e497f0fd9142b8d30e1698af033120875b0ccae5bb2609a8709126cb60693e0be2bf098e77ef1d32bf626fa3cfa52655ab3225d3f9cf16f2c8b23630b38044cfc543764e40d46e715f62fd91c1973c8fc1cfd219996e28ff72f8f1f609b8f58bd81d03df2ffd232d3caeb188f901c2a4b8be244cb3e171479bae3588c72183e5ab45b54d2fa0766bd254c26bbcd60aa426d6164484bb5edebe57ad2bb6ae4220c72f2a5ea0f742b4c1c58ab581160c742a612b295db8eb31d17dbd011e527b38f4b288b2407d537b4335b0bded96e6bf7f1fb378952d186e68eef41ce506148495b068ed70f6bf041b279aaf93e5f2ba2960068b26c0088c72331c38d0a1ea2cbe61d1deaf664a4b4b65d2b83dd9e5ca8a9ba5d2fada409a49a69c1028ded14f7380d310515badec10f6afdaa885f9990a848aaa307632498e0481cd8c94618176ca70ea7653657384a71a6918d84621002bcd964a5d117ab7e0a434b0b010cfc2117487159233a87e9698e8443fe085fb996976bbe5505000000000000009534485476cca6a342785cffcf23b6323e4ffec4c7ca082e8e857226cbdf2eb7ee82086f7aba2a74a6717a43f496919c8f24cf27609611913b31789f7bafd523427c518b8951110a8c8b6f42d7730a23b1df9c1ca04c9b4803399974277d577f17d6898368e27d1eb0d64a6ce56dfab75ed0e247c74c4857a0c7084ab1019f579e5f0e55187ef051f38b9650b8fdb3d13b98f74bed7faa1f54c884b21c0585f8406802b2c9c14567f604080341244ebec456f9779cfc722d6f1167f32d4a9854d84f3876a8f978b43b2a04d004a537672ae0ec523d28a899e1c2d1426fac6ccff3ab901295ed903302f81508fa765d1376bcc9cf73fbd2f4aa43995520941824bd344f517d155d92806e69a482638e3f2d4857a69413bd15d0cd9bc00b0727032e928762a8d510ef4485b54c42e552f7b30a802908109dba6bd6009aa39025ea5a11f40d1960694365051c902e0bcbff6ece5e9557c8692583476ec7cf4a8c487d663bf1ee9a5302062885c030f4de01c28437eeccb4976b0a95511d2850521cc3d1c38832d7c173a3bd20b4a2c36267994571c0ebf40da46e0a6767629e25676187c18270f554e1d387249090f673f1f032633a3b1c93cc4d85f34ad292869708205c874eab67636f228b12ec6baac3f76e50a12814f9007c5e5bc75e0fc3d93311fe0a3d348c4d4e9820fcc64d4ac9779c66ed41439199d79d61d70b8864710aafcafad489b5b0b6b9ad9600a8f4b1b4657dfaf58578812a61b7867c4ca9a75699f0664efa49154e1a3f4152988b8914314e60c64da6279bc28ff8984ee65ef3d522c89b6233d74154408f1ee78e2e4914a88b79d7b5e1870f4b84cd08dd6034b723d461fd6bab9de0463dea867cca987b2a02bbf7c8e187794f519f5eabcd84cbf4b1a8f6283edc84d845b4baede14093f8231f4468fca51c5d9b6377e6a5e3ead1fb12fcfe992fdd4d3fda6cc1d646fda361ce0b3e581b6cfb4b0de8768bc779b6cc1cb83a43a298f1d9b7cc49e567eb6824d39603082b776c3d138cc3493b05c469201866ec8c13af13c511e0ff722a5dec89e753e115d24b3d014c458b31794e2fae87aa889de0a0a3fc594729c8042767f647b625c21daddae198fdcc01eddb26f36e3ab3ab2e32bc2cb4b3d48743ec2d8ff7942bd81f5daeedbf677f35a444e44d5780a81fb1cb8a6ff6615d1bbca495c36d56de1adbaa6024370b4c63996625a0d66a3650f1b4cee75b480aa98b5eb8e81f133b7939a151451289ab5d1fded3d7cce70d663cc69136f1555fd704f5fcc245b19314dc1e7cd5daa447f335a111838887ce02c1ad8ba72f775574428028c37b2282e09ea51c8966b53f3c81ef92fb220d4580a02c2c3fecea3810ff678280b42444d9f3b51a2909e80db62b739afb950aa7c54b2b0e0076f45c8f94c6af5d2ebcd4f7f47a11b2ea78418633accde1ddc926683a62dc33753e35bd95b38a4b4154f70d912a733582f04f49258b75125eab25474d2f9a468c5cf43b518f033bed6eb61107f690cbf08de7e5864d2a611c44e2c4f81c24fc3888de1b9b918627def058458188d612d3686c0de6b7791e791d0c97c871aa0918e8c0b1e1935baa195894980777311a91039ea499f2acb231356156b87af4ead19b9edcac7fa4217ef383cff6345edf1d504934facc905ff51cf2e8546b3d646408ee5b9bc01ae9396a0fdd4e467a94848fab0d9716e1262f27c06327db8fa206314dbb6784aa89c40395bfd0f2cc8aeab96e0304b11079a8f200c9b13969d416eb29a1ae4e92de6491afc323e68f86e61bd8476090d8ac5bc7ecb24433557e73c1bf3f2a957bd92035e493648570c4a90106af7361d0438685f78ffe6be13f7f67583bb14a5f0c1666d69cb38a43260ad57ff9ffbbaf1ca1dafbcac11bbba1abef00114372d611b5fd5ab50f361d7042c3ba586acb3f0ed1668e38e625843059fc3070344dadc1d49edf2a45a3534306e5eaae8d0787c9e5cc03c3cac3a3e5ce658be291c781a3465d0d81b46768b35250d1422090cdfca12713349b80a355417a6c06d88f90fdb6d437cd92b5907470b06c87c2c161f05370ba00921d2ed6dc8f39376b50fe01396aa0f9057821a22cb18e6d993a5c7671d16ad1856229bde0499172f80173552a3c07dde82e0e43795ede5e42c0d21b6633947171ae8ebefd3c901ac7895354cedea88a5761bdbc34b2fd412ebc919de765b685bf90c55daee2110517f6e28467cb5eea451994ea288c1e83ae4c46f417bd2c21c8c28ab91b676414c0af18ded975d1ef44d2cda61aed7634bd1054b4dadb659418eb6993af78ee4f0cf4178162c97320635a5a0720a94656fcaa600c6cf9e52d59dfeadf9ffb203b3d914274389bde0bb95a8e9372b54b112fbb299de82921069dd863a03c306c6cd3a7b8acecfa6d95bd729277bdae8753bd52ad091bc36bff3f3cbfa85d30624d1b1d6c7a49e808c278c338c0d97b34d329180230369bc15873f962f23dca8d3bed3e5cdb6af4a16006e442460e2a7e8b3f896169721d245b492592734c67ba7a1f5caa0c857611e2b8ec43124ea8492831a9af827b8e41cf65e703c3ed816e65c5d94555a07c2486778b1ab0171ce615b6276f8a7767941024afedabd5512dcdd2412aaa86c6814f08574871d5f4afc5a4985b74a5c528162399514163d92ca0c938ea74eabf6ec91a89af1394b527f4b1dd379d065959728b4499d96e78e4f7a05bb77673439699b79d06f4b51ff420f6edade34e34669f2675fc3a8373c68e8306cdde9a42de303cbb49a563f689d63813b58a137b3354ba41a2ec73ee1fbca06b1381a8fbedb0a3937fc68d47dfef55a2e751474cabd3851ba80625645dc59aaabc498e441c75bfdbacb4430f0caecbba3afd027d293de1a93983c07b30561ad487173da9eab611d99a0224b9ee7c3b814dfe7d3f76a300e6c21fa287dfb57830aae8edab66464887892f747cee07a02250b7270b4ea9e8a049fbfaa88fdf17297c9ac77e457c3e33f3660ab4af6f8da55c91de1a38f2fe961646ad650e764ef8ed29524e4f8077e05585f3651b5b5c5ad5d2d9a1442e59e0e65df6a5bb3eea93619f6864449f8c202fc2668dfc9343e650ce349f645e5b4257215b1a34b5cf0fcc87592024aa72f31b1627faa7849fd8bba8baffd6f61ca64ff81ee44696cb4f941853879b96ae1549c295ba441b6601777f7b8d2847908d721fc1ae831d81981720ec2558652d14af1bbc71758d81c447a472af4aba4e237ce9e5af7ce055836627f87012e6af7321f73248ceeea8c8daa2daa9a92af3d181f73386060a9aa7fc96e68601ee6638a69b9bd75a08cd7a61e184ae75fc3faa79c7fa01b7db45fcfdbaabc96c548e2ae658257834cf687893eeb7ebda8ea2d1a63fcdc42fcfcc37b1e107effdf0de42a964eef78e4020fe7a68b8941eb5677ba3430762cae134a2b0764ffd28bbba7490fd7addbb72655a1ed907fd74684e79cc0513945aced46e91d694b5ef6db6a4b42c150adfd84d2a83714c81374744c33483f0549a71bd894ca56728c9f17fcbbae3ae45d8f77303ec9b71adf926db48efb73b7ab1e4771d78ebc21127e0e49682283fb6ce7a0b2e7b665453c47edb294e338e83fff9934ea3e2e750e0877697c9dfdf6f85b4f30b0e79a22bc4cd28515f95e551046f59bc4a829ec75a4cbd72970f3f13765cac82f843e39259870a0e3fccfff89cf5b38ac4ef25a12435d8ec5fbcd606b0829680fa0037d4064efec8aea7d356cf4f9ff08fd098a1a2eb673cd3caf8bc406a5019352e217e92fdd6a1624cebceac0670cbe7688440db663cf1aa17bff5696b038559d8829da7105c036f8aa60abcd39ce2f4e5574c7ab39c41e0d6bac303e77331006ff0cda8ee03ccea629224812ed03a54d6c09c01af289a4928e80bb0f7cb935c2546ab5722d16529b1896984c38bd5a25500b64c86460b0a5545370df5cac7ebac8b277083233cb7de42736b9e89d7b6d58679fe3671f740762d36089ed14ff65de2bd47fc2ec590e7c326055003882361003dc273e27114f54f296d6b70d13bc510c70feada309259bec230f7f4c3a2e5683bf8869bba29fc3d75851db9fb2f369f705b725854d5456b52e60606fca7f2704abab6c11fbfe1efa144781779936a7941cc95bde9340751ffc7db124cb01cb5236cf8367d3cfd2346d77a80d2ac6b16fa3d1b10b5b8a41977d1af67013f05a1eff1363b435c9503dad9254b2fd1abd131da1c844381ae9ae993d01f2512085eeebd87300401a22d4ba30d6b41a89757bdb2d7fab681128bdc68cc1d9a67177f617dc99a13780898cf61ccdad0864d03d0de306615ce2595e6953f6684691fc9fe8764dbd0e6b540c1ab5482b6f123897830103ae02ddd2dbffb457f10cc6375fb51a045c7cba3de8a1a"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0xa, 0x0) connect$inet(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, r3, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40080) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="150000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a430000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004480000000c0a010100000000000000000a0000060400020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$inet6_sctp(0xa, 0x4, 0x84) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000040)=0x2573, 0x4) sendto$inet(r9, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r9, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000700)=""/183, 0xb7}], 0x1}, 0x54}], 0x1, 0x40000020, 0x0) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 5m1.891432578s ago: executing program 2 (id=3486): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r1}}, 0x20) getitimer(0x2, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r4) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="69f8000006000000070b"]) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="900000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a03006abe0500140012800900010069706970000000000600000054001a8004201c002c000a8014000700fc020000000000000000000000000001140007000000000000000000000000000000000020000a8014000700fc0200000000000000000000000000000500080005000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x240400c0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x7, 0x4) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=""/4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) 5m1.634997681s ago: executing program 2 (id=3487): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x44, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@nouid32}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@delalloc}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {}]}, 0x1, 0x5d2, &(0x7f0000001a40)="$eJzs3U9oG9kZAPBvRlbsOE6dQgttySG0hRRC5D9J2rQn51oaCORQ6KU1smKCZStYchsbQ517KM2htCWX9NYeeiotPfRQeulxr3vZP+eFsDG7EOewq0XSyHYcOZFjW0qi3w9kvTdvPN/3RnrPM8MMDmBgnWv8SCO+HRE3kojxXW1DkTWea623tblefLa5XkyiXr/5aRJJRDzdXC+210+y91MRsRER34qI/+UjLqTbmzzRLlRX1xZmy+XSclafqC3emaiurl28vTg7X5ovLV360Y+vXL18ZWp6ane6z+q7a/mD9fX+hw9+d/+9nz568Le/n90o/mE2iZkYy9p292NHcrAAHSRZojN7ll8+9JbfLIffU/RDLhvnjaH0zRiPXDbqO6nvnhyGe5IecIzqwxH1bbuKwABIXjnoG8cInVvakwjwNmofBzTOf9uvXh5/PL7WOgFpxN3aXC/+Ntrxh1rXJmKkeW4y+lny3JlJ43zzTC8T5Z20cS8iJoeGXvz+J9n37/VNHkWCHKv/Xmt9UC9+/un2/BMd5p+x9rXTQ2rPf1vZ/LfVIX5un/nvRpcxvvjFx3/eN/694fhOx/jJdvykQ/w0In7VZfyHP//31f3a6n+JOB+d47clL78+PHHrdrk02frZMcZ/zp/9yf79jxjdJ37rmu1IM5Hd/T+R5ZR22f9//f+f3914SfwffO/ln3+n/X8yIn7fZfyvP/3rz/Zre3wvedI4Cjjo559EPh51Gf+HM+c+yIquGgIAAAAAAAAAwBFKm/eyJWlhu5ymhULrGd5vxGharlRrF25VVpbmWve8nYl82r7TarxVTxr1qex+3HZ9ek/9Ui4LmDvZrBeKlfJcn/sOAAAAAAAAAAAAAAAAAAAAb4pTe57//zzXfP5/JmL6dL9zA3pg/3/5DbzrjH8YXM+P/6RveQC95+8/DKy68Q+Dy/iHwWX8w+Ay/mFwdRz/J3ufB9B7O+N/tPU20r9cgN5y/A8AAAAAAAAAAAAAAAAAAAAAAAAAAMfixvXrjVf92eZ6sVGfG1pdWaj8+uJcqbpQWFwpFoqV5TuF+UplvlwqFCuLr9peUqncmYyllbsTtVK1NlFdXfvlYmVlqf0/RUv5Y+8RAAAAAAAAAAAAAAAAAAAAvH3Gmq8kLUTkW/U0LRQiTkfEmSSSW7fLpcmI+FpEvJ/LDzfqU/1OGgAAAAAAAAAAAAAAAAAAAN4x1dW1hdlyubT8YiHNVunQdKDC0IG281HtMLFeWRg6yMoRsXG0aTS2eODfymc7sLlk5Mh3yz9OtzZ/PDv8TSvkDv19HpBCP2YjAAAAAAAAAAAAAAAAAAAYbDsP/Xb7G18eb0IAAAAAAAAAAAAAAAAAAAAwkNJPkohovM6Pf39sb+uJZCvXfI+I3zy8+ce7s7Xa8lRj+ZPt5bU/Zcun+5E/0K32OE0jojGOAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB3V1bWF2XK5tPyaheEu1ul3HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABex1cBAAD//5RxvZQ=") perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x4}) connect$netlink(r5, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r6 = syz_clone(0x6021100, &(0x7f0000000280)="95692f3bba851c7fe28b4f93fc2ec742b5cf9f0e9e441169", 0x18, &(0x7f00000003c0), &(0x7f0000000480), &(0x7f00000004c0)="3235c9f7ab812f6a364bc503e5471b8464ab246bc3cb24b54762c079176b38b5dd48b5b19d31e71f87f46a20c4acd7ba4ad384ea1aafc38728a32eda427b1d5a7a5584a8a9a19ddaf5013dae3826bedd9acdc0f58f4f5b53f693b5decfa68ff543c21d682505224ccf5c12e4521d604a5fbe90034c609006394b13a3b4dd7f503ca601e5fb2aca23aa9c002b6ff68cdf601f19a4bd1da32c10a7e2eefa87a929c3068337f293c950584fb2db3b1210101ca3") r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000100), 0x8) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x8, 0xb, 0x1, 0x4, 0x0, 0x1ff, 0x60100, 0xa5374499c3bca696, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000240), 0x16}, 0x80, 0x10, 0x1, 0x4, 0x9, 0x8, 0x3, 0x0, 0x56, 0x0, 0x7ff}, r6, 0x10, r7, 0x2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000580)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/173, 0xad, 0x0, &(0x7f0000000700)=""/166, 0xa6}, &(0x7f00000005c0)=0x40) r8 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x145402, 0x80) write$UHID_INPUT(r9, 0x0, 0x0) 5m0.953609599s ago: executing program 2 (id=3497): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a}, 0x20) getitimer(0x2, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r4) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="69f8000006000000070b"]) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="900000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a03006abe0500140012800900010069706970000000000600000054001a8004201c002c000a8014000700fc020000000000000000000000000001140007000000000000000000000000000000000020000a8014000700fc0200000000000000000000000000000500080005000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x240400c0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x7, 0x4) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=""/4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) 4m59.657309166s ago: executing program 2 (id=3508): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pivot_root(0x0, 0x0) 4m59.651035917s ago: executing program 33 (id=3508): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) pivot_root(0x0, 0x0) 4m44.217231927s ago: executing program 5 (id=3679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x700, 0x10, 0x6, 0x3, {{0x27, 0x4, 0x1, 0x1, 0x9c, 0x67, 0x0, 0x24, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@generic={0x86, 0x2}, @timestamp_prespec={0x44, 0x1c, 0x69, 0x3, 0xe, [{@empty, 0x6}, {@private=0xa010101, 0xb7c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @timestamp_addr={0x44, 0xc, 0xb3, 0x1, 0x0, [{@empty, 0x40}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6a, 0x1, 0x1, [{@private=0xa010100, 0x1ff}]}, @lsrr={0x83, 0x13, 0xdb, [@empty, @broadcast, @private=0xa010102, @private=0xa010102]}, @ssrr={0x89, 0x1f, 0x3e, [@multicast2, @remote, @local, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x25}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x13, 0x2e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x10}, @empty]}, @timestamp={0x44, 0x8, 0x57, 0x0, 0x9, [0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000325bd7000fedbdf250d0000003800018008000100", @ANYRES32=r2, @ANYBLOB="080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000200690600673a9c84d5abc4e6ac85f57cddd68dc782b93eda23726503800000e479a3ef85f0daebebb7f873f9662ff982aceb015e9aabaea7265d30778c43622a099091aa1c7560a7ed084c53aff91db8a714b70063da47c4bcf148026cc9d470989ebe44da72f3e9315257d2df3e0706afc48bb12643b459214170d6d2"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000740)={'#! ', './file0'}, 0xb) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x6000)=nil, 0x6000, 0x4, 0x88012, r4, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="400100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000010001071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001fe00000000000000920100000000feffff7f000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffefffffffc030000000000008000000005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d"], 0x140}}, 0x844) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, r4, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x94) 4m44.212477727s ago: executing program 5 (id=3680): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs$namespace(0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x1000a4, 0x7a, 0x0, {r1}}, 0x20) getitimer(0x2, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r5) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="69f8000006000000070b"]) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="900000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a03006abe0500140012800900010069706970000000000600000054001a8004201c002c000a8014000700fc020000000000000000000000000001140007000000000000000000000000000000000020000a8014000700fc0200000000000000000000000000000500080005000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x240400c0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x7, 0x4) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=""/4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) 4m44.177761901s ago: executing program 5 (id=3682): r0 = semget$private(0x0, 0x4000, 0x0) semtimedop(r0, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x0, 0xe, 0x9, 0x922, 0x6, 0x6, 0x3, 0x7fff, 0x4, 0x6]) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000040)=""/106) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0xfeff, &(0x7f0000000540), 0xfd, 0x4b7, &(0x7f0000000bc0)="$eJzs3U1oG1ceAPC/pNixHe/mY5clycImkIXsB7H8wRJ7dy972t1DoDSQSwupaytuatkylpzGJgenveXQQ2lpofTQew8999KcGgKl5/ZeeigpbepCWyiozEhy/CVXJY4Fnt8PJn4zb6L/exb/59GbGU0AmXU2+ScXMRgRn0TE0cbq5h3ONn6sPbw1lSy5qNcvf51L90vWW7u2/t+RiFiNiL6IePq/Ec/ntsetLq/MTpbLpcXmerE2t1CsLq9cuD43OVOaKc2PjF+cmBgfHhud2LO+3nn1xTuXPvh/73vfv/Lg3msffZg0a7BZt7Efeynter1er2/Ydigi/v0kgnVBodmf/s2b73erPfw6yfv3u4g4l+b/0Sik7yaQBcmfpp/qh9tVr9aBAyufHgPn8kMR0Sjn80NDjWP438dAvlyp1v5+rbI0P904Vj4WPflr18ul4eZnhWPRk0vWR9Lyo/XRLetjEXE8Il4v9KfrQ1OV8vT+DnXAFke25P93hUb+AxnhIz9kl/yH7JL/kF3yH7JL/kN2yX/ILvkP2SX/IbvW8//9K91tCLDv/P2H7JL/kElPXbqULPXW/e/TN5aXZis3LkyXqrNDc0tTQ1OVxYWhmUplJr1nZ+6XXq9cqSyM/COWbhZrpWqtWF1euTpXWZqvXU3v679a6tmXXgGdOH7m7me5iFj9Z3+6JHqbdXIVDrZ6PRfdvgcZ6I5CtwcgoGtM/UF2+YwP7PAVvZv0tatY2Pu2APsj3+0GAF1z/pTzf5BV5v8hu8z/Q3Y5xgfM/0P2mP+H7Bps8/yv32x4dtdwRPw2Ij4t9BxuPesLOAjyX+aax//nj/55cGttb+6H9BRBb0S89PblN29O1mqLI8n2b9a3195qbh/tRvuBTrXytJXHAEB2rT28NdVa9jPuV/9pXISwPf6h5txkX3qOcmAtt+lahdweXbuwejsiTu4UP9d83nnjzMfAWmFb/BPNn7nGS6TtPZQ+N31/4p/aEP9PG+KffuzfCmTD3WT8Gd6WfxtOi7Tyb/P4M7hH1060H//y6+Nfoc34d6bDGC+88/IXbePfjji9Y/xWvL401tb4SdvOdxj/wbNX/tCurv5u43V2it+SlIq1uYVidXnlQvo9cjOl+ZHxixMT48NjoxPFdI662Jqp3u5fJz++t1v/B9rE363/yba/dtj/H/94/5mzu8T/y7md3/8Tu8Tvj4i/dRj/29HPn2tXl8SfbtP//C7xk21jHcavvvG/wx3uCgDsg+ryyuxkuVxaVFBQUFgvdHtkAp60R0nf7ZYAAAAAAAAAAAAAnerkeuB8RDzO5cTd7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEHwcwAAAP//uvraKQ==") 4m44.095408322s ago: executing program 5 (id=3684): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r0, &(0x7f0000001000)=[{&(0x7f0000000880)="76b0d8e7b4", 0x5}], 0x1) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x4000, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) inotify_add_watch(r2, 0x0, 0x45000942) 4m43.917306445s ago: executing program 5 (id=3688): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c05}, 0x4000851) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) r1 = timerfd_create(0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) exit(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020601020060000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400020000008001240fffffffa0d000300686173683a6e657400000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 4m43.773303254s ago: executing program 5 (id=3691): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 4m43.773234254s ago: executing program 34 (id=3691): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 4m38.309834448s ago: executing program 1 (id=3743): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x98, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x44000) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2d088cb, &(0x7f0000000080)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xff, 0x470, &(0x7f0000000680)="$eJzs3M1rXFUfB/DvTDJJ2j59kqdPn5e+abSKxZekSV/sQpCKggsFQRcVVzFNS23aSBPBlqLRRVxKwb24FPwL3Fg3oq4Et7oXoUg3Flcj85akSSbJNJOEdj4fuPSce0/uOb977+mcOffeCdCxBpMcSPKPJL8k6U9SWFpgsPbPnd4kt6+PF1Iuv/5HoVruz9vXxxtFG3+3q5Ypd61S79xbydjk5MSVen545tK7w9NXrz1z4dLY+YnzE5dHT506fuxQz8nRE22Jc3elrfs/mDq47+U3b7w6fubG2z98VajHnSVxtMtg9ahV9c8t2fZ4uyvbZrsXpQvd29gQWjKQpHK6StX+35+u7Jjf1p+XPt7WxgGbqlwulnvvXlValJ4tAw+wymge6ESND/rK99/GsoXDj21363Tm5zHu1Jfalu4U62VKm1j/YJIzs399XlmySfMQAACL3Tyd5Oll47/TS8v9szof3Def35Pk30n2JvlPkv8m+V+S/7dY/+CS/PLxT7m/xV22pDL+ey7JnWXjv8boLwNd9dzu6nx5qXDuwuTE0foxOZJSbyU/srDLZcPFb1/8+dNm9S8e/1WWSv2NsWC9Hb93L5mgOztWGtto3A23PqrdAFgef18at3Eq4+N9Sfa3sN9SdW6x5sKTXx5sVm7t+FfRhvtM5S+SJ2rnfzZ3xb9wF7TQ9P7kyLMnR08M92Vy4uhw46pY7sef5l5rVv+G4m+DWzfL2bni9T8f/0ChL5m+eu1i9X7tdOt1zP36SdPvNPd2/c+M9RTeqKZ76uveH5uZuTKS9BReWb5+dOFvG/lG+cr1f+Twyv1/TxaOxIEklYv4UJKHkjxcb/sjSR5NcniV+L9/4bF35hu07vh7V9lj+1TiP7vW+c/i8996ouvid183q3995/94NXWkvqZy/teKa70N3MixAwAAgPtFsfoMfKE4NJ8uFoeGas/w783O4uTU9MxT56beu3y29qz8QErFxkxX/6L50JH6s8SN/OiS/LEk/0ryWdeOan5ofGqylflEoP12Nen/Fb+t9gIP8GDwvhZ0Lv0fOpf+D51L/4fOpf9D51qp/3+4De0Att4an/87tqodwNYz/ofOpf9D52qh/89uZjuALdX03fjihl75l9iURCnJ6mW+6dnYbzWsP5Hidh+N+yjx/HpOSikrbupe949Z3EOikKR3xU3b/T8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAe/wdAAD//12b48g=") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r4 = timerfd_create(0x1, 0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e21, 0x3, @remote, 0x4}}}, &(0x7f0000000180)=0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x24, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x41064, 0x20305}, [@IFLA_PHYS_SWITCH_ID={0xf, 0x24, "399af084e6e6c36cee2544"}]}, 0x30}, 0x1, 0x0, 0x0, 0x84851}, 0x40040) 4m38.204449101s ago: executing program 1 (id=3745): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) set_mempolicy(0x1, &(0x7f00000000c0)=0xb, 0x27440) 4m38.163416727s ago: executing program 1 (id=3747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) r2 = creat(&(0x7f0000000280)='./file1\x00', 0xa5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r3 = socket(0x1f, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) readv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) io_setup(0x202, &(0x7f0000000480)=0x0) io_submit(r4, 0x0, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x16, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa14001980080001000400000008"], 0x44}}, 0x8000) 4m37.857082136s ago: executing program 1 (id=3748): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000b00)={[{@orlov}, {@acl}, {@noblock_validity}, {@norecovery}, {@i_version}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x11}, 0x4000000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3, 0x20000, 0x380}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x4}, @IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0xf}]}}}]}, 0x4c}}, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x101) openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) unshare(0x2c020400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r4, r5, &(0x7f00000001c0), 0x8) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @private}}) fcntl$addseals(r5, 0x409, 0x8) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="9ffbb4a61fb6b622f0c099b9b80bd9d45c5851b2504ca31f4f9f4666ad17457a916bbb0333d694630ffc1364c7e16010ecb7c82eeb470bb63f8bb00a2e63541bdc9815f9403fc9519398b3613f78eb09b435f32c21dd4c7daba96642caa0f189be94ba3b90bba352ac806d5b9d91f3fcc6b3be896b69657a3cad9d1b7b3445245375be9dffa3de89414b4d6e7a664a5e913ce705831386323555ebc27b9dcf377d6f260f103e9dabbf8cbb86101f42e632777ac1f47cf3b44d12ff8a1acf88a2aa152124eb927eb8c48e36cdd896b25a00b49108b59c6d61ca649047b2fa22140cb2dbff780a08d3834ab2a136a67197", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580), &(0x7f00000005c0)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r12) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m37.101170244s ago: executing program 1 (id=3759): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000020000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000a0fff00224e0000", 0x58}], 0x1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003200)=@newtfilter={0x34, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 4m35.467715504s ago: executing program 1 (id=3779): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getitimer(0x2, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r4) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="69f8000006000000070b"]) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="900000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a03006abe0500140012800900010069706970000000000600000054001a8004201c002c000a8014000700fc020000000000000000000000000001140007000000000000000000000000000000000020000a8014000700fc0200000000000000000000000000000500080005000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x240400c0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x7, 0x4) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=""/4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) 4m35.422015s ago: executing program 35 (id=3779): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/pid\x00') r1 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x1) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getitimer(0x2, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{}, {0x0, 0xe4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) dup(r4) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)=ANY=[@ANYBLOB="69f8000006000000070b"]) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="900000001000ffff28bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="391a03006abe0500140012800900010069706970000000000600000054001a8004201c002c000a8014000700fc020000000000000000000000000001140007000000000000000000000000000000000020000a8014000700fc0200000000000000000000000000000500080005000000080004"], 0x90}, 0x1, 0x0, 0x0, 0x40c4}, 0x240400c0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0, 0x1}}, 0x40) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000001c0)=0x7, 0x4) readlinkat(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380)=""/4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x58, &(0x7f00000002c0)}, 0x10) 2m40.089201065s ago: executing program 0 (id=5641): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newlink={0x60, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}]}}}]}, 0x60}}, 0x0) 2m40.012347316s ago: executing program 0 (id=5642): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) 2m40.010837196s ago: executing program 0 (id=5643): bpf$MAP_CREATE(0x0, 0x0, 0x50) 2m39.963334382s ago: executing program 0 (id=5645): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x3}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x28040680) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140)={[0x72]}, 0x8, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000021c0)=@newtfilter={0xeec, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0xeb8, 0x2, [@TCA_FW_ACT={0xeb4, 0x4, [@m_pedit={0xeb0, 0x1, 0x0, 0x0, {{0xa}, {0xe84, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0xffff7fff, 0x4, 0x20000000, 0x4, 0x2}, 0x14, 0xf3, [{0x1, 0x1, 0xfff, 0x6, 0x1, 0x8001}, {0x5dea, 0x2, 0x3, 0x8, 0x2, 0xff}, {0x1, 0x0, 0xffff253d, 0x200, 0x5f2c, 0x4}, {0x3, 0x0, 0x5, 0xfffffff4, 0x4, 0x2}]}, [{0x9, 0x4, 0x5000, 0xa, 0xffff5a65, 0x1}, {0x101, 0x8, 0x2c, 0x101, 0x401, 0x5}, {0x7, 0x7fff, 0xaf2, 0xd88, 0x6baa7928, 0x2}, {0x80000000, 0x9, 0x80000001, 0x1, 0x8, 0x9ac}, {0x7, 0xffffffff, 0xfc, 0x1000, 0x2, 0xca4}, {0x4, 0x7, 0x8000, 0xfffffff8, 0x7fffffff, 0xffffffff}, {0x9, 0x7, 0x7f, 0xd, 0x8, 0x4}, {0x10000, 0x1, 0x2, 0x7ff, 0xfffffff0}, {0x626, 0x6, 0x8, 0x3, 0x9}, {0x57, 0x3, 0x8, 0x101, 0x8, 0x3}, {0xf, 0x3, 0x6, 0x7f, 0x3a68138c, 0xacf6}, {0x3, 0x15, 0x6, 0x3, 0x6ee9, 0x1967}, {0xfffffffb, 0xffffffc0, 0x6, 0xe, 0x6, 0x7ff}, {0x6, 0x1, 0x0, 0x1, 0x5, 0x2}, {0x5, 0x5, 0x7, 0x1000, 0xf5d4, 0x1}, {0x3, 0x7, 0xcd0, 0xf5a, 0x4, 0x1}, {0x2, 0x3, 0x0, 0x1daa, 0x1, 0x8}, {0x1, 0x5, 0x6, 0x6, 0x8, 0xfffffff8}, {0x8, 0xaf1, 0x9, 0x5, 0x3, 0x8}, {0x4, 0x9, 0x8, 0x7, 0xd009, 0xa}, {0xc, 0x2, 0x7ff, 0x9, 0x8, 0x600}, {0x6, 0x3d, 0x0, 0x8, 0x9, 0x10000}, {0x1, 0x0, 0x0, 0x5, 0x81, 0xffffffff}, {0x5, 0x8, 0x2, 0x2, 0x8, 0x9}, {0xe, 0x3, 0x3, 0x5, 0x3, 0x5}, {0x6, 0x8, 0x0, 0x0, 0x4, 0x400}, {0x1, 0xc43, 0x9, 0xffffcc56, 0x5, 0x8}, {0x2, 0x400, 0x1, 0x60000000, 0x6, 0x2}, {0x6, 0x9, 0x9, 0xfffffff3, 0xf1, 0xed4}, {0x5, 0xfffffffe, 0x10000, 0x6, 0x2, 0x7}, {0x9, 0x6, 0x80000001, 0xff, 0x4, 0x3}, {0x30, 0xb, 0x971, 0x1ff, 0x0, 0x2}, {0x4, 0x3, 0x25e, 0x253, 0x5}, {0x7, 0x0, 0x7f, 0x10000, 0x7}, {0xe377, 0xfffffff2, 0x9, 0x9, 0x100, 0xd}, {0x10001, 0x0, 0x4, 0xb, 0x7f, 0x3}, {0x5, 0x6a, 0x7, 0x6, 0xffffffff, 0x8}, {0x7, 0x1, 0x7, 0x2, 0x7, 0x9}, {0x90, 0x0, 0x2, 0x3, 0x5, 0xf}, {0xfff, 0x6, 0xe, 0x3, 0x8364, 0x1}, {0x6, 0x0, 0x1, 0x5, 0x3, 0x9ac}, {0x7f, 0x4, 0x6, 0x2, 0xfffffffc, 0x1d3e6c20}, {0x6, 0x2, 0xf1a, 0xd, 0x401, 0x7fff}, {0x4, 0xbc, 0x3, 0x79b, 0x3, 0x6}, {0x9, 0xff, 0xd97, 0x0, 0x3, 0xd8}, {0x1, 0x4, 0x0, 0xffffffff, 0x10000, 0x5}, {0x7, 0x81, 0x1, 0x3, 0x10000, 0x1ff}, {0x6, 0xafa, 0x10001, 0x6, 0x1}, {0x30, 0x3, 0x7f, 0xfff, 0x7fffffff, 0x4}, {0x7ff, 0x431, 0x4, 0xffff, 0xffff, 0xa}, {0x0, 0x7ff, 0xc, 0x1000, 0x3b5, 0x7}, {0x100, 0x1ff, 0x6, 0x3, 0x100, 0x674a}, {0x7, 0x9, 0x3, 0x79a6, 0x6c0d7727, 0x8000}, {0xffff, 0xc, 0x100, 0x8, 0x0, 0x3}, {0x70, 0x3, 0x1ef, 0x2, 0x1}, {0xfffffff9, 0x1, 0xfffffc01, 0x3, 0xe7b, 0xd}, {0x2, 0x5, 0x6, 0x2, 0x10000, 0x9}, {0x8000, 0xfffffffd, 0x3, 0x1000, 0x6, 0x200}, {0x2, 0x2, 0xe, 0x446, 0xfffffff9, 0x8}, {0x3, 0x7f, 0xcce, 0x30000, 0xc, 0x6}, {0x2f4, 0x2, 0x10000, 0x8, 0x7, 0x9}, {0xc43a, 0x3, 0x4, 0xe64, 0x0, 0x6}, {0x4, 0x5, 0x3, 0x8, 0x9, 0x8}, {0x1ff, 0x2, 0x8, 0x7fffffff, 0x1800000, 0x7}, {0x9, 0x5, 0x76, 0x8, 0xd1a, 0xe}, {0x0, 0x9, 0x5, 0x1, 0x4c3e1dd3, 0x9}, {0x2, 0x7ff, 0x82e4, 0x3, 0xb, 0x1}, {0xe, 0x9, 0x3, 0x7, 0xd, 0x5}, {0xfffffffe, 0x8, 0x9, 0x0, 0x6, 0x1ff}, {0x1, 0xe8da, 0x0, 0x7fff, 0x7, 0xdf}, {0x8, 0x7, 0x2, 0x4, 0x1, 0xe}, {0x1, 0x1000, 0x80000000, 0x1, 0x8, 0x2}, {0x400, 0x8, 0x5, 0x9, 0x3, 0x1}, {0x4, 0x8, 0x1, 0x800, 0xd59c, 0x9}, {0x1, 0x81, 0x80, 0x79fdced5, 0x5, 0x8}, {0xb, 0x8, 0x546, 0x16b, 0xe5d, 0x7}, {0xfffffffd, 0x2, 0x9, 0x61, 0x6, 0x80}, {0x9, 0xeeb, 0x9, 0x10000, 0x800, 0x8}, {0x2, 0x1, 0x2, 0x5ed0, 0x1000, 0x4}, {0x3, 0x9, 0x30, 0x0, 0x9, 0x1}, {0x4, 0x4, 0x9, 0x7, 0x8000, 0x100}, {0xffff, 0x5, 0x82a, 0x8, 0x7, 0x1}, {0x80, 0x7, 0x8, 0x3, 0x6, 0x68}, {0xfff, 0xc6, 0x0, 0x8, 0xd, 0x6}, {0x91c, 0x6, 0x8, 0x9, 0x8, 0x7}, {0x2e, 0x4, 0x6, 0x6, 0x4, 0x7}, {0x7fffffff, 0x7, 0x0, 0x57a4, 0x4, 0xffff2709}, {0x1, 0x0, 0xff, 0x5, 0xd, 0x5}, {0xd, 0x6, 0x9, 0x7fff, 0x6, 0x1}, {0xb0, 0x8, 0x617e, 0x1, 0x200000, 0xa}, {0x4, 0x991b, 0x4, 0xc, 0x5, 0x6}, {0x80, 0x590, 0x7, 0x2, 0x7f, 0x80000001}, {0x8, 0x80000000, 0x3, 0x7fff, 0x8, 0x7f}, {0x10000, 0x3ff, 0x7ff, 0x100, 0xebf, 0x9}, {0x0, 0xa, 0x0, 0x3, 0x9, 0x8}, {0x800, 0x5, 0x7000000, 0x7, 0x7fff, 0x1}, {0xfffffffb, 0xd, 0x1000, 0x9, 0x80000000}, {0x6650, 0x0, 0x3, 0x1, 0xffff, 0xffff}, {0x9, 0xb8a, 0x1, 0x6, 0xa3d, 0x3}, {0xd700000, 0x3, 0x2, 0x5, 0x2, 0x7}, {0xfffffff9, 0xfff, 0x9, 0x4, 0x7, 0x2}, {0x0, 0x0, 0x1000, 0x3, 0x0, 0x3}, {0x40, 0x0, 0x5, 0x6, 0x9, 0x80000000}, {0x93, 0x2, 0xd9, 0x1, 0xffffe0c1, 0x80000001}, {0xa145, 0x80, 0x200, 0xf, 0x81, 0x9}, {0x3, 0x8, 0x7fffffff, 0x7, 0x9, 0x1}, {0x80, 0x100, 0x8, 0x5, 0x100, 0x2}, {0x52, 0xa4f, 0x7, 0x6, 0xfff, 0x7}, {0x8, 0x4cb, 0xfffe0000, 0x10000, 0x3, 0x3}, {0xffff7fff, 0x5, 0x54c, 0x800, 0x4c31, 0x10000}, {0x6, 0xa, 0x10000, 0x4, 0x7fffffff, 0xab7}, {0x2, 0x528f, 0x7ff, 0x20c, 0x82, 0xff}, {0x4, 0x8, 0x2, 0x9, 0x2, 0x7}, {0x7, 0x800, 0x6834, 0x5, 0x8}, {0x3, 0x0, 0xda8, 0x3ff, 0xaf9, 0xb91}, {0x7001, 0xbe05, 0x80000000, 0x3, 0x3, 0xfbea}, {0x7ff, 0x43d, 0x9, 0x6, 0x0, 0x7}, {0xffff07e7, 0xce, 0x4, 0x4, 0x2, 0x5}, {0xd1b, 0x1ff, 0xfffffffb, 0xa, 0x9c, 0xa}, {0x1, 0x2, 0x7, 0x5, 0x8, 0x3ff}, {0x40, 0x1000, 0x3, 0x1, 0x68}, {0x5, 0x0, 0x6ef7, 0x8, 0x1c, 0x100}, {0x3, 0x46c, 0x7, 0x7bdcdfde, 0xd, 0x9}, {0x9, 0xffff, 0x0, 0x7, 0xe2, 0x4}, {0x800, 0x7, 0x5, 0x800, 0x6, 0x5}, {0x0, 0x2, 0x2, 0x1, 0x9, 0xfff}, {0x6, 0x8, 0x9, 0x2, 0x2, 0x5b02}, {0x1, 0x400, 0x4, 0x3, 0x81, 0x9}], [{0x5}, {0x5}, {0x2, 0x1}, {0x3}, {0x2}, {0xebdb78f20568e109}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x0, 0xe533cfd54ad8026e}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x7, 0x1}, {0x1}, {}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x5}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0xb56fe08017dc55ec}, {0x2}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0xacd341f79876104b}, {0x3}, {0x2, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2}, {0x1}, {0x4}, {0x2, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x3}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x3}}]}, 0xeec}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x1, 0x4, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x77a3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x408100, 0x4, 0x22}, 0x18) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0xa000000d}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x10000000}) ioperm(0x0, 0x7, 0x80006) 2m39.636035184s ago: executing program 0 (id=5653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x800}, @val={0x3, 0x5, 0xfa, 0x3, 0x83, 0x6}, @ipv6=@generic={0x4, 0x6, "84e437", 0x1dc, 0x0, 0x1, @rand_addr=' \x01\x00', @private2, {[@srh={0x88, 0x8, 0x4, 0x4, 0x1, 0x68, 0x3, [@mcast2, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x21}, @dstopts={0x67, 0x6, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xba, 0x22, "ed4ef63a13ddd68bf6a88205d353fb968e4a2bb9c9b7ff6f27d2f3adba48f8e01147"}]}, @hopopts={0x87, 0x1b, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x3, 0x3311, [0x0, 0xfa4, 0x7, 0x4]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xfffc, [0x1af7]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x2}, @generic={0x6, 0x5d, "5a868a361534ebd6104ec9bac8ecbdfb4d38c7483165140a6f6bb31729625d779bf8a67577afee2ee8a3f93312ad30de906628c6030f73fe2510a1cb3860dd0ee210f3e9e7c0d8dc0105bc9cf3a0a519e0eae6e506e832bbffd77bd8e2"}, @generic={0x4, 0xa, "276b9fef0c30a3d1b072"}]}], "f0db043c0bdd5fa862ab40e05a5dd2c234dc7773e3831178a890b2a83c13e6f5d1ec7ad9739f588cc88c83a9f836eb8045335fd06dd485c2446015e93dfbfe2d67d567703ef49b27e9e4936532e95fc00244b2e3f5d127b50a7c3001ae37c96c0439a96a"}}}, 0x212) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES16], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000002000020013"], 0x98}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x40}}) io_uring_enter(r2, 0x75fa, 0xe475, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4001, 0x3, @private0}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r8, 0x58, &(0x7f00000002c0)}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") 2m38.949786592s ago: executing program 0 (id=5661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) clock_adjtime(0x0, &(0x7f0000000140)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x5, 0x40, 0x4, 0x9f, 0x2, 0x7, 0x8, 0x300000000000, 0x9, 0x8001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) (async) r3 = semget$private(0x0, 0x4000, 0x0) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x891b, 0x0) (async, rerun: 32) semctl$GETALL(r3, 0x0, 0xd, 0x0) (rerun: 32) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000200001ab0029bd7000000000000a000064000000070000000015000200"/45], 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r7) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff95}, {0x3}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) connect$unix(r7, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2m24.320602848s ago: executing program 36 (id=5661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xa0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) (async) clock_adjtime(0x0, &(0x7f0000000140)={0x3ff, 0xfff0bdc1, 0x4100, 0xb, 0x0, 0xf423f, 0x800000000000003, 0x800000000006, 0x0, 0x100, 0x3, 0x5, 0x40, 0x4, 0x9f, 0x2, 0x7, 0x8, 0x300000000000, 0x9, 0x8001, 0x7, 0xfffffffffffffffd, 0x3, 0x0, 0xe}) (async) r3 = semget$private(0x0, 0x4000, 0x0) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x891b, 0x0) (async, rerun: 32) semctl$GETALL(r3, 0x0, 0xd, 0x0) (rerun: 32) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000200001ab0029bd7000000000000a000064000000070000000015000200"/45], 0x2c}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async, rerun: 32) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) (rerun: 32) socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r7) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbff, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0xffffffffffffff95}, {0x3}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x2208840, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) connect$unix(r7, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 3.301665125s ago: executing program 8 (id=8052): mkdir(&(0x7f0000000540)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x3f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 3.232349233s ago: executing program 8 (id=8057): socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) ftruncate(r2, 0x7f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32, @ANYBLOB="000000000031010024001280110001006272696467655f736c617665000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.399186451s ago: executing program 8 (id=8077): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x24}}, 0x80) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x700, 0x8000, 0x5, 0x6, {{0x5, 0x4, 0x2, 0xa, 0x14, 0x67, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1}}}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8) 2.280441506s ago: executing program 8 (id=8079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000fcdbdf250200000008000100", @ANYRES32], 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, 0x0, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004089}, 0x20040004) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf25240000000a0001"], 0x20}, 0x1, 0x0, 0x0, 0x8814}, 0x4000) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x40, 0x10, 0x7, 0x7, {{0x6, 0x4, 0x1, 0x3d, 0x18, 0x67, 0x0, 0x7, 0x29, 0x0, @empty, @multicast2, {[@generic={0x83, 0x2}]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x4, '\x00', r4, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_io_uring_complete(0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r9, 0x2, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r8, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0xfdff, 0x0, 0x8, r8, 0x0, 0x0, 0x5, 0x0, 0x6}]) sendmsg$DEVLINK_CMD_SB_POOL_GET(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="54012000", @ANYRES16=r7, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) r10 = socket(0x15, 0x5, 0x0) connect$unix(r10, &(0x7f0000000080)=@abs={0xa}, 0x6e) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r11, 0x1, 0x9, &(0x7f0000000140), 0x4) r12 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r12, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000680), r6) sendmsg$TIPC_NL_PUBL_GET(r12, &(0x7f0000000b00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000006c0)={0x3fc, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x400}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x71}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc3}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NODE={0xb0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "1a5f65bb70a42870c27f883c7a0c7eb99d87f5ee5cd057633399893510c00c"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1138}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "5ebf271fa89141720c7a48e61b38d9016e253479cd93b881"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc6c}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_NODE={0xcc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "922cfee4a29393b6250c194d7e7002485b06ef9e9f48bcb0f90a079d287f9a6ed1f5"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x54, 0x3, "42d4c9bd424b1f499a1a27be04209cc8ec17fab7cfd1f1cad062448721b3d9ba486c36b16253fdda1e43355ef338aa088c58921cc11c294831db23434afa951aac34b36f93bc64b118a08b254bc7cc23"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000200)=0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) 2.279593636s ago: executing program 8 (id=8080): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x20, 0x4855}, 0x24000052) 2.255905719s ago: executing program 8 (id=8081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.364932954s ago: executing program 6 (id=8105): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000032680)={0x9, {"a2e3ad214fc752f91b29090930f70e0dd038e7ff7fc6e5539b324c078b089b34383b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b33380d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1ddab8e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789a31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df461e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe52904001802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71807f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d00a3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e033f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c78ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) 1.265014477s ago: executing program 6 (id=8109): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x82, 0x4a2, &(0x7f0000000840)="$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") syz_emit_ethernet(0x7a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c200000000000000000086dd609a83c900042f00fe880000000000000000000000000001fe8000000000000000000000000000aa24", @ANYRES64=r0, @ANYRES64=r0], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e24, 0x131, @rand_addr=' \x01\x00', 0x1ff}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, 0x0, 0x0}, 0x20) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0xe, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000380)={r4, 0x1, 0x400, 0x8}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) unshare(0x26020480) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x6136}, 0xe) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x72489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) recvfrom(r3, &(0x7f0000000d00)=""/4096, 0x1000, 0x202, &(0x7f00000000c0)=@caif, 0x80) 1.227331712s ago: executing program 7 (id=8111): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2d", 0x18, 0xfffffffffffffffd) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80000001, 0x0, 0x3ff}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_USERDATA={0xa2, 0xd, 0x1, 0x0, "05e3c467b565179d16cd3286e215c7e3b5e308b59be6d9b81c127830f0725bb803ad8b94a7a1ae9ac29ff2ed6fa5a1aa7290cce3f476f91f9f1efde8030b41e61356eb83337d4980ad9aa4913b728b26b80bc077d14db7b8550149b33fe95732e8585bf1f8604bda189b0a715be62aa4ad035e3ea3b5d4e057db3bd5721248b68e5c218538d9b3230c8a4d9cfde896869cc43deb8f2635a4b7ab2c335e8e"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSETELEM={0xbcc, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2ec, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x24, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x2b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x44}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "0f4f433ecbb95a5dea24e48713430d1ee1d50b3750ace99f19af8d55a47afd0ad9f84435b741e4bf147f459de9140ef257689907229b8a57e1668cd387c3c1f228ade52edfb5b4501a11cfb9a63a58daa2e44367b3323097e6818aa76dfc324babc0e9f79c209a7745a1b6974ae86c0f6ac1392a4df65df6b1dc95c7dbb8eb2cf7f85be624baae14fc6720a69b5166fe361d49c72ee41e6e89ee0f88cbb8ac6c5f289d993d013dbac4c992def214acd0e77bedbae69951d656d06085272949c6bc220c5b6e0aad2935180ff10e40155f618f3fd7"}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "9d60325d9d478708c0746c67d24e04b570adc14d75dbd5f1de189dba0b61cf5829fefd0f64e8c4a6fa53ebe818182162b7409acfb9727368c9b542ae20c8cad38be23213033312e303cc1526de7b7d4afe43c03f15ccb882d75d15f8152ba3d190e4cfec4964953d52f246c1099416671c8e6e122dbb01aa3505f9605d9979f7ca452ee0ab4e2f2ba1549b9de5e43fb90aa1e87326ac1d0f7676449603efb003e890755d1fc5692d39cdcb20a7700c3367"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffe00}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x890, 0x3, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "f56d6dd41d1b1aebe430ac012e25ca7726baf40769fb9d8a6cbf6eac2ed2951570bccd8e94227dfe3f76ef60574a817d010b0e524dc2805a677b4d3e3bb79472955d849ff24c1ef153c6b75a04aa83344eecfc9f68b5885f7150d55723020efce0ba2bd665524348c9221fae16540d137dc526b2b0edbcf538a1bab263918164dbe105e2202919e963dea950e30cd28d4fcc294585c276387a9e09291b44b4ff9bd4907128e551242d7988564c2963cf77de57"}]}, @NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x20, 0x1, "f65f3d300e771b0f1615f33299678063698153588a51e7e951c206d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x22, 0x1, "25b73bc071b04a4fb6d5a27bdfb7684d357a3dbed0784d716ecd7d5152e9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x20, 0x1, "bdc527be99ef163427ebd7070bc3737faa3cecab9df4489f8d2cdf88"}, @NFTA_DATA_VALUE={0x10, 0x1, "4ad349b8add5551761a46949"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}, {0x204, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x188, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xca, 0x1, "a3573a2ccd3e7f5c687687b25d008bdf00464555a29fcad08ccc5f385218d42de105e567832c3de9e061ad5520a26f8a5f257319b3d644deef610d8039e462efb69c663b11ba7e5e419427b0621d01d3d984bccd61c7b8433f9ba16ee158918ff9682bab604db3705eafc2726bc9e5a2a18630a7d34e72fc52ef589c8e81786327dec4de7fbe8f6ccff9b689154556c15e403d7ce64e8dce395b77bf8e9183212fb7e3210befc9a66914bf5192624b9082a88c3949a3d5d110baba5e840e34122fd6bd3ec9e6"}, @NFTA_DATA_VALUE={0x96, 0x1, "e2469ebd178ce283a2cc5e7d227b154aed7d33d997fac499ad0cebd4d3fa9999e3c5408759e50e1ca0052c9d7fda8f1a9408a1c0eed8986f580cedf197a127b59afdfbd59bdcfeaf3b8777a541efce3e377e105049f613cf88899d87310eebf39dbf4748f76f31b5786f417eb1bfba31b9056fe79a8ce1dab1a7f301a41720a76f4f1889da8da471ff843a289a2d3fc4a4ab"}]}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "524df35f7c6f5fa46dd195fc05c63798769db3da3a1d63011b0ef3900d363f88e929384557ad23e54e28cc768f0b8558fc14fa420aed2e40"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}]}]}, {0x224, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "fea8b2530859e30621262359752a49138fdbb5fa36d8070a40c2587d13e1721f2bda2b2eaf6d8eb9c919f46ab9966a6fc106c3d800a29a9170acb57f270a1126ac9d4f0868fd7fa1d1ac"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x84, 0x1, "2df6570932f9b8e13e21dea5e858c346e01ae420e813ce780227b3c1e74b088b9d8673334a8734235be82a2aa7dfec75f69697e488848981826e0034991348e79d257845d95bc7e6bf964520e0ad79a447b487242ff8a18b794a3359b4d341315526a613063d0b7194dba07cf556c4b0366b9c3a6d10c72bfe03572d04b541f8"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x74, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_INFO={0x4b, 0x3, "816ada817b1619e66913abc6e6219cc8e4ea1adc161b1a626b9919b206376feadedbf24b06a55917caa2c8bca0364b33163095c82c3f3a2b53a6ec71806e0fed87cf4f80fdeccd"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x89fb}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd78}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 1.040808296s ago: executing program 6 (id=8114): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000140)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1.00624488s ago: executing program 7 (id=8116): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0x200002, 0x2, 0x87, 0xffffffff, 0x2}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, 0x0) 996.647232ms ago: executing program 6 (id=8117): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 921.184571ms ago: executing program 7 (id=8120): syz_io_uring_setup(0x4000066e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xfffffffb}, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000540)={0x1, 0x8d, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "c75c85e8b0e3eb49"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="020000009008"], 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000140), &(0x7f0000000280), 0x1000000}, 0x20) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='reno', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@discard}, {@oldalloc}, {@noquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80f}}]}, 0x1, 0x523, &(0x7f0000000a80)="$eJzs3c1vHGcZAPBnNrtJnDi1+ThAJUKhRU4F2bVr2locSpEQnCohyj0Ye21ZXnst77qNVxV1/gIkhACJE1y4IPEHIKFIXDgipEpwBqkIhCCFAwfooJ2d9Vd27W262XXs30+azPvO1/O8m8zszOybmQAurGci4tWIeD9N0+cjYiqSbHohH2KvM7SXe+/BW0vtIYk0ff0fSbZku97dVpKPr+erXY2Ib3494jvJw3Ebu631xVqtup3XK82NrUpjt3V7bWNxtbpa3Zyfn3tp4eWFFxdmh9LOGxHxylf/8sPv/fxrr/z6C2/++c7fbn23ndZkPv9wOz6g4kkzO00vZZ/F4RW2HzHYWVTMWpibGGyde48xHwAA+muf4380Ij4bEc/HVFw6+XQWAAAAeAKlX56M/yYRaW+X+0wHAAAAniCFrA9sUijnfQEmo1Aolzt9eD8e1wq1eqP5+ZX6zuZyp6/sdJQKK2u16mzWVzirJ+36XFY+qL9wrD5/pXO/4QdTE1m9vFSvLY/75gcAAABcENePXf//e6pz/Q8AAACcM9PjTgAAAAB47Fz/AwAAwPnn+h8AAADOtW+89tpERKTd918vv7G7s15/4/ZytbFe3thZKi/Vt7fKq/X6avbMvo3Ttler17e+GJs7dyvNaqNZaey27mzUdzabd9aOvAIbAAAAGKGPfPr+H5OI2PvSRDa0XR53UsBIFPdLST7usff/6anO+N0RJQWMxKUBlnn3yggSAUauOO4EgLEpjTsBYOySU+b37bzzu3z8meHmAwAADN/MJ/v//l84cc29k2cDZ56dGC6uY/t/2jauXIDRyn7/H7TDr5MFOFdKA/UABM6zD/37/6lcVwAAwLhNZkNSKOe39yajUCiXI25krwUoJStrtepsRDwVEX+YKl1p1+diwP84CAAAAAAAAAAAAAAAAAAAAAAAAABk0jTpvPQHAAAAOLciCn9NfpNk7/+amXpu8vj9gcvJf6Yif0Xomz95/Ud3F5vN7bn29H/uT2/+OJ/+wjjuYAAAAADHda/Tu9fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBM7z14a6k7jDLu378SEdO94hfjaja+GqWIuPavJIqH1ksi4tIQ4u/di4hP9IqftNPaD9kr/sTjjx/T+afQK/71IcSHi+x++/jzaq/9rxDPZOPe+18x4kj9UR05/rVuHjn+do9/l/rs/zcGjPH0O7+s9I1/L+LpYu/jTzd+0if+swPG//a3Wq1+89KfRsz0/P5JjsSqNDe2Ko3d1u21jcXV6mp1c35+7qWFlxdeXJitrKzVqvmfPWN8/1O/ev+k9l/rE3/6lPY/N2D7//fO3Qcf6xRLB1Mn9uPferZH/N/+LF/u4fiF/Lvvc3m5PX+mW97rlA+7+Yvf3zyp/csH7S99kL//WwO2fyg7CgAwNI3d1vpirVbdfsIKb+f5n75w+zzrbOT8CIXkbKRxXgtvD3WDaZqm7X+TPWbdj4hBtpPEWfhYssJ4j0sAAMDwHZz0jzsTAAAAAAAAAAAAAAAAAAAAuLgefvpXmsaQH0J2PObefinxZGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mz4fwAAAP//j6PX8g==") 893.032985ms ago: executing program 6 (id=8121): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000006800e978e9b38fb4d159a400000000000000000a000000002a51fe6803551d6514bff3e9af733e038213bd59c8648126a07f238bacddad54f7dfe4c0b61470a0c67618aa4a8addbe594187c125afd37b037209b39da40ab52cb235be920d5a1bd4e5003844a335229717cb"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000692c0000000000000000000008000100010003000000000000000000"], 0x20}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = socket(0x27, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x40083, 0x602a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) bind$unix(r5, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) setxattr$system_posix_acl(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {}, [], {0x2}, [], {0x2}, {0x4}}, 0x24, 0x0) flistxattr(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b0007eeb60000000000000095"], &(0x7f0000000780)='GPL\x00', 0x800, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 801.003787ms ago: executing program 7 (id=8124): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x2000009, @loopback}, {0xa, 0x20, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x1}, r1, 0x8}}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 800.225947ms ago: executing program 7 (id=8125): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 794.685737ms ago: executing program 3 (id=8126): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5001e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004090}, 0x2000000) syz_emit_ethernet(0x4a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "623eebe039a1f617fd02722e3486ebd9"}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x24000154}, 0x20000050) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000010000090900010073797a3100000000d0000000030a030000000000000000000100000a0900010073797a31000000000900030073797a3000000000a40003006272", @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x118}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c000}, 0x20008800) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000140)={@multicast1=0x1c, @empty=0xe0000300, 0x1f, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) recvmsg$can_bcm(r5, &(0x7f0000000300)={&(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f0000000340)=""/168, 0xa8}], 0x2, &(0x7f00000002c0)=""/9, 0x9}, 0x40002001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) ioprio_get$pid(0x2, 0x0) syz_clone3(&(0x7f0000000440)={0x31880000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000001700)}, 0x58) 761.736142ms ago: executing program 9 (id=8127): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2d", 0x18, 0xfffffffffffffffd) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x80000001, 0x0, 0x3ff}, 0x10) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x8000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0xf8, 0x9, 0xa, 0x3, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_USERDATA={0xa2, 0xd, 0x1, 0x0, "05e3c467b565179d16cd3286e215c7e3b5e308b59be6d9b81c127830f0725bb803ad8b94a7a1ae9ac29ff2ed6fa5a1aa7290cce3f476f91f9f1efde8030b41e61356eb83337d4980ad9aa4913b728b26b80bc077d14db7b8550149b33fe95732e8585bf1f8604bda189b0a715be62aa4ad035e3ea3b5d4e057db3bd5721248b68e5c218538d9b3230c8a4d9cfde896869cc43deb8f2635a4b7ab2c335e8e"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELSETELEM={0xbd0, 0xe, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2ec, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x24, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x2b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0x44}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x54, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xd8, 0x6, 0x1, 0x0, "0f4f433ecbb95a5dea24e48713430d1ee1d50b3750ace99f19af8d55a47afd0ad9f84435b741e4bf147f459de9140ef257689907229b8a57e1668cd387c3c1f228ade52edfb5b4501a11cfb9a63a58daa2e44367b3323097e6818aa76dfc324babc0e9f79c209a7745a1b6974ae86c0f6ac1392a4df65df6b1dc95c7dbb8eb2cf7f85be624baae14fc6720a69b5166fe361d49c72ee41e6e89ee0f88cbb8ac6c5f289d993d013dbac4c992def214acd0e77bedbae69951d656d06085272949c6bc220c5b6e0aad2935180ff10e40155f618f3fd7"}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "9d60325d9d478708c0746c67d24e04b570adc14d75dbd5f1de189dba0b61cf5829fefd0f64e8c4a6fa53ebe818182162b7409acfb9727368c9b542ae20c8cad38be23213033312e303cc1526de7b7d4afe43c03f15ccb882d75d15f8152ba3d190e4cfec4964953d52f246c1099416671c8e6e122dbb01aa3505f9605d9979f7ca452ee0ab4e2f2ba1549b9de5e43fb90aa1e87326ac1d0f7676449603efb003e890755d1fc5692d39cdcb20a7700c3367"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffe00}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x894, 0x3, 0x0, 0x1, [{0x280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY={0x11c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xb7, 0x1, "f56d6dd41d1b1aebe430ac012e25ca7726baf40769fb9d8a6cbf6eac2ed2951570bccd8e94227dfe3f76ef60574a817d010b0e524dc2805a677b4d3e3bb79472955d849ff24c1ef153c6b75a04aa83344eecfc9f68b5885f7150d55723020efce0ba2bd665524348c9221fae16540d137dc526b2b0edbcf538a1bab263918164dbe105e2202919e963dea950e30cd28d4fcc294585c276387a9e09291b44b4ff9bd4907128e551242d7988564c2963cf77de57"}]}, @NFTA_SET_ELEM_KEY={0x120, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8000000000000000}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fib={{0x8}, @void}}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x20, 0x1, "f65f3d300e771b0f1615f33299678063698153588a51e7e951c206d2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x22, 0x1, "25b73bc071b04a4fb6d5a27bdfb7684d357a3dbed0784d716ecd7d5152e9"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x20, 0x1, "bdc527be99ef163427ebd7070bc3737faa3cecab9df4489f8d2cdf88"}, @NFTA_DATA_VALUE={0x10, 0x1, "4ad349b8add5551761a46949"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}, {0x208, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x18c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xca, 0x1, "a3573a2ccd3e7f5c687687b25d008bdf00464555a29fcad08ccc5f385218d42de105e567832c3de9e061ad5520a26f8a5f257319b3d644deef610d8039e462efb69c663b11ba7e5e419427b0621d01d3d984bccd61c7b8433f9ba16ee158918ff9682bab604db3705eafc2726bc9e5a2a18630a7d34e72fc52ef589c8e81786327dec4de7fbe8f6ccff9b689154556c15e403d7ce64e8dce395b77bf8e9183212fb7e3210befc9a66914bf5192624b9082a88c3949a3d5d110baba5e840e34122fd6bd3ec9e6"}, @NFTA_DATA_VALUE={0x96, 0x1, "e2469ebd178ce283a2cc5e7d227b154aed7d33d997fac499ad0cebd4d3fa9999e3c5408759e50e1ca0052c9d7fda8f1a9408a1c0eed8986f580cedf197a127b59afdfbd59bdcfeaf3b8777a541efce3e377e105049f613cf88899d87310eebf39dbf4748f76f31b5786f417eb1bfba31b9056fe79a8ce1dab1a7f301a41720a76f4f1889da8da471ff843a289a2d3fc4a4ab"}]}, @NFTA_SET_ELEM_KEY_END={0x30, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x4}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "524df35f7c6f5fa46dd195fc05c63798769db3da3a1d63011b0ef3900d363f88e929384557ad23e54e28cc768f0b8558fc14fa420aed2e40"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}]}]}, {0x224, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}, @NFTA_SET_ELEM_KEY_END={0xec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "fea8b2530859e30621262359752a49138fdbb5fa36d8070a40c2587d13e1721f2bda2b2eaf6d8eb9c919f46ab9966a6fc106c3d800a29a9170acb57f270a1126ac9d4f0868fd7fa1d1ac"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x84, 0x1, "2df6570932f9b8e13e21dea5e858c346e01ae420e813ce780227b3c1e74b088b9d8673334a8734235be82a2aa7dfec75f69697e488848981826e0034991348e79d257845d95bc7e6bf964520e0ad79a447b487242ff8a18b794a3359b4d341315526a613063d0b7194dba07cf556c4b0366b9c3a6d10c72bfe03572d04b541f8"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xac, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x74, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_INFO={0x4b, 0x3, "816ada817b1619e66913abc6e6219cc8e4ea1adc161b1a626b9919b206376feadedbf24b06a55917caa2c8bca0364b33163095c82c3f3a2b53a6ec71806e0fed87cf4f80fdeccd"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x74, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x64, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_DESC={0x18, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x89fb}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWSETELEM={0x28, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xd7c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) 687.802011ms ago: executing program 3 (id=8128): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x18}}], 0x1, 0x40500f0) 370.263152ms ago: executing program 9 (id=8129): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x78e}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x4000000000001}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x1002, 0x5], &(0x7f0000000240), 0x0, 0x100000}}, 0x40) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x44, 0x0, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x2c}}}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2a, 0x9, 0x9, 0x6, 0x8084, 0x3, 0x2, 0x2]}}]}]}]}, 0x44}}, 0x800) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1}}}, 0x88) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}}, 0x1c) syz_emit_ethernet(0x1b6, &(0x7f0000000800)={@link_local, @broadcast, @val={@void, {0x8100, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @dccp={{0x27, 0x4, 0x3, 0x2e, 0x1a4, 0x64, 0x0, 0x0, 0x21, 0x0, @multicast2, @empty, {[@generic={0x44, 0x8, "3ea365b58a93"}, @end, @cipso={0x86, 0x3d, 0x1, [{0x1, 0x6, "ab73e932"}, {0x1, 0x12, "2f1ecfa19da9f98206ccb018da2a98e0"}, {0x6, 0xe, "632c31b2de00b8b2d490646a"}, {0x5, 0x5, "4bf59c"}, {0x6, 0xc, "2c60552f3806319e932d"}]}, @ra={0x94, 0x4, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0xf2}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0xa, 0x1, 0x0, [{@loopback}, {@empty, 0x461}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x1fffe}]}, @end]}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x7, 0x6, '\x00', 0x1, "2b7c1f"}, "ab7e679dc6ad71b00b5d6ebb3da2664ee08ba785d4c372361481c1e342825c4a88ad86e7b9de1c676211be7b24e3b7407b2d78c7b6705f688b6811e6d79c4aa64effd8cfd1f05245ed32304c1e5480dcba480b44772572f4f76b82cfd4c4f2920ad0d0414421fdfe2a0895c40397710432a0e6dcbf93c8e4bb1bc1bd4a05d41c1bddd53431c4856f08db6d40ec6f79b364849a30e14f043150b3d7c84f77079f9b5252de93222662be28330e88a40e70f58f4a53fc2685374c963a119ac56bb63f4f1a374dd422360d37b10d1c66d54b87a0e0ffb4506c0125a7755c3605c3f6dc302dd96ce27b5d3ff7cb6af65173d335a4e51bfc37fe7b"}}}}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) vmsplice(r6, &(0x7f0000000440)=[{&(0x7f0000000080)="00769d1f9fa5007acf8623629d548b4449da5d5db07f5c11597ef3d63259d573216b860f16", 0x25}, {&(0x7f00000000c0)="4495bb2dd6e5adebfe0c9520ab8acf4b1604180d71bc4c0f2bf86aa90d4c7e93f1e99afda84b65a43961b50532b453f1603d017f94e4f6d39e541671f204eb68eb0dd8ff6add0eff4fd3835cc7ea80cc02c879231a7caf6da8a93b775d232cbc7daae216954ac2", 0x67}, {&(0x7f0000000200)}, {&(0x7f00000002c0)="08202f857c6f43b9e4d222f2e717ce292616802f2ee7184767b78105de8381252b4f88d0c15938663f6b022d6ca5be9f67ed7a7d788df016209731fd0ca92927ff5bfcab24a3c83446de707b120b1bcc6096da26925acf113661e3a51f861aed486dfbb97d78cbed293e2de0e72459c573b59b13ce7b292e55e2292e4f1965d9e93ad4da9ed718af106062287fd6aaaea6a952d0f0ab83539deefef0d040500b00e83f08ceb365779a51cee51d60174fa7a62110ebf911b747e0", 0xba}, {&(0x7f0000000400)}], 0x5, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000414, &(0x7f00000000c0)={[{@noblock_validity}, {@journal_ioprio}, {@jqfmt_vfsv1}, {@oldalloc}, {@noquota}, {@grpjquota, 0x2e}, {@auto_da_alloc}, {@dax_always}, {@grpid}, {@delalloc}], [], 0x2c}, 0x84, 0x4c8, &(0x7f0000000e40)="$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") (async) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000001c0)='./file0\x00', 0x4000064f) (async) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x0, 0x403}, 0x90) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) 309.86859ms ago: executing program 3 (id=8130): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") fcntl$getown(r0, 0x9) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40e8662e, 0x0) 309.43606ms ago: executing program 9 (id=8131): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 307.00035ms ago: executing program 7 (id=8132): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRESOCT=0x0], 0x0, 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, 0x0, 0x0, 0x10002, 0x0) creat(&(0x7f0000001080)='./file0/file0\x00', 0x0) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 250.032318ms ago: executing program 6 (id=8133): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x20, 0x32, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @broadcast}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}, {&(0x7f00000009c0)="ec0da7d77268e595f173a09f83581eea8397bbb79626a230cebccf850bd14c9ec60ecce052f8666e5f6286d7c66af20d468897a93651586cde3e9ee42e483bc546ac324b263545d88f8969ee23ab0d697227859e5d20c5616da0d05deea682e9d36f1a6cfc0208d13230849467ef14b2572c887a16f6d889f41fdd9bbbf033a58da4ee77b1d0fcc4d3fae5377f39cf321ce3a9ea01010c72fdfb2ea1346e9cd67bb03c95f8c0dcce95dca82aedc0e6554a7b2bf07a63c6b7951093e1386b4f473c16731ee941a750f06aec37ca7ef82a5d6ddf48", 0xd4}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000007c0)=""/153, 0x99}], 0x1}, 0x2000) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e000100000000000000000000000000000000000000000000000000000000000200004e2000500000200016000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="fc0000000000c700000000000000000100f2ffff32000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a0001009000000000000000480001"], 0x154}}, 0x24000058) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x6}, @mss={0x2, 0xc}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semctl$IPC_INFO(0x0, 0x1, 0x3, 0x0) msgget$private(0x0, 0x2c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket(0x18, 0x800, 0x0) connect$pppoe(r6, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf250700000005003800010000009a75839ec57bb023c33f8a121a05d98904160a8f7beda6ad8f6653"], 0x1c}, 0x1, 0x0, 0x0, 0x20000910}, 0xc1) 194.197225ms ago: executing program 9 (id=8134): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x8927) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d35010000000000950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 149.285621ms ago: executing program 3 (id=8135): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000040), 0x2, 0x2}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 99.832237ms ago: executing program 3 (id=8136): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x810008, &(0x7f0000000280)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x1003, &(0x7f0000001cc0)=""/4099, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 57.598813ms ago: executing program 9 (id=8137): arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) unshare(0x2040400) unshare(0x2000400) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x0, @perf_bp={0x0}, 0x8604, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$trusted_overlay_redirect(r1, 0x0, 0x0, 0x0, 0x3) 410.76µs ago: executing program 9 (id=8138): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x2, 0x5ce, &(0x7f0000000980)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getrandom(&(0x7f0000000040)=""/43, 0x2b, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x4, @local, 0x8}}}, &(0x7f0000000140)=0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={r1, 0xaa}, 0x8) 0s ago: executing program 3 (id=8139): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x8927) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000100)={0x77359400}, 0x10) io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc4}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60200, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0xa000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0018001c0000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) kernel console output (not intermixed with test programs): 0000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 562.897955][T27545] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.919708][T27545] __nla_validate_parse: 8 callbacks suppressed [ 562.919729][T27545] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7502'. [ 562.973579][T25797] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm kworker/u8:73: lblock 3 mapped to illegal pblock 3 (length 1) [ 563.020487][T27562] set_capacity_and_notify: 5 callbacks suppressed [ 563.020584][T27562] loop8: detected capacity change from 0 to 512 [ 563.044585][T27562] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.7509: error while reading EA inode 32 err=-116 [ 563.060553][T25797] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 563.072945][T25797] EXT4-fs (loop9): This should not happen!! Data will be lost [ 563.072945][T25797] [ 563.083916][T27562] EXT4-fs (loop8): Remounting filesystem read-only [ 563.090453][T27562] EXT4-fs warning (device loop8): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 563.100727][T27562] EXT4-fs (loop8): 1 orphan inode deleted [ 563.106934][T27562] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.120315][T22036] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 563.150427][T24236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.223503][T27570] loop8: detected capacity change from 0 to 512 [ 563.250312][T27570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 563.276333][T27570] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 3: comm syz.8.7510: lblock 0 mapped to illegal pblock 3 (length 1) [ 563.316662][T27570] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.7510: error -117 reading directory block [ 563.341727][T24236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.410257][T27582] loop3: detected capacity change from 0 to 8192 [ 563.432711][T27588] loop9: detected capacity change from 0 to 512 [ 563.445147][T27582] FAULT_INJECTION: forcing a failure. [ 563.445147][T27582] name failslab, interval 1, probability 0, space 0, times 0 [ 563.457982][T27582] CPU: 1 UID: 0 PID: 27582 Comm: syz.3.7515 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 563.458018][T27582] Tainted: [W]=WARN [ 563.458025][T27582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 563.458108][T27582] Call Trace: [ 563.458116][T27582] [ 563.458124][T27582] __dump_stack+0x1d/0x30 [ 563.458151][T27582] dump_stack_lvl+0x95/0xd0 [ 563.458178][T27582] dump_stack+0x15/0x1b [ 563.458201][T27582] should_fail_ex+0x263/0x280 [ 563.458238][T27582] should_failslab+0x8c/0xb0 [ 563.458264][T27582] kmem_cache_alloc_noprof+0x68/0x490 [ 563.458285][T27582] ? getname_flags+0x7f/0x3b0 [ 563.458309][T27582] getname_flags+0x7f/0x3b0 [ 563.458381][T27582] do_sys_openat2+0x60/0x150 [ 563.458414][T27582] __x64_sys_openat+0xf2/0x120 [ 563.458453][T27582] x64_sys_call+0x2b07/0x3000 [ 563.458478][T27582] do_syscall_64+0xc0/0x2a0 [ 563.458500][T27582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.458527][T27582] RIP: 0033:0x7f6379afacb9 [ 563.458592][T27582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.458647][T27582] RSP: 002b:00007f6378557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 563.458673][T27582] RAX: ffffffffffffffda RBX: 00007f6379d75fa0 RCX: 00007f6379afacb9 [ 563.458692][T27582] RDX: 00000000000026e1 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 563.458710][T27582] RBP: 00007f6378557090 R08: 0000000000000000 R09: 0000000000000000 [ 563.458727][T27582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.458744][T27582] R13: 00007f6379d76038 R14: 00007f6379d75fa0 R15: 00007ffc1ca52a08 [ 563.458791][T27582] [ 563.458983][T27588] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 563.624748][T27584] loop6: detected capacity change from 0 to 8192 [ 563.645118][T27588] EXT4-fs (loop9): orphan cleanup on readonly fs [ 563.669412][T27591] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7517'. [ 563.685644][T27588] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7519: bg 0: block 248: padding at end of block bitmap is not set [ 563.704227][T27588] __quota_error: 142 callbacks suppressed [ 563.704248][T27588] Quota error (device loop9): write_blk: dquota write failed [ 563.717476][T27588] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 563.727652][T27588] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7519: Failed to acquire dquot type 1 [ 563.752633][T27593] loop3: detected capacity change from 0 to 512 [ 563.801219][T27588] EXT4-fs (loop9): 1 truncate cleaned up [ 563.808924][T27593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.822230][T27588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.856687][T27593] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.889759][T22036] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.912346][T27591] vlan2: entered promiscuous mode [ 563.970380][T27592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7520'. [ 563.980167][T27601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=27601 comm=syz.6.7522 [ 564.033237][ T29] audit: type=1326 audit(2000000687.040:20623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.056874][ T29] audit: type=1326 audit(2000000687.040:20624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.080496][ T29] audit: type=1326 audit(2000000687.040:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.104113][ T29] audit: type=1326 audit(2000000687.040:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.128946][ T29] audit: type=1326 audit(2000000687.040:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.152702][ T29] audit: type=1400 audit(2000000687.040:20628): avc: denied { connect } for pid=27600 comm="syz.6.7522" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 564.173467][ T29] audit: type=1326 audit(2000000687.051:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.197196][ T29] audit: type=1326 audit(2000000687.051:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.9.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a8edeacb9 code=0x7ffc0000 [ 564.256468][T24702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.289187][T27609] loop8: detected capacity change from 0 to 512 [ 564.332230][T27609] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 564.397451][T27609] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 3: comm syz.8.7527: lblock 0 mapped to illegal pblock 3 (length 1) [ 564.399050][T27619] loop6: detected capacity change from 0 to 512 [ 564.433962][T27609] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.7527: error -117 reading directory block [ 564.471841][T27619] EXT4-fs: Ignoring removed i_version option [ 564.487502][T24236] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.524327][T27619] EXT4-fs (loop6): orphan cleanup on readonly fs [ 564.542414][T27619] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.7530: EA inode hash validation failed [ 564.566972][T27619] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 564.607414][T27619] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.6.7530: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 564.630066][T27619] EXT4-fs (loop6): Remounting filesystem read-only [ 564.636785][T27619] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.6.7530: ea_inode dec ref err=-117 [ 564.697111][T27641] syz_tun: entered allmulticast mode [ 564.706516][T27619] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 564.716693][T27619] EXT4-fs (loop6): 1 orphan inode deleted [ 564.723551][T27619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 564.735783][T27641] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 564.744353][T27641] mroute: pending queue full, dropping entries [ 564.744604][T27642] loop9: detected capacity change from 0 to 1024 [ 564.777242][T23413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.777249][T27641] syz_tun: left allmulticast mode [ 564.793100][T27642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 564.815951][T27642] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.871803][T22036] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 564.960428][T27653] FAULT_INJECTION: forcing a failure. [ 564.960428][T27653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.973593][T27653] CPU: 0 UID: 0 PID: 27653 Comm: syz.9.7540 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 564.973712][T27653] Tainted: [W]=WARN [ 564.973719][T27653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 564.973733][T27653] Call Trace: [ 564.973742][T27653] [ 564.973753][T27653] __dump_stack+0x1d/0x30 [ 564.973805][T27653] dump_stack_lvl+0x95/0xd0 [ 564.973826][T27653] dump_stack+0x15/0x1b [ 564.973846][T27653] should_fail_ex+0x263/0x280 [ 564.973903][T27653] should_fail+0xb/0x20 [ 564.973925][T27653] should_fail_usercopy+0x1a/0x20 [ 564.974029][T27653] _copy_from_user+0x1c/0xb0 [ 564.974117][T27653] kstrtouint_from_user+0x69/0xf0 [ 564.974140][T27653] ? 0xffffffff81000000 [ 564.974263][T27653] ? selinux_file_permission+0x1e1/0x320 [ 564.974301][T27653] proc_fail_nth_write+0x50/0x160 [ 564.974330][T27653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.974358][T27653] vfs_write+0x269/0x9f0 [ 564.974410][T27653] ? __rcu_read_unlock+0x4e/0x70 [ 564.974435][T27653] ? __fget_files+0x184/0x1c0 [ 564.974464][T27653] ? fput+0x8f/0xc0 [ 564.974496][T27653] ? mutex_lock+0x57/0x90 [ 564.974618][T27653] ksys_write+0xdc/0x1a0 [ 564.974640][T27653] __x64_sys_write+0x40/0x50 [ 564.974664][T27653] x64_sys_call+0x2847/0x3000 [ 564.974692][T27653] do_syscall_64+0xc0/0x2a0 [ 564.974783][T27653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.974805][T27653] RIP: 0033:0x7f5a8edab58e [ 564.974822][T27653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.974847][T27653] RSP: 002b:00007f5a8d825fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.974872][T27653] RAX: ffffffffffffffda RBX: 00007f5a8d8266c0 RCX: 00007f5a8edab58e [ 564.974960][T27653] RDX: 0000000000000001 RSI: 00007f5a8d8260a0 RDI: 0000000000000004 [ 564.974972][T27653] RBP: 00007f5a8d826090 R08: 0000000000000000 R09: 0000000000000000 [ 564.974985][T27653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.974997][T27653] R13: 00007f5a8f066128 R14: 00007f5a8f066090 R15: 00007ffcb0806dc8 [ 564.975016][T27653] [ 565.293311][T27657] sctp: [Deprecated]: syz.6.7543 (pid 27657) Use of int in maxseg socket option. [ 565.293311][T27657] Use struct sctp_assoc_value instead [ 565.403207][T27670] netlink: 27 bytes leftover after parsing attributes in process `syz.6.7547'. [ 565.426563][T27655] loop9: detected capacity change from 0 to 512 [ 565.486442][T27675] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 565.526221][T27675] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 565.539998][T27655] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 565.561836][T27675] EXT4-fs (loop6): 1 truncate cleaned up [ 565.571058][T27655] EXT4-fs (loop9): mount failed [ 565.577893][T27675] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.619132][T23413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.795426][T27698] EXT4-fs: Ignoring removed nobh option [ 565.804421][T27698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 565.812530][T27698] System zones: 1-12 [ 565.817292][T27698] EXT4-fs (loop6): orphan cleanup on readonly fs [ 565.823994][T27698] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 565.837222][T27698] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.7556: corrupted inode contents [ 565.849381][T27698] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.7556: mark_inode_dirty error [ 565.861097][T27698] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.7556: corrupted inode contents [ 565.873423][T27698] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.7556: mark_inode_dirty error [ 565.885695][T27698] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.7556: mark inode dirty (error -117) [ 565.898986][T27698] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 565.908289][T27698] EXT4-fs (loop6): 1 orphan inode deleted [ 565.914671][T27698] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 566.021078][T23413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.092746][T27711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7562'. [ 566.127520][T27716] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7563'. [ 566.171302][T27711] vlan2: entered promiscuous mode [ 566.178162][T27711] team0: entered promiscuous mode [ 566.184120][T27711] team_slave_0: entered promiscuous mode [ 566.193222][T27711] team_slave_1: entered promiscuous mode [ 566.298479][T27716] vlan2: entered promiscuous mode [ 566.322896][ T351] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.407320][ T351] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.488132][ T351] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.538740][ T351] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.570099][T27723] chnl_net:caif_netlink_parms(): no params data found [ 566.579972][T27748] netlink: 'syz.6.7573': attribute type 5 has an invalid length. [ 566.592842][T27745] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 566.600171][T27748] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7573'. [ 566.607003][T27745] EXT4-fs (loop7): mount failed [ 566.685338][T27757] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7575'. [ 566.709954][T27723] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.717101][T27723] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.726874][T27723] bridge_slave_0: entered allmulticast mode [ 566.733394][T27757] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 566.735295][T27723] bridge_slave_0: entered promiscuous mode [ 566.749372][T27723] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.756558][T27723] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.763834][T27723] bridge_slave_1: entered allmulticast mode [ 566.771091][T27723] bridge_slave_1: entered promiscuous mode [ 566.777268][T27757] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 566.783987][T27757] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 566.791606][T27757] vhci_hcd vhci_hcd.0: Device attached [ 566.812274][T27760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7576'. [ 566.835663][T27723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.860135][T27762] vhci_hcd: connection closed [ 566.860300][T24545] vhci_hcd vhci_hcd.3: stop threads [ 566.870614][T24545] vhci_hcd vhci_hcd.3: release socket [ 566.876173][T24545] vhci_hcd vhci_hcd.3: disconnect device [ 566.935186][T27768] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7577'. [ 566.953820][ T351] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 566.963666][ T351] bridge0 (unregistering): left promiscuous mode [ 566.998191][ T351] bond0 (unregistering): Released all slaves [ 567.006670][ T351] bond1 (unregistering): Released all slaves [ 567.017052][ T351] bond2 (unregistering): Released all slaves [ 567.026951][T27723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.039519][T27760] vlan2: entered promiscuous mode [ 567.066653][T27768] vlan2: entered promiscuous mode [ 567.114905][ T351] tipc: Disabling bearer [ 567.120242][ T351] tipc: Disabling bearer [ 567.125964][ T351] tipc: Left network mode [ 567.135929][T27723] team0: Port device team_slave_0 added [ 567.143451][T27723] team0: Port device team_slave_1 added [ 567.160996][ T351] hsr_slave_0: left promiscuous mode [ 567.171122][ T351] hsr_slave_1: left promiscuous mode [ 567.190508][ T351] veth1_macvtap: left promiscuous mode [ 567.208500][ T351] veth0_macvtap: left promiscuous mode [ 567.214052][ T351] veth1_vlan: left promiscuous mode [ 567.220765][ T351] veth0_vlan: left promiscuous mode [ 567.299303][T27788] netlink: 'syz.9.7579': attribute type 8 has an invalid length. [ 567.345727][T27789] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 2, id = 0 [ 567.369180][T27723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.376265][T27723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.402284][T27723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.418391][T27723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.425457][T27723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.451480][T27723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.525218][T27723] hsr_slave_0: entered promiscuous mode [ 567.546149][T27723] hsr_slave_1: entered promiscuous mode [ 567.579910][T27723] debugfs: 'hsr0' already exists in 'hsr' [ 567.585709][T27723] Cannot create hsr debugfs directory [ 567.600756][T27806] FAULT_INJECTION: forcing a failure. [ 567.600756][T27806] name failslab, interval 1, probability 0, space 0, times 0 [ 567.613533][T27806] CPU: 1 UID: 0 PID: 27806 Comm: syz.9.7584 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 567.613643][T27806] Tainted: [W]=WARN [ 567.613653][T27806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.613670][T27806] Call Trace: [ 567.613679][T27806] [ 567.613688][T27806] __dump_stack+0x1d/0x30 [ 567.613719][T27806] dump_stack_lvl+0x95/0xd0 [ 567.613804][T27806] dump_stack+0x15/0x1b [ 567.613828][T27806] should_fail_ex+0x263/0x280 [ 567.613856][T27806] should_failslab+0x8c/0xb0 [ 567.613883][T27806] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 567.613915][T27806] ? __d_alloc+0x37/0x340 [ 567.613949][T27806] __d_alloc+0x37/0x340 [ 567.614024][T27806] d_alloc_pseudo+0x1e/0x80 [ 567.614088][T27806] alloc_file_pseudo+0x91/0x190 [ 567.614123][T27806] ? security_inode_alloc+0x69/0x100 [ 567.614189][T27806] sock_alloc_file+0x9c/0x1e0 [ 567.614217][T27806] do_accept+0x1e3/0x390 [ 567.614255][T27806] __sys_accept4+0xbe/0x170 [ 567.614363][T27806] __x64_sys_accept+0x42/0x50 [ 567.614397][T27806] x64_sys_call+0x2215/0x3000 [ 567.614429][T27806] do_syscall_64+0xc0/0x2a0 [ 567.614538][T27806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.614587][T27806] RIP: 0033:0x7f5a8edeacb9 [ 567.614608][T27806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.614631][T27806] RSP: 002b:00007f5a8d847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 567.614732][T27806] RAX: ffffffffffffffda RBX: 00007f5a8f065fa0 RCX: 00007f5a8edeacb9 [ 567.614748][T27806] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 567.614763][T27806] RBP: 00007f5a8d847090 R08: 0000000000000000 R09: 0000000000000000 [ 567.614779][T27806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.614825][T27806] R13: 00007f5a8f066038 R14: 00007f5a8f065fa0 R15: 00007ffcb0806dc8 [ 567.614846][T27806] [ 567.827170][T27818] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 567.930205][ T351] IPVS: stop unused estimator thread 0... [ 568.089844][T27852] FAULT_INJECTION: forcing a failure. [ 568.089844][T27852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.103201][T27852] CPU: 1 UID: 0 PID: 27852 Comm: syz.3.7590 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 568.103296][T27852] Tainted: [W]=WARN [ 568.103307][T27852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.103366][T27852] Call Trace: [ 568.103375][T27852] [ 568.103386][T27852] __dump_stack+0x1d/0x30 [ 568.103417][T27852] dump_stack_lvl+0x95/0xd0 [ 568.103489][T27852] dump_stack+0x15/0x1b [ 568.103529][T27852] should_fail_ex+0x263/0x280 [ 568.103561][T27852] should_fail+0xb/0x20 [ 568.103617][T27852] should_fail_usercopy+0x1a/0x20 [ 568.103685][T27852] _copy_to_user+0x20/0xa0 [ 568.103723][T27852] simple_read_from_buffer+0xb5/0x130 [ 568.103770][T27852] proc_fail_nth_read+0x10e/0x150 [ 568.103828][T27852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 568.103920][T27852] vfs_read+0x1ab/0x7f0 [ 568.103961][T27852] ? __rcu_read_unlock+0x4e/0x70 [ 568.104048][T27852] ? __fget_files+0x184/0x1c0 [ 568.104070][T27852] ? smc_setsockopt+0x391/0x750 [ 568.104185][T27852] ? mutex_lock+0x57/0x90 [ 568.104276][T27852] ksys_read+0xdc/0x1a0 [ 568.104368][T27852] __x64_sys_read+0x40/0x50 [ 568.104438][T27852] x64_sys_call+0x2889/0x3000 [ 568.104472][T27852] do_syscall_64+0xc0/0x2a0 [ 568.104500][T27852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.104569][T27852] RIP: 0033:0x7f6379abb58e [ 568.104590][T27852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 568.104613][T27852] RSP: 002b:00007f6378556fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 568.104656][T27852] RAX: ffffffffffffffda RBX: 00007f63785576c0 RCX: 00007f6379abb58e [ 568.104673][T27852] RDX: 000000000000000f RSI: 00007f63785570a0 RDI: 0000000000000004 [ 568.104689][T27852] RBP: 00007f6378557090 R08: 0000000000000000 R09: 0000000000000000 [ 568.104705][T27852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.104721][T27852] R13: 00007f6379d76038 R14: 00007f6379d75fa0 R15: 00007ffc1ca52a08 [ 568.104815][T27852] [ 568.354921][T27866] __nla_validate_parse: 2 callbacks suppressed [ 568.354956][T27866] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7591'. [ 568.397063][T27869] set_capacity_and_notify: 4 callbacks suppressed [ 568.397083][T27869] loop7: detected capacity change from 0 to 512 [ 568.426314][T27869] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 568.489808][T27723] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 568.513464][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 568.513483][ T29] audit: type=1400 audit(2000000691.786:20821): avc: denied { read write } for pid=27876 comm="syz.7.7595" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 568.544004][ T29] audit: type=1400 audit(2000000691.786:20822): avc: denied { open } for pid=27876 comm="syz.7.7595" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 568.572989][T27723] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 568.580074][ T29] audit: type=1400 audit(2000000691.849:20823): avc: denied { ioctl } for pid=27876 comm="syz.7.7595" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 568.609066][T27723] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 568.621343][T27723] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 568.642161][T27872] loop3: detected capacity change from 0 to 512 [ 568.683550][T27896] FAULT_INJECTION: forcing a failure. [ 568.683550][T27896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 568.696851][T27896] CPU: 1 UID: 0 PID: 27896 Comm: syz.6.7597 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 568.696888][T27896] Tainted: [W]=WARN [ 568.696895][T27896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 568.696907][T27896] Call Trace: [ 568.696914][T27896] [ 568.696921][T27896] __dump_stack+0x1d/0x30 [ 568.697011][T27896] dump_stack_lvl+0x95/0xd0 [ 568.697039][T27896] dump_stack+0x15/0x1b [ 568.697065][T27896] should_fail_ex+0x263/0x280 [ 568.697095][T27896] should_fail+0xb/0x20 [ 568.697140][T27896] should_fail_usercopy+0x1a/0x20 [ 568.697229][T27896] _copy_from_iter+0xcf/0xea0 [ 568.697263][T27896] ? __alloc_skb+0x397/0x4b0 [ 568.697294][T27896] ? __alloc_skb+0x219/0x4b0 [ 568.697349][T27896] netlink_sendmsg+0x4ae/0x6f0 [ 568.697372][T27896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.697396][T27896] __sock_sendmsg+0x145/0x170 [ 568.697420][T27896] ____sys_sendmsg+0x31e/0x4a0 [ 568.697489][T27896] ___sys_sendmsg+0x195/0x1e0 [ 568.697575][T27896] __x64_sys_sendmsg+0xd4/0x160 [ 568.697610][T27896] x64_sys_call+0x17ba/0x3000 [ 568.697643][T27896] do_syscall_64+0xc0/0x2a0 [ 568.697672][T27896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.697724][T27896] RIP: 0033:0x7fe67a17acb9 [ 568.697740][T27896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.697762][T27896] RSP: 002b:00007fe678bd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.697786][T27896] RAX: ffffffffffffffda RBX: 00007fe67a3f5fa0 RCX: 00007fe67a17acb9 [ 568.697836][T27896] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000003 [ 568.697851][T27896] RBP: 00007fe678bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 568.697863][T27896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.697876][T27896] R13: 00007fe67a3f6038 R14: 00007fe67a3f5fa0 R15: 00007ffc822c8098 [ 568.697897][T27896] [ 568.945897][ T29] audit: type=1400 audit(2000000692.238:20824): avc: denied { ioctl } for pid=27899 comm="syz.7.7600" path="socket:[91806]" dev="sockfs" ino=91806 ioctlcmd=0x8994 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 568.969777][T27723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.984862][T27872] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 568.993239][T27872] EXT4-fs (loop3): mount failed [ 569.018613][T27723] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.128196][T27909] syzkaller0: entered promiscuous mode [ 569.133757][T27909] syzkaller0: entered allmulticast mode [ 569.153239][T24561] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.160441][T24561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.180479][T24561] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.187615][T24561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.276560][ T29] audit: type=1400 audit(2000000692.584:20825): avc: denied { write } for pid=27908 comm="syz.9.7601" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 569.296396][T27926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 569.311635][T27926] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(11) [ 569.318376][T27926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 569.326176][T27926] vhci_hcd vhci_hcd.0: Device attached [ 569.333913][T27926] loop7: detected capacity change from 0 to 164 [ 569.341401][ T29] audit: type=1400 audit(2000000692.647:20826): avc: denied { create } for pid=27924 comm="syz.6.7604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.375386][T27929] loop6: detected capacity change from 0 to 1024 [ 569.394387][T27929] EXT4-fs: Mount option(s) incompatible with ext2 [ 569.401575][ T29] audit: type=1400 audit(2000000692.678:20827): avc: denied { getopt } for pid=27924 comm="syz.6.7604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 569.421950][T27923] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7603'. [ 569.435818][T27927] vhci_hcd: connection closed [ 569.435997][ T31] vhci_hcd vhci_hcd.7: stop threads [ 569.446099][ T31] vhci_hcd vhci_hcd.7: release socket [ 569.451584][ T31] vhci_hcd vhci_hcd.7: disconnect device [ 569.500638][ T1047] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 569.531491][T27938] FAULT_INJECTION: forcing a failure. [ 569.531491][T27938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.544740][T27938] CPU: 1 UID: 0 PID: 27938 Comm: syz.3.7605 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 569.544823][T27938] Tainted: [W]=WARN [ 569.544832][T27938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 569.544848][T27938] Call Trace: [ 569.544856][T27938] [ 569.544866][T27938] __dump_stack+0x1d/0x30 [ 569.544897][T27938] dump_stack_lvl+0x95/0xd0 [ 569.544922][T27938] dump_stack+0x15/0x1b [ 569.544973][T27938] should_fail_ex+0x263/0x280 [ 569.544997][T27938] should_fail+0xb/0x20 [ 569.545069][T27938] should_fail_usercopy+0x1a/0x20 [ 569.545097][T27938] strncpy_from_user+0x27/0x250 [ 569.545209][T27938] getname_flags+0xad/0x3b0 [ 569.545241][T27938] io_openat_prep+0x12b/0x2c0 [ 569.545276][T27938] io_submit_sqes+0x70e/0x11b0 [ 569.545410][T27938] __se_sys_io_uring_enter+0x1bf/0x1c70 [ 569.545438][T27938] ? 0xffffffff81000000 [ 569.545457][T27938] ? __rcu_read_unlock+0x4e/0x70 [ 569.545484][T27938] ? get_pid_task+0x96/0xd0 [ 569.545577][T27938] ? proc_fail_nth_write+0x13b/0x160 [ 569.545617][T27938] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 569.545650][T27938] ? vfs_write+0x86e/0x9f0 [ 569.545700][T27938] ? __rcu_read_unlock+0x4e/0x70 [ 569.545761][T27938] ? __fget_files+0x184/0x1c0 [ 569.545791][T27938] ? mutex_lock+0x57/0x90 [ 569.545826][T27938] ? mutex_unlock+0x4e/0x90 [ 569.545885][T27938] ? fput+0x8f/0xc0 [ 569.545968][T27938] __x64_sys_io_uring_enter+0x78/0x90 [ 569.545996][T27938] x64_sys_call+0x27e4/0x3000 [ 569.546099][T27938] do_syscall_64+0xc0/0x2a0 [ 569.546129][T27938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.546166][T27938] RIP: 0033:0x7f6379afacb9 [ 569.546187][T27938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.546213][T27938] RSP: 002b:00007f6378557028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 569.546283][T27938] RAX: ffffffffffffffda RBX: 00007f6379d75fa0 RCX: 00007f6379afacb9 [ 569.546384][T27938] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 569.546401][T27938] RBP: 00007f6378557090 R08: 0000000000000000 R09: 0000000000000000 [ 569.546419][T27938] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 569.546436][T27938] R13: 00007f6379d76038 R14: 00007f6379d75fa0 R15: 00007ffc1ca52a08 [ 569.546475][T27938] [ 569.871511][T27954] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7609'. [ 569.901023][T27723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.914709][ T29] audit: type=1400 audit(2000000693.256:20828): avc: denied { write } for pid=27953 comm="syz.6.7609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 569.935091][ T29] audit: type=1400 audit(2000000693.256:20829): avc: denied { nlmsg_write } for pid=27953 comm="syz.6.7609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 570.006727][T27961] syz_tun: entered allmulticast mode [ 570.027093][ T29] audit: type=1400 audit(2000000693.371:20830): avc: denied { append } for pid=27964 comm="syz.6.7611" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 570.228341][T27968] syz_tun: left allmulticast mode [ 570.370266][T28004] loop9: detected capacity change from 0 to 512 [ 570.385550][T28004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 570.403655][T27723] veth0_vlan: entered promiscuous mode [ 570.412291][T27998] loop7: detected capacity change from 0 to 512 [ 570.454836][T27723] veth1_vlan: entered promiscuous mode [ 570.463202][T28004] EXT4-fs error (device loop9): ext4_map_blocks:783: inode #2: block 3: comm syz.9.7617: lblock 0 mapped to illegal pblock 3 (length 1) [ 570.481981][T27998] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 570.486207][T27723] veth0_macvtap: entered promiscuous mode [ 570.496177][T28004] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.7617: error -117 reading directory block [ 570.513710][T28009] netlink: 'syz.3.7619': attribute type 1 has an invalid length. [ 570.522403][T27723] veth1_macvtap: entered promiscuous mode [ 570.538186][T27723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.543648][T27998] EXT4-fs (loop7): mount failed [ 570.555854][T27723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.584511][T28009] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.596168][T24561] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.606950][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7618'. [ 570.621208][T22036] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.633486][T24561] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.657541][T28009] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.751360][T28007] vlan2: entered promiscuous mode [ 570.772417][T24561] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.783456][T28020] tipc: Started in network mode [ 570.788501][T28020] tipc: Node identity ac14140f, cluster identity 4711 [ 570.796027][T28020] tipc: Enabled bearer , priority 10 [ 570.806951][T28009] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.819893][T24561] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.837938][T28024] loop9: detected capacity change from 0 to 512 [ 570.855211][T28024] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 570.864947][T28009] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.876383][T28024] EXT4-fs (loop9): mount failed [ 570.882763][T28028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7622'. [ 570.899852][T28028] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7622'. [ 570.909551][T28028] netlink: 7 bytes leftover after parsing attributes in process `syz.6.7622'. [ 570.922742][T28009] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.970374][T28033] loop6: detected capacity change from 0 to 1024 [ 570.979098][T28033] EXT4-fs (loop6): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 571.001132][T25781] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.024835][T28035] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7625'. [ 571.035979][T25781] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.046605][T28035] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 571.058716][T25781] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.072966][T28035] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 571.079684][T28035] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 571.087262][T28035] vhci_hcd vhci_hcd.0: Device attached [ 571.093071][T25781] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.101755][T28035] loop6: detected capacity change from 0 to 164 [ 571.111276][T28038] vhci_hcd: connection closed [ 571.111550][ T52] vhci_hcd vhci_hcd.6: stop threads [ 571.121673][ T52] vhci_hcd vhci_hcd.6: release socket [ 571.127068][ T52] vhci_hcd vhci_hcd.6: disconnect device [ 571.256582][T28058] pim6reg: entered allmulticast mode [ 571.264127][T28058] pim6reg: left allmulticast mode [ 571.278504][T28059] tipc: Enabling of bearer rejected, already enabled [ 571.369692][T28064] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7636'. [ 571.400809][T28067] loop3: detected capacity change from 0 to 128 [ 571.413823][T28067] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 571.431179][T28067] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 571.443598][T28070] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 571.461435][T28070] EXT4-fs (loop7): orphan cleanup on readonly fs [ 571.476230][T28070] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7638: bg 0: block 248: padding at end of block bitmap is not set [ 571.492468][T28070] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.7638: Failed to acquire dquot type 1 [ 571.504891][T28070] EXT4-fs (loop7): 1 truncate cleaned up [ 571.512925][T28070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.546293][T25879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.565118][T28078] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 571.573099][T28078] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 571.732664][T28074] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 571.754649][T28095] tipc: Enabling of bearer rejected, already enabled [ 571.760889][T28074] EXT4-fs (loop8): mount failed [ 571.836258][T28103] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7650'. [ 571.880983][T28100] vlan2: entered promiscuous mode [ 571.941013][ T1047] tipc: Node number set to 2886997007 [ 571.963063][T24702] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.158568][T28118] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(11) [ 572.165234][T28118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 572.172815][T28118] vhci_hcd vhci_hcd.0: Device attached [ 572.183871][T28119] vhci_hcd: connection closed [ 572.183983][T24533] vhci_hcd vhci_hcd.8: stop threads [ 572.193981][T24533] vhci_hcd vhci_hcd.8: release socket [ 572.199508][T24533] vhci_hcd vhci_hcd.8: disconnect device [ 572.217174][T28124] vfat: Unknown parameter 'dmass00000000000000000000006' [ 572.308074][T28133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=28133 comm=syz.6.7660 [ 572.340165][T28133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28133 comm=syz.6.7660 [ 572.359179][T28135] tipc: Enabling of bearer rejected, already enabled [ 572.448106][T28141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.457995][T28141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.531988][T28145] ext2: Unknown parameter 'obj_role' [ 572.734363][T28153] delete_channel: no stack [ 572.883000][T28150] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 572.902945][T28171] veth0_vlan: entered allmulticast mode [ 572.914424][T28150] EXT4-fs (loop3): mount failed [ 572.958696][T28171] veth0_vlan: left promiscuous mode [ 572.976110][T28171] veth0_vlan: entered promiscuous mode [ 573.017713][T28173] FAULT_INJECTION: forcing a failure. [ 573.017713][T28173] name failslab, interval 1, probability 0, space 0, times 0 [ 573.030471][T28173] CPU: 0 UID: 0 PID: 28173 Comm: syz.8.7673 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 573.030513][T28173] Tainted: [W]=WARN [ 573.030522][T28173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 573.030604][T28173] Call Trace: [ 573.030613][T28173] [ 573.030622][T28173] __dump_stack+0x1d/0x30 [ 573.030655][T28173] dump_stack_lvl+0x95/0xd0 [ 573.030707][T28173] dump_stack+0x15/0x1b [ 573.030730][T28173] should_fail_ex+0x263/0x280 [ 573.030760][T28173] should_failslab+0x8c/0xb0 [ 573.030851][T28173] __kmalloc_noprof+0xb8/0x580 [ 573.030878][T28173] ? bm_init+0x4c/0x6f0 [ 573.030900][T28173] ? pcpu_block_refresh_hint+0x10b/0x170 [ 573.030957][T28173] bm_init+0x4c/0x6f0 [ 573.030985][T28173] ? pcpu_alloc_area+0x59c/0x5c0 [ 573.031020][T28173] textsearch_prepare+0x195/0x200 [ 573.031091][T28173] string_mt_check+0x119/0x170 [ 573.031132][T28173] xt_check_match+0x2ad/0x4f0 [ 573.031171][T28173] ? mutex_unlock+0x4e/0x90 [ 573.031208][T28173] ? xt_find_match+0x1d1/0x210 [ 573.031363][T28173] ? xt_find_match+0x1b5/0x210 [ 573.031405][T28173] translate_table+0xbc1/0x11b0 [ 573.031489][T28173] ? _copy_from_user+0x89/0xb0 [ 573.031559][T28173] do_ip6t_set_ctl+0x6d9/0x8f0 [ 573.031599][T28173] nf_setsockopt+0x199/0x1b0 [ 573.031697][T28173] ipv6_setsockopt+0x11a/0x130 [ 573.031726][T28173] udpv6_setsockopt+0x99/0xb0 [ 573.031767][T28173] sock_common_setsockopt+0x69/0x80 [ 573.031873][T28173] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 573.031905][T28173] __sys_setsockopt+0x184/0x200 [ 573.031941][T28173] __x64_sys_setsockopt+0x64/0x80 [ 573.031978][T28173] x64_sys_call+0x21d5/0x3000 [ 573.032137][T28173] do_syscall_64+0xc0/0x2a0 [ 573.032162][T28173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.032191][T28173] RIP: 0033:0x7f4c6df8acb9 [ 573.032212][T28173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.032306][T28173] RSP: 002b:00007f4c6c9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 573.032368][T28173] RAX: ffffffffffffffda RBX: 00007f4c6e205fa0 RCX: 00007f4c6df8acb9 [ 573.032398][T28173] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 573.032414][T28173] RBP: 00007f4c6c9e7090 R08: 0000000000001400 R09: 0000000000000000 [ 573.032497][T28173] R10: 0000200000000bc0 R11: 0000000000000246 R12: 0000000000000001 [ 573.032515][T28173] R13: 00007f4c6e206038 R14: 00007f4c6e205fa0 R15: 00007fff4ee247c8 [ 573.032541][T28173] [ 573.339692][T28180] set_capacity_and_notify: 6 callbacks suppressed [ 573.339789][T28180] loop7: detected capacity change from 0 to 512 [ 573.380438][T28180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.416266][T28179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.428463][T28180] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.447216][T28179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.479452][T28177] __nla_validate_parse: 2 callbacks suppressed [ 573.479471][T28177] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7675'. [ 573.498496][T28191] netlink: 'syz.3.7680': attribute type 1 has an invalid length. [ 573.520063][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 573.520081][ T29] audit: type=1400 audit(2000000697.046:20868): avc: denied { connect } for pid=28188 comm="syz.9.7678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 573.548786][T25879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.557872][T28191] 8021q: adding VLAN 0 to HW filter on device bond5 [ 573.561399][T28194] syz_tun: entered allmulticast mode [ 573.572440][ T29] audit: type=1400 audit(2000000697.067:20869): avc: denied { write } for pid=28188 comm="syz.9.7678" path="socket:[93320]" dev="sockfs" ino=93320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 573.598781][T28193] syz_tun: left allmulticast mode [ 573.619945][ T29] audit: type=1400 audit(2000000697.141:20870): avc: denied { getopt } for pid=28188 comm="syz.9.7678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 573.641742][ T29] audit: type=1400 audit(2000000697.141:20871): avc: denied { read } for pid=28188 comm="syz.9.7678" path="socket:[93308]" dev="sockfs" ino=93308 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 573.666387][T28198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7680'. [ 573.681000][T28199] loop9: detected capacity change from 0 to 1024 [ 573.687581][ T29] audit: type=1400 audit(2000000697.204:20872): avc: denied { mount } for pid=28188 comm="syz.9.7678" name="/" dev="autofs" ino=94258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 573.734629][T28199] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 573.756635][T28199] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.779857][T28205] loop8: detected capacity change from 0 to 128 [ 573.823270][T28209] loop6: detected capacity change from 0 to 128 [ 573.837722][T28205] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 573.838339][ T29] audit: type=1400 audit(2000000697.372:20873): avc: denied { write } for pid=28210 comm="syz.7.7684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 573.850732][T28205] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 573.870582][T28212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.881461][ T29] audit: type=1400 audit(2000000697.414:20874): avc: denied { ioctl } for pid=28210 comm="syz.7.7684" path="socket:[94287]" dev="sockfs" ino=94287 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 573.901929][T28212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.936597][T24533] Bluetooth: hci0: Frame reassembly failed (-84) [ 573.943174][ T29] audit: type=1400 audit(2000000697.487:20875): avc: denied { ioctl } for pid=28213 comm="syz.3.7685" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 573.954222][T28209] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 573.981662][T28209] ext4 filesystem being mounted at /261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 574.006212][T28214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7685'. [ 574.044012][ T29] audit: type=1400 audit(2000000697.582:20876): avc: denied { read } for pid=28208 comm="syz.6.7686" path="/261/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 574.094727][ T29] audit: type=1400 audit(2000000697.592:20877): avc: denied { remove_name } for pid=28208 comm="syz.6.7686" name="file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 574.133565][T23413] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 574.162029][T24559] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm kworker/u8:44: lblock 3 mapped to illegal pblock 3 (length 1) [ 574.191679][T24559] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 574.204140][T24559] EXT4-fs (loop9): This should not happen!! Data will be lost [ 574.204140][T24559] [ 574.224028][T22036] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 574.237763][T28227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7691'. [ 574.250332][T28227] vhci_hcd vhci_hcd.0: invalid port number 9 [ 574.256452][T28227] vhci_hcd vhci_hcd.0: invalid port number 9 [ 574.270387][T28227] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7691'. [ 574.279759][T28227] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7691'. [ 574.308436][T28232] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.361575][T28232] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.376959][T28234] ipip0: entered promiscuous mode [ 574.413677][T28228] loop3: detected capacity change from 0 to 512 [ 574.422234][T27723] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 574.433509][T28232] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.470187][T28228] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 574.482180][T28228] EXT4-fs (loop3): mount failed [ 574.522254][T28232] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.540501][T28238] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7693'. [ 574.574473][T28238] vlan2: entered promiscuous mode [ 574.628029][T24559] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.642172][T24559] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.654208][T24559] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.668029][T24559] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.782710][T28255] loop6: detected capacity change from 0 to 1024 [ 574.793725][T28255] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 574.843410][T28255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.920201][T28271] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.7699: missing EA_INODE flag [ 574.932768][T28271] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.7699: error while reading EA inode 11 err=-117 [ 574.945825][T28271] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 574.960599][T28272] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7705'. [ 574.971189][T28265] loop3: detected capacity change from 0 to 512 [ 574.999401][T28265] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 575.013379][T28265] EXT4-fs (loop3): mount failed [ 575.041696][T23413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.131221][T28276] loop6: detected capacity change from 0 to 512 [ 575.139195][T28278] loop3: detected capacity change from 0 to 512 [ 575.202968][T28276] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 575.212025][T28276] EXT4-fs (loop6): mount failed [ 575.392745][T28287] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 575.810444][T28291] 9pnet_fd: p9_fd_create_unix (28291): problem connecting socket: ./file0: -111 [ 575.843877][T14706] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 575.858066][T28295] x_tables: duplicate underflow at hook 1 [ 575.874560][T28293] loop6: detected capacity change from 0 to 8192 [ 575.885125][T28293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7711'. [ 576.053318][T28306] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7717'. [ 576.108651][T28310] vlan2: entered promiscuous mode [ 576.141595][T28312] syz_tun: entered allmulticast mode [ 576.150681][T28311] syz_tun: left allmulticast mode [ 576.167216][T28314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28314 comm=syz.8.7721 [ 576.184380][T28314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28314 comm=syz.8.7721 [ 576.197748][T28314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=28314 comm=syz.8.7721 [ 576.239233][T28314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=28314 comm=syz.8.7721 [ 576.259250][T28320] sctp: [Deprecated]: syz.3.7723 (pid 28320) Use of int in maxseg socket option. [ 576.259250][T28320] Use struct sctp_assoc_value instead [ 576.277348][T28320] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 576.303087][T28322] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 576.335264][T28324] iso9660: Invalid uid '0x00000000ffffffff' [ 576.379301][T28322] EXT4-fs (loop6): orphan cleanup on readonly fs [ 576.393412][T28322] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7724: bg 0: block 248: padding at end of block bitmap is not set [ 576.420891][T28322] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.7724: Failed to acquire dquot type 1 [ 576.478346][T28322] EXT4-fs (loop6): 1 truncate cleaned up [ 576.499034][T28322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 576.571195][T23413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.580671][T17012] loop8: p1 < > p3 [ 576.595904][T28338] FAULT_INJECTION: forcing a failure. [ 576.595904][T28338] name fail_futex, interval 1, probability 0, space 0, times 1 [ 576.614367][T28338] CPU: 0 UID: 0 PID: 28338 Comm: syz.3.7731 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 576.614400][T28338] Tainted: [W]=WARN [ 576.614407][T28338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.614423][T28338] Call Trace: [ 576.614432][T28338] [ 576.614442][T28338] __dump_stack+0x1d/0x30 [ 576.614550][T28338] dump_stack_lvl+0x95/0xd0 [ 576.614629][T28338] dump_stack+0x15/0x1b [ 576.614655][T28338] should_fail_ex+0x263/0x280 [ 576.614686][T28338] should_fail+0xb/0x20 [ 576.614706][T28338] get_futex_key+0x12f/0xbe0 [ 576.614810][T28338] ? __rcu_read_unlock+0x4e/0x70 [ 576.614841][T28338] futex_wait_multiple_setup+0xca/0x4f0 [ 576.614887][T28338] ? __rcu_read_unlock+0x4e/0x70 [ 576.614912][T28338] ? should_fail_ex+0xd9/0x280 [ 576.614971][T28338] futex_wait_multiple+0xb2/0x2c0 [ 576.615013][T28338] __se_sys_futex_waitv+0x169/0x1c0 [ 576.615127][T28338] __x64_sys_futex_waitv+0x67/0x80 [ 576.615222][T28338] x64_sys_call+0x204/0x3000 [ 576.615246][T28338] do_syscall_64+0xc0/0x2a0 [ 576.615274][T28338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.615300][T28338] RIP: 0033:0x7f6379afacb9 [ 576.615395][T28338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.615419][T28338] RSP: 002b:00007f6378557028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 576.615443][T28338] RAX: ffffffffffffffda RBX: 00007f6379d75fa0 RCX: 00007f6379afacb9 [ 576.615461][T28338] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001b00 [ 576.615478][T28338] RBP: 00007f6378557090 R08: 0000000000000001 R09: 0000000000000000 [ 576.615495][T28338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.615510][T28338] R13: 00007f6379d76038 R14: 00007f6379d75fa0 R15: 00007ffc1ca52a08 [ 576.615580][T28338] [ 576.800845][T17012] loop8: p3 start 458752 is beyond EOD, truncated [ 576.815230][T28335] loop8: p1 < > p3 [ 576.828728][T28335] loop8: p3 start 458752 is beyond EOD, truncated [ 576.844454][ T3008] loop8: p1 < > p3 [ 576.848812][ T3008] loop8: p3 start 458752 is beyond EOD, truncated [ 576.874394][T28343] 9p: Bad value for 'rfdno' [ 576.922421][T17012] udevd[17012]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 576.952228][T17012] udevd[17012]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 577.031785][T28347] vlan2: entered promiscuous mode [ 577.169644][T28360] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 577.179232][T28360] EXT4-fs (loop3): orphan cleanup on readonly fs [ 577.186440][T28360] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7740: bg 0: block 248: padding at end of block bitmap is not set [ 577.201508][T28360] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7740: Failed to acquire dquot type 1 [ 577.213866][T28360] EXT4-fs (loop3): 1 truncate cleaned up [ 577.221513][T28360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 577.292915][T24702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.330097][T28366] FAULT_INJECTION: forcing a failure. [ 577.330097][T28366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.343324][T28366] CPU: 0 UID: 0 PID: 28366 Comm: syz.7.7744 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 577.343365][T28366] Tainted: [W]=WARN [ 577.343374][T28366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.343449][T28366] Call Trace: [ 577.343457][T28366] [ 577.343466][T28366] __dump_stack+0x1d/0x30 [ 577.343501][T28366] dump_stack_lvl+0x95/0xd0 [ 577.343530][T28366] dump_stack+0x15/0x1b [ 577.343600][T28366] should_fail_ex+0x263/0x280 [ 577.343662][T28366] should_fail+0xb/0x20 [ 577.343683][T28366] should_fail_usercopy+0x1a/0x20 [ 577.343769][T28366] _copy_from_user+0x1c/0xb0 [ 577.343866][T28366] ___sys_sendmsg+0xc1/0x1e0 [ 577.343944][T28366] __x64_sys_sendmsg+0xd4/0x160 [ 577.344021][T28366] x64_sys_call+0x17ba/0x3000 [ 577.344051][T28366] do_syscall_64+0xc0/0x2a0 [ 577.344079][T28366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.344116][T28366] RIP: 0033:0x7fb7caacacb9 [ 577.344131][T28366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.344153][T28366] RSP: 002b:00007fb7c9527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.344209][T28366] RAX: ffffffffffffffda RBX: 00007fb7cad45fa0 RCX: 00007fb7caacacb9 [ 577.344228][T28366] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 577.344245][T28366] RBP: 00007fb7c9527090 R08: 0000000000000000 R09: 0000000000000000 [ 577.344262][T28366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.344277][T28366] R13: 00007fb7cad46038 R14: 00007fb7cad45fa0 R15: 00007fff85b9fbf8 [ 577.344299][T28366] [ 577.545548][T28355] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 577.558963][T28355] EXT4-fs (loop6): mount failed [ 577.608067][T28377] FAULT_INJECTION: forcing a failure. [ 577.608067][T28377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.621364][T28377] CPU: 0 UID: 0 PID: 28377 Comm: syz.3.7748 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 577.621448][T28377] Tainted: [W]=WARN [ 577.621455][T28377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.621471][T28377] Call Trace: [ 577.621481][T28377] [ 577.621492][T28377] __dump_stack+0x1d/0x30 [ 577.621524][T28377] dump_stack_lvl+0x95/0xd0 [ 577.621592][T28377] dump_stack+0x15/0x1b [ 577.621617][T28377] should_fail_ex+0x263/0x280 [ 577.621649][T28377] should_fail+0xb/0x20 [ 577.621675][T28377] should_fail_usercopy+0x1a/0x20 [ 577.621737][T28377] _copy_from_user+0x1c/0xb0 [ 577.621792][T28377] ____sys_sendmsg+0x1c5/0x4a0 [ 577.621834][T28377] ___sys_sendmsg+0x195/0x1e0 [ 577.621892][T28377] __sys_sendmmsg+0x185/0x320 [ 577.622013][T28377] __x64_sys_sendmmsg+0x57/0x70 [ 577.622066][T28377] x64_sys_call+0x1e28/0x3000 [ 577.622100][T28377] do_syscall_64+0xc0/0x2a0 [ 577.622129][T28377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.622213][T28377] RIP: 0033:0x7f6379afacb9 [ 577.622230][T28377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.622248][T28377] RSP: 002b:00007f6378557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 577.622286][T28377] RAX: ffffffffffffffda RBX: 00007f6379d75fa0 RCX: 00007f6379afacb9 [ 577.622303][T28377] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 577.622316][T28377] RBP: 00007f6378557090 R08: 0000000000000000 R09: 0000000000000000 [ 577.622336][T28377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.622348][T28377] R13: 00007f6379d76038 R14: 00007f6379d75fa0 R15: 00007ffc1ca52a08 [ 577.622370][T28377] [ 577.836450][T28386] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 577.872258][T28386] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 577.931388][T28382] vlan2: entered promiscuous mode [ 577.936598][T28382] bond0: entered promiscuous mode [ 577.941748][T28382] bond_slave_0: entered promiscuous mode [ 577.947614][T28382] bond_slave_1: entered promiscuous mode [ 577.998818][T24702] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 578.134156][T28389] SELinux: failed to load policy [ 578.175509][T28395] set_capacity_and_notify: 6 callbacks suppressed [ 578.175523][T28395] loop3: detected capacity change from 0 to 512 [ 578.191757][T28397] tipc: Enabling of bearer rejected, already enabled [ 578.199726][T28400] syz_tun: entered allmulticast mode [ 578.206897][T28399] syz_tun: left allmulticast mode [ 578.226782][T28395] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.248785][T28403] loop8: detected capacity change from 0 to 512 [ 578.255571][T28395] EXT4-fs (loop3): orphan cleanup on readonly fs [ 578.262700][T28395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7752: bg 0: block 248: padding at end of block bitmap is not set [ 578.278484][T28395] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7752: Failed to acquire dquot type 1 [ 578.292031][T28403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.292137][T28405] bridge_slave_0: entered promiscuous mode [ 578.311145][T28395] EXT4-fs (loop3): 1 truncate cleaned up [ 578.317617][T28395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.332048][T28395] __nla_validate_parse: 8 callbacks suppressed [ 578.332064][T28395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7752'. [ 578.348854][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 578.348871][ T29] audit: type=1400 audit(2000000958.099:20890): avc: denied { create } for pid=28402 comm="syz.8.7756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 578.376761][T28403] netlink: 'syz.8.7756': attribute type 4 has an invalid length. [ 578.386184][T24702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.418134][T28403] netlink: 'syz.8.7756': attribute type 4 has an invalid length. [ 578.438338][T28411] netlink: 65051 bytes leftover after parsing attributes in process `syz.6.7760'. [ 578.461694][ T29] audit: type=1400 audit(2000000958.141:20891): avc: denied { bind } for pid=28402 comm="syz.8.7756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 578.481233][ T29] audit: type=1400 audit(2000000958.141:20892): avc: denied { ioctl } for pid=28402 comm="syz.8.7756" path="socket:[93748]" dev="sockfs" ino=93748 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 578.522775][T27723] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.552045][T28422] FAULT_INJECTION: forcing a failure. [ 578.552045][T28422] name failslab, interval 1, probability 0, space 0, times 0 [ 578.564823][T28422] CPU: 0 UID: 0 PID: 28422 Comm: syz.6.7763 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 578.564921][T28422] Tainted: [W]=WARN [ 578.564928][T28422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 578.564941][T28422] Call Trace: [ 578.564950][T28422] [ 578.564960][T28422] __dump_stack+0x1d/0x30 [ 578.564991][T28422] dump_stack_lvl+0x95/0xd0 [ 578.565018][T28422] dump_stack+0x15/0x1b [ 578.565064][T28422] should_fail_ex+0x263/0x280 [ 578.565096][T28422] should_failslab+0x8c/0xb0 [ 578.565194][T28422] __kmalloc_cache_noprof+0x64/0x4a0 [ 578.565219][T28422] ? __se_sys_memfd_create+0x1d5/0x6c0 [ 578.565321][T28422] ? mutex_unlock+0x4e/0x90 [ 578.565350][T28422] __se_sys_memfd_create+0x1d5/0x6c0 [ 578.565410][T28422] __x64_sys_memfd_create+0x31/0x40 [ 578.565450][T28422] x64_sys_call+0x28cb/0x3000 [ 578.565475][T28422] do_syscall_64+0xc0/0x2a0 [ 578.565537][T28422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.565575][T28422] RIP: 0033:0x7fe67a17acb9 [ 578.565596][T28422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.565621][T28422] RSP: 002b:00007fe678bd6e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 578.565677][T28422] RAX: ffffffffffffffda RBX: 00000000000005fb RCX: 00007fe67a17acb9 [ 578.565693][T28422] RDX: 00007fe678bd6ee0 RSI: 0000000000000000 RDI: 00007fe67a1e730b [ 578.565706][T28422] RBP: 0000200000001440 R08: 00000000ffffffff R09: 0000000000000000 [ 578.565781][T28422] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000040 [ 578.565796][T28422] R13: 00007fe678bd6ee0 R14: 00007fe678bd6ea0 R15: 0000200000000440 [ 578.565822][T28422] [ 578.566628][T28423] netlink: 'syz.8.7762': attribute type 1 has an invalid length. [ 578.754252][T28424] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.774456][T28423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 578.805571][T28424] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.875575][T28435] tipc: Enabling of bearer rejected, already enabled [ 578.890750][T28438] loop7: detected capacity change from 0 to 512 [ 578.899679][T28438] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 578.911937][T28438] EXT4-fs (loop7): orphan cleanup on readonly fs [ 578.932047][T28438] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7768: bg 0: block 248: padding at end of block bitmap is not set [ 578.933864][T28424] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.964250][T28438] Quota error (device loop7): write_blk: dquota write failed [ 578.971881][T28438] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 578.981933][T28438] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.7768: Failed to acquire dquot type 1 [ 578.995094][T28438] EXT4-fs (loop7): 1 truncate cleaned up [ 579.003799][T28438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 579.050774][T28424] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.057504][T28438] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7768'. [ 579.124737][T25879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.148068][T28454] loop7: detected capacity change from 0 to 1024 [ 579.171164][T28454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.172151][T28445] syzkaller0: entered promiscuous mode [ 579.188964][T28445] syzkaller0: entered allmulticast mode [ 579.201218][ T29] audit: type=1400 audit(2000000959.002:20893): avc: denied { connect } for pid=28453 comm="syz.7.7775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 579.228604][ T29] audit: type=1400 audit(2000000959.033:20894): avc: denied { unlink } for pid=28453 comm="syz.7.7775" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 579.251235][T25797] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.264834][T28454] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 579.310114][T25879] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.332567][T28452] syzkaller0: entered promiscuous mode [ 579.338186][T28452] syzkaller0: entered allmulticast mode [ 579.360922][T25797] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.415791][T25797] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.435778][T25797] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.463968][ T29] audit: type=1400 audit(2000000959.264:20895): avc: denied { create } for pid=28461 comm="syz.8.7777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 579.508021][T13572] IPVS: starting estimator thread 0... [ 579.515666][T28462] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 579.534889][T28466] loop8: detected capacity change from 0 to 512 [ 579.551858][T28466] EXT4-fs: inline encryption not supported [ 579.557766][T28466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 579.569128][T28468] tipc: Enabling of bearer rejected, already enabled [ 579.576942][T28471] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7780'. [ 579.603501][T28466] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 579.612167][T28466] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.626096][T28467] IPVS: using max 1824 ests per chain, 91200 per kthread [ 579.657026][T28466] Quota error (device loop8): do_insert_tree: Free block already used in tree: block 1 [ 579.668940][T28466] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 579.679368][T28466] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.7777: Failed to acquire dquot type 1 [ 579.693017][T28466] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 46 vs 41 free clusters [ 579.710834][T28466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7777: corrupted inode contents [ 579.723627][T28466] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #12: comm syz.8.7777: mark_inode_dirty error [ 579.737382][T28466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7777: corrupted inode contents [ 579.749798][T28466] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #12: comm syz.8.7777: mark_inode_dirty error [ 579.761485][T28466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7777: corrupted inode contents [ 579.773579][T28466] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 579.782618][T28466] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #12: comm syz.8.7777: corrupted inode contents [ 579.835699][T28466] EXT4-fs error (device loop8): ext4_truncate:4635: inode #12: comm syz.8.7777: mark_inode_dirty error [ 579.864087][T28466] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 579.877436][T28466] EXT4-fs (loop8): 1 truncate cleaned up [ 579.883386][T28489] loop3: detected capacity change from 0 to 128 [ 579.905798][T28466] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.919174][T28489] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 579.941255][T28489] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 579.957791][T28497] loop9: detected capacity change from 0 to 512 [ 579.997352][T28497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 580.024903][T28499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7794'. [ 580.034938][T24702] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 580.048814][T28497] EXT4-fs (loop9): orphan cleanup on readonly fs [ 580.061409][T27723] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.075861][T28499] FAULT_INJECTION: forcing a failure. [ 580.075861][T28499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.089113][T28499] CPU: 1 UID: 0 PID: 28499 Comm: syz.7.7794 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 580.089147][T28499] Tainted: [W]=WARN [ 580.089154][T28499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.089167][T28499] Call Trace: [ 580.089175][T28499] [ 580.089234][T28499] __dump_stack+0x1d/0x30 [ 580.089259][T28499] dump_stack_lvl+0x95/0xd0 [ 580.089282][T28499] dump_stack+0x15/0x1b [ 580.089306][T28499] should_fail_ex+0x263/0x280 [ 580.089333][T28499] should_fail+0xb/0x20 [ 580.089436][T28499] should_fail_usercopy+0x1a/0x20 [ 580.089483][T28499] _copy_from_user+0x1c/0xb0 [ 580.089514][T28499] ___sys_sendmsg+0xc1/0x1e0 [ 580.089605][T28499] __x64_sys_sendmsg+0xd4/0x160 [ 580.089650][T28499] x64_sys_call+0x17ba/0x3000 [ 580.089682][T28499] do_syscall_64+0xc0/0x2a0 [ 580.089709][T28499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.089772][T28499] RIP: 0033:0x7fb7caacacb9 [ 580.089791][T28499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.089851][T28499] RSP: 002b:00007fb7c9527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.089876][T28499] RAX: ffffffffffffffda RBX: 00007fb7cad45fa0 RCX: 00007fb7caacacb9 [ 580.089963][T28499] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 580.089980][T28499] RBP: 00007fb7c9527090 R08: 0000000000000000 R09: 0000000000000000 [ 580.089994][T28499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.090006][T28499] R13: 00007fb7cad46038 R14: 00007fb7cad45fa0 R15: 00007fff85b9fbf8 [ 580.090028][T28499] [ 580.090776][T28497] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7791: bg 0: block 248: padding at end of block bitmap is not set [ 580.271150][T28497] EXT4-fs error (device loop9): ext4_acquire_dquot:6986: comm syz.9.7791: Failed to acquire dquot type 1 [ 580.296140][T28497] EXT4-fs (loop9): 1 truncate cleaned up [ 580.307253][T28512] loop7: detected capacity change from 0 to 128 [ 580.339198][T28497] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7791'. [ 580.448203][T28523] FAULT_INJECTION: forcing a failure. [ 580.448203][T28523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.462543][T28523] CPU: 1 UID: 0 PID: 28523 Comm: syz.9.7801 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 580.462643][T28523] Tainted: [W]=WARN [ 580.462650][T28523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.462663][T28523] Call Trace: [ 580.462671][T28523] [ 580.462681][T28523] __dump_stack+0x1d/0x30 [ 580.462716][T28523] dump_stack_lvl+0x95/0xd0 [ 580.462743][T28523] dump_stack+0x15/0x1b [ 580.462840][T28523] should_fail_ex+0x263/0x280 [ 580.462870][T28523] should_fail+0xb/0x20 [ 580.462897][T28523] should_fail_usercopy+0x1a/0x20 [ 580.462932][T28523] _copy_from_user+0x1c/0xb0 [ 580.462976][T28523] __sys_bpf+0x183/0x7b0 [ 580.463009][T28523] __x64_sys_bpf+0x41/0x50 [ 580.463083][T28523] x64_sys_call+0x28e1/0x3000 [ 580.463118][T28523] do_syscall_64+0xc0/0x2a0 [ 580.463140][T28523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.463177][T28523] RIP: 0033:0x7f5a8edeacb9 [ 580.463195][T28523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.463219][T28523] RSP: 002b:00007f5a8d847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.463239][T28523] RAX: ffffffffffffffda RBX: 00007f5a8f065fa0 RCX: 00007f5a8edeacb9 [ 580.463310][T28523] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 580.463328][T28523] RBP: 00007f5a8d847090 R08: 0000000000000000 R09: 0000000000000000 [ 580.463372][T28523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.463417][T28523] R13: 00007f5a8f066038 R14: 00007f5a8f065fa0 R15: 00007ffcb0806dc8 [ 580.463437][T28523] [ 580.666751][T28529] loop8: detected capacity change from 0 to 128 [ 580.720950][T28529] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 580.825891][T28515] bio_check_eod: 165 callbacks suppressed [ 580.825934][T28515] syz.7.7796: attempt to access beyond end of device [ 580.825934][T28515] loop7: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 580.847963][T28512] syz.7.7796: attempt to access beyond end of device [ 580.847963][T28512] loop7: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 580.861635][T28515] syz.7.7796: attempt to access beyond end of device [ 580.861635][T28515] loop7: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 580.879008][T28512] syz.7.7796: attempt to access beyond end of device [ 580.879008][T28512] loop7: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 580.892824][T28515] syz.7.7796: attempt to access beyond end of device [ 580.892824][T28515] loop7: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 580.919553][T28512] syz.7.7796: attempt to access beyond end of device [ 580.919553][T28512] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 580.946219][T28537] FAULT_INJECTION: forcing a failure. [ 580.946219][T28537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.959491][T28537] CPU: 1 UID: 0 PID: 28537 Comm: syz.9.7806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 580.959613][T28537] Tainted: [W]=WARN [ 580.959622][T28537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.959637][T28537] Call Trace: [ 580.959644][T28537] [ 580.959652][T28537] __dump_stack+0x1d/0x30 [ 580.959723][T28537] dump_stack_lvl+0x95/0xd0 [ 580.959752][T28537] dump_stack+0x15/0x1b [ 580.959786][T28537] should_fail_ex+0x263/0x280 [ 580.959810][T28537] should_fail+0xb/0x20 [ 580.959834][T28537] should_fail_usercopy+0x1a/0x20 [ 580.959866][T28537] _copy_from_user+0x1c/0xb0 [ 580.959968][T28537] ___sys_sendmsg+0xc1/0x1e0 [ 580.960023][T28537] __x64_sys_sendmsg+0xd4/0x160 [ 580.960059][T28537] x64_sys_call+0x17ba/0x3000 [ 580.960092][T28537] do_syscall_64+0xc0/0x2a0 [ 580.960242][T28537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.960271][T28537] RIP: 0033:0x7f5a8edeacb9 [ 580.960292][T28537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.960315][T28537] RSP: 002b:00007f5a8d847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.960337][T28537] RAX: ffffffffffffffda RBX: 00007f5a8f065fa0 RCX: 00007f5a8edeacb9 [ 580.960351][T28537] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 580.960415][T28537] RBP: 00007f5a8d847090 R08: 0000000000000000 R09: 0000000000000000 [ 580.960432][T28537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.960454][T28537] R13: 00007f5a8f066038 R14: 00007f5a8f065fa0 R15: 00007ffcb0806dc8 [ 580.960477][T28537] [ 581.146947][T28515] syz.7.7796: attempt to access beyond end of device [ 581.146947][T28515] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 581.206168][T28515] syz.7.7796: attempt to access beyond end of device [ 581.206168][T28515] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 581.239825][T28541] loop9: detected capacity change from 0 to 1024 [ 581.257843][T28512] syz.7.7796: attempt to access beyond end of device [ 581.257843][T28512] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 581.271651][T28515] syz.7.7796: attempt to access beyond end of device [ 581.271651][T28515] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 581.276917][T28542] netlink: 100 bytes leftover after parsing attributes in process `syz.8.7808'. [ 581.296494][T28545] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 581.316348][T28542] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7808'. [ 581.329174][T28541] FAULT_INJECTION: forcing a failure. [ 581.329174][T28541] name failslab, interval 1, probability 0, space 0, times 0 [ 581.341903][T28541] CPU: 1 UID: 0 PID: 28541 Comm: syz.9.7809 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 581.342022][T28541] Tainted: [W]=WARN [ 581.342033][T28541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.342049][T28541] Call Trace: [ 581.342058][T28541] [ 581.342069][T28541] __dump_stack+0x1d/0x30 [ 581.342100][T28541] dump_stack_lvl+0x95/0xd0 [ 581.342145][T28541] dump_stack+0x15/0x1b [ 581.342165][T28541] should_fail_ex+0x263/0x280 [ 581.342189][T28541] should_failslab+0x8c/0xb0 [ 581.342210][T28541] __kmalloc_noprof+0xb8/0x580 [ 581.342237][T28541] ? ext4_mb_init_cache+0x179/0xbf0 [ 581.342306][T28541] ext4_mb_init_cache+0x179/0xbf0 [ 581.342365][T28541] ? __filemap_get_folio_mpol+0x468/0x680 [ 581.342401][T28541] ext4_mb_init_group+0x3d6/0x580 [ 581.342511][T28541] ext4_trim_fs+0x8ae/0xaa0 [ 581.342622][T28541] ? should_fail_ex+0xd9/0x280 [ 581.342728][T28541] ext4_ioctl+0x1b21/0x3170 [ 581.342767][T28541] ? ioctl_has_perm+0x27e/0x2d0 [ 581.342812][T28541] ? do_vfs_ioctl+0x84f/0xe70 [ 581.342854][T28541] ? selinux_file_ioctl+0x323/0x3b0 [ 581.342976][T28541] ? __fget_files+0x184/0x1c0 [ 581.343004][T28541] ? mutex_lock+0x57/0x90 [ 581.343133][T28541] ? __pfx_ext4_ioctl+0x10/0x10 [ 581.343199][T28541] __se_sys_ioctl+0xce/0x140 [ 581.343238][T28541] __x64_sys_ioctl+0x43/0x50 [ 581.343276][T28541] x64_sys_call+0x14b0/0x3000 [ 581.343354][T28541] do_syscall_64+0xc0/0x2a0 [ 581.343380][T28541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.343408][T28541] RIP: 0033:0x7f5a8edeacb9 [ 581.343429][T28541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.343452][T28541] RSP: 002b:00007f5a8d847028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.343476][T28541] RAX: ffffffffffffffda RBX: 00007f5a8f065fa0 RCX: 00007f5a8edeacb9 [ 581.343542][T28541] RDX: 0000200000000040 RSI: 00000000c0185879 RDI: 0000000000000004 [ 581.343556][T28541] RBP: 00007f5a8d847090 R08: 0000000000000000 R09: 0000000000000000 [ 581.343634][T28541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.343651][T28541] R13: 00007f5a8f066038 R14: 00007f5a8f065fa0 R15: 00007ffcb0806dc8 [ 581.343676][T28541] [ 581.803111][T28576] syz_tun: entered allmulticast mode [ 582.083722][T28579] syz_tun: left allmulticast mode [ 582.143395][T28581] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 582.152525][T28581] EXT4-fs (loop8): mount failed [ 582.423453][T28623] syz_tun: entered allmulticast mode [ 582.440631][T28618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4112 sclass=netlink_route_socket pid=28618 comm=syz.6.7838 [ 582.465897][T28622] syz_tun: left allmulticast mode [ 582.624207][T28643] EXT4-fs: dax option not supported [ 582.764429][T28654] FAULT_INJECTION: forcing a failure. [ 582.764429][T28654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.780199][T28654] CPU: 1 UID: 0 PID: 28654 Comm: syz.7.7851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 582.780311][T28654] Tainted: [W]=WARN [ 582.780318][T28654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 582.780330][T28654] Call Trace: [ 582.780338][T28654] [ 582.780348][T28654] __dump_stack+0x1d/0x30 [ 582.780377][T28654] dump_stack_lvl+0x95/0xd0 [ 582.780403][T28654] dump_stack+0x15/0x1b [ 582.780447][T28654] should_fail_ex+0x263/0x280 [ 582.780478][T28654] should_fail+0xb/0x20 [ 582.780504][T28654] should_fail_usercopy+0x1a/0x20 [ 582.780616][T28654] _copy_from_user+0x1c/0xb0 [ 582.780645][T28654] __sys_bpf+0x183/0x7b0 [ 582.780723][T28654] __x64_sys_bpf+0x41/0x50 [ 582.780759][T28654] x64_sys_call+0x28e1/0x3000 [ 582.780783][T28654] do_syscall_64+0xc0/0x2a0 [ 582.780847][T28654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.780870][T28654] RIP: 0033:0x7fb7caacacb9 [ 582.780886][T28654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.780949][T28654] RSP: 002b:00007fb7c9527028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.780969][T28654] RAX: ffffffffffffffda RBX: 00007fb7cad45fa0 RCX: 00007fb7caacacb9 [ 582.780983][T28654] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 582.781014][T28654] RBP: 00007fb7c9527090 R08: 0000000000000000 R09: 0000000000000000 [ 582.781111][T28654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.781126][T28654] R13: 00007fb7cad46038 R14: 00007fb7cad45fa0 R15: 00007fff85b9fbf8 [ 582.781148][T28654] [ 582.955104][T28649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7847'. [ 583.037760][T28649] vlan2: entered promiscuous mode [ 583.044559][T28649] team0: entered promiscuous mode [ 583.050840][T28656] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7852'. [ 583.061334][T28649] team_slave_0: entered promiscuous mode [ 583.068729][T28649] team_slave_1: entered promiscuous mode [ 583.160465][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7852'. [ 583.194215][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 583.194235][ T29] audit: type=1326 audit(2000000963.191:20928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.227082][ T29] audit: type=1326 audit(2000000963.191:20929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.298780][ T29] audit: type=1326 audit(2000000963.306:20930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.328888][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7858'. [ 583.339421][ T29] audit: type=1326 audit(2000000963.338:20931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.362616][ T29] audit: type=1326 audit(2000000963.338:20932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.387635][ T29] audit: type=1326 audit(2000000963.380:20933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.411105][ T29] audit: type=1326 audit(2000000963.380:20934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.434233][ T29] audit: type=1326 audit(2000000963.380:20935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.457548][ T29] audit: type=1326 audit(2000000963.380:20936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.480671][ T29] audit: type=1326 audit(2000000963.380:20937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28642 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 583.504740][T28676] team0: Port device team_slave_1 removed [ 583.519877][T28677] team_slave_0: left promiscuous mode [ 583.532902][T28677] team0 (unregistering): Port device team_slave_0 removed [ 583.540300][T28677] team_slave_1: left promiscuous mode [ 583.562949][T28677] team0 (unregistering): Port device team_slave_1 removed [ 583.578286][T28680] syz_tun: entered allmulticast mode [ 583.628548][T28685] netlink: 'syz.8.7863': attribute type 1 has an invalid length. [ 583.683930][T28683] syzkaller0: entered promiscuous mode [ 583.689568][T28683] syzkaller0: entered allmulticast mode [ 583.706396][T28693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.747144][T28685] veth3: entered promiscuous mode [ 583.759622][T28685] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 583.769196][T28681] syz_tun: left allmulticast mode [ 583.777471][T28700] FAULT_INJECTION: forcing a failure. [ 583.777471][T28700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.790683][T28700] CPU: 1 UID: 0 PID: 28700 Comm: syz.9.7867 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 583.790718][T28700] Tainted: [W]=WARN [ 583.790726][T28700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.790740][T28700] Call Trace: [ 583.790746][T28700] [ 583.790781][T28700] __dump_stack+0x1d/0x30 [ 583.790873][T28700] dump_stack_lvl+0x95/0xd0 [ 583.790900][T28700] dump_stack+0x15/0x1b [ 583.790921][T28700] should_fail_ex+0x263/0x280 [ 583.790948][T28700] should_fail+0xb/0x20 [ 583.791085][T28700] should_fail_usercopy+0x1a/0x20 [ 583.791116][T28700] _copy_from_user+0x1c/0xb0 [ 583.791149][T28700] ___sys_sendmsg+0xc1/0x1e0 [ 583.791195][T28700] __x64_sys_sendmsg+0xd4/0x160 [ 583.791297][T28700] x64_sys_call+0x17ba/0x3000 [ 583.791404][T28700] do_syscall_64+0xc0/0x2a0 [ 583.791447][T28700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.791469][T28700] RIP: 0033:0x7f5a8edeacb9 [ 583.791487][T28700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.791508][T28700] RSP: 002b:00007f5a8d847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.791532][T28700] RAX: ffffffffffffffda RBX: 00007f5a8f065fa0 RCX: 00007f5a8edeacb9 [ 583.791558][T28700] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000004 [ 583.791571][T28700] RBP: 00007f5a8d847090 R08: 0000000000000000 R09: 0000000000000000 [ 583.791583][T28700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.791596][T28700] R13: 00007f5a8f066038 R14: 00007f5a8f065fa0 R15: 00007ffcb0806dc8 [ 583.791648][T28700] [ 583.961753][T28697] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7866'. [ 583.971826][T28697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11369 sclass=netlink_route_socket pid=28697 comm=syz.6.7866 [ 584.073321][T28705] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7871'. [ 584.097049][T28711] set_capacity_and_notify: 3 callbacks suppressed [ 584.097071][T28711] loop3: detected capacity change from 0 to 512 [ 584.133097][T28711] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 584.147672][T28711] EXT4-fs (loop3): orphan cleanup on readonly fs [ 584.154917][T28711] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7872: bg 0: block 248: padding at end of block bitmap is not set [ 584.170730][T28711] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.7872: Failed to acquire dquot type 1 [ 584.182954][T28711] EXT4-fs (loop3): 1 truncate cleaned up [ 584.186337][T28708] syzkaller0: entered promiscuous mode [ 584.194198][T28708] syzkaller0: entered allmulticast mode [ 584.334796][T28705] vlan2: entered promiscuous mode [ 584.340075][T28705] team0: entered promiscuous mode [ 584.345759][T28705] team_slave_0: entered promiscuous mode [ 584.390100][T28724] syz_tun: entered allmulticast mode [ 584.409722][T28715] syz_tun: left allmulticast mode [ 584.490000][T28742] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7878'. [ 584.610706][T28755] tipc: Enabling of bearer rejected, already enabled [ 584.666499][T28765] smc: net device bond0 applied user defined pnetid SYZ0 [ 584.673959][T28765] smc: net device bond0 erased user defined pnetid SYZ0 [ 584.773331][T28769] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7891'. [ 584.797366][T28782] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7896'. [ 584.834773][T28788] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7899'. [ 584.878740][T28769] vlan2: entered promiscuous mode [ 584.894978][T28794] netlink: 'syz.6.7901': attribute type 1 has an invalid length. [ 584.952227][T28794] 8021q: adding VLAN 0 to HW filter on device bond7 [ 584.975092][T28786] pimreg: entered allmulticast mode [ 585.004280][T28794] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.036511][T28799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.045281][T28799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.047872][T28794] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.104968][T28794] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.142751][T28812] FAULT_INJECTION: forcing a failure. [ 585.142751][T28812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.155922][T28812] CPU: 0 UID: 0 PID: 28812 Comm: syz.8.7907 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 585.156071][T28812] Tainted: [W]=WARN [ 585.156078][T28812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.156093][T28812] Call Trace: [ 585.156102][T28812] [ 585.156168][T28812] __dump_stack+0x1d/0x30 [ 585.156199][T28812] dump_stack_lvl+0x95/0xd0 [ 585.156222][T28812] dump_stack+0x15/0x1b [ 585.156272][T28812] should_fail_ex+0x263/0x280 [ 585.156299][T28812] should_fail+0xb/0x20 [ 585.156325][T28812] should_fail_usercopy+0x1a/0x20 [ 585.156357][T28812] _copy_from_user+0x1c/0xb0 [ 585.156398][T28812] ___sys_sendmsg+0xc1/0x1e0 [ 585.156472][T28812] __sys_sendmmsg+0x185/0x320 [ 585.156526][T28812] __x64_sys_sendmmsg+0x57/0x70 [ 585.156655][T28812] x64_sys_call+0x1e28/0x3000 [ 585.156685][T28812] do_syscall_64+0xc0/0x2a0 [ 585.156714][T28812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.156741][T28812] RIP: 0033:0x7f4c6df8acb9 [ 585.156784][T28812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.156803][T28812] RSP: 002b:00007f4c6c9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 585.156828][T28812] RAX: ffffffffffffffda RBX: 00007f4c6e205fa0 RCX: 00007f4c6df8acb9 [ 585.156844][T28812] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 585.156891][T28812] RBP: 00007f4c6c9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 585.156903][T28812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.156915][T28812] R13: 00007f4c6e206038 R14: 00007f4c6e205fa0 R15: 00007fff4ee247c8 [ 585.156941][T28812] [ 585.163757][T28794] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.228336][T28814] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7908'. [ 585.264107][T28816] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 585.360548][T28816] SELinux: failed to load policy [ 585.367498][T28817] SELinux: policydb magic number 0x3f962ed6 does not match expected magic number 0xf97cff8c [ 585.383022][T28817] SELinux: failed to load policy [ 585.396676][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.409478][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.430647][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.440633][T28822] netlink: 104 bytes leftover after parsing attributes in process `syz.9.7910'. [ 585.473865][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.559521][T28832] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(11) [ 585.566288][T28832] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.574002][T28832] vhci_hcd vhci_hcd.0: Device attached [ 585.581434][T28832] loop6: detected capacity change from 0 to 164 [ 585.591536][T28834] tipc: Enabling of bearer rejected, already enabled [ 585.607929][T28835] vhci_hcd: connection closed [ 585.608198][ T31] vhci_hcd vhci_hcd.6: stop threads [ 585.618243][ T31] vhci_hcd vhci_hcd.6: release socket [ 585.623709][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 585.699822][T28847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28847 comm=syz.9.7921 [ 585.801712][T28864] smc: net device bond0 applied user defined pnetid SYZ0 [ 585.809144][T28864] smc: net device bond0 erased user defined pnetid SYZ0 [ 585.844327][T28841] loop8: detected capacity change from 0 to 1024 [ 585.856915][T28841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 585.870512][T28841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 585.889380][T28841] bridge0: entered promiscuous mode [ 585.930638][T28869] tipc: Enabling of bearer rejected, already enabled [ 586.224404][T28907] loop6: detected capacity change from 0 to 128 [ 586.243346][T17012] udevd[17012]: incorrect ext4 checksum on /dev/loop6 [ 586.258001][T28905] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 586.273437][T28908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11369 sclass=netlink_route_socket pid=28908 comm=syz.7.7942 [ 586.307623][T28892] loop3: detected capacity change from 0 to 512 [ 586.436979][T28892] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 586.444618][T28892] EXT4-fs (loop3): mount failed [ 586.457410][T28911] syzkaller0: entered promiscuous mode [ 586.463102][T28911] syzkaller0: entered allmulticast mode [ 586.488922][T28916] tipc: Enabling of bearer rejected, already enabled [ 586.802383][T28944] loop7: detected capacity change from 0 to 4096 [ 586.858864][T28932] loop3: detected capacity change from 0 to 512 [ 586.925661][T28932] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 586.934505][T28932] EXT4-fs (loop3): mount failed [ 586.973068][T28959] loop7: detected capacity change from 0 to 512 [ 587.001087][T28959] EXT4-fs (loop7): corrupt root inode, run e2fsck [ 587.007716][T28959] EXT4-fs (loop7): mount failed [ 587.284822][T28979] loop3: detected capacity change from 0 to 164 [ 587.293043][T28979] isofs_fill_super: root inode is not a directory. Corrupted media? [ 587.346912][T28983] loop8: detected capacity change from 0 to 512 [ 587.492361][T28989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=28989 comm=syz.8.7978 [ 587.706651][T29006] tipc: Enabled bearer , priority 0 [ 587.750570][T29014] syz_tun: entered allmulticast mode [ 587.924093][T29015] syz_tun: left allmulticast mode [ 587.972617][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 587.972634][ T29] audit: type=1400 audit(2000000968.209:21095): avc: denied { create } for pid=29025 comm="syz.8.7993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 588.030113][T29027] tipc: Enabling of bearer rejected, already enabled [ 588.068587][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.077389][T29034] FAT-fs (loop8): Filesystem has been set read-only [ 588.084373][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.093174][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.102625][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.111462][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.120488][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.129296][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.138107][T29033] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.147620][T29033] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.156434][T29034] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 588.188220][T29037] __nla_validate_parse: 3 callbacks suppressed [ 588.188235][T29037] netlink: 19 bytes leftover after parsing attributes in process `syz.7.7998'. [ 588.231321][ T29] audit: type=1400 audit(2000000968.482:21096): avc: denied { read } for pid=29038 comm="syz.9.7999" dev="sockfs" ino=96987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 588.232732][T29039] 9p: Bad value for 'rfdno' [ 588.364256][T29047] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8002'. [ 588.373796][T29047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8002'. [ 588.382830][T29047] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8002'. [ 588.392582][T17012] Alternate GPT is invalid, using primary GPT. [ 588.399095][T17012] loop9: p2 p3 p7 [ 588.438081][T29049] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 588.449780][T29049] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 588.459953][T29049] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.8003: Corrupt directory, running e2fsck is recommended [ 588.476502][T29043] Alternate GPT is invalid, using primary GPT. [ 588.483097][T29043] loop9: p2 p3 p7 [ 588.498476][T29049] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 588.513681][T29049] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.8003: corrupted in-inode xattr: e_name out of bounds [ 588.557506][T29049] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8003: couldn't read orphan inode 15 (err -117) [ 588.587541][T29053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29053 comm=syz.9.8004 [ 588.602056][T17011] udevd[17011]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 588.612106][T20431] udevd[20431]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 588.623577][T17012] udevd[17012]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 588.638430][T29049] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 588.650239][T29049] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 588.652176][T17012] udevd[17012]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 588.660367][T29049] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.8003: Corrupt directory, running e2fsck is recommended [ 588.663843][T20431] udevd[20431]: inotify_add_watch(7, /dev/loop9p7, 10) failed: No such file or directory [ 588.675668][T17011] udevd[17011]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 588.692137][T29049] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.8003: path /282/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 588.727674][T29049] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 8: comm syz.3.8003: path /282/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 588.943207][ T29] audit: type=1326 audit(2000000969.237:21097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 588.985125][ T29] audit: type=1326 audit(2000000969.237:21099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.008814][ T29] audit: type=1326 audit(2000000969.237:21100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.032440][ T29] audit: type=1326 audit(2000000969.237:21101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.056189][ T29] audit: type=1326 audit(2000000969.237:21098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.080045][ T29] audit: type=1326 audit(2000000969.237:21102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.103626][ T29] audit: type=1326 audit(2000000969.269:21103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.123264][T29056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8005'. [ 589.127389][ T29] audit: type=1326 audit(2000000969.269:21104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29057 comm="syz.8.8006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6df8acb9 code=0x7ffc0000 [ 589.191387][T29066] tipc: Enabling of bearer rejected, already enabled [ 589.200416][T29056] 8021q: VLANs not supported on vcan0 [ 589.213266][T29058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.249558][T29069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8009'. [ 589.273299][T29058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.322101][T29076] set_capacity_and_notify: 3 callbacks suppressed [ 589.322194][T29076] loop8: detected capacity change from 0 to 1024 [ 589.358841][T29076] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 589.403729][T29080] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.459026][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8020'. [ 589.476607][T29096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.490974][T29096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.517926][T29092] delete_channel: no stack [ 589.538348][T29080] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.601374][T29080] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.648585][T29080] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.682401][T29116] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8026'. [ 589.737246][T24572] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.801038][T24534] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.822116][T24534] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.854637][T24581] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.863149][T29107] loop9: detected capacity change from 0 to 512 [ 589.938049][T29130] FAULT_INJECTION: forcing a failure. [ 589.938049][T29130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.951439][T29130] CPU: 1 UID: 0 PID: 29130 Comm: syz.8.8030 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 589.951505][T29130] Tainted: [W]=WARN [ 589.951514][T29130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.951530][T29130] Call Trace: [ 589.951537][T29130] [ 589.951552][T29130] __dump_stack+0x1d/0x30 [ 589.951577][T29130] dump_stack_lvl+0x95/0xd0 [ 589.951599][T29130] dump_stack+0x15/0x1b [ 589.951691][T29130] should_fail_ex+0x263/0x280 [ 589.951717][T29130] should_fail+0xb/0x20 [ 589.951736][T29130] should_fail_usercopy+0x1a/0x20 [ 589.951819][T29130] _copy_to_user+0x20/0xa0 [ 589.951847][T29130] simple_read_from_buffer+0xb5/0x130 [ 589.951891][T29130] proc_fail_nth_read+0x10e/0x150 [ 589.951945][T29130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.951978][T29130] vfs_read+0x1ab/0x7f0 [ 589.952010][T29130] ? __rcu_read_unlock+0x4e/0x70 [ 589.952067][T29130] ? __fget_files+0x184/0x1c0 [ 589.952097][T29130] ? mutex_lock+0x57/0x90 [ 589.952128][T29130] ksys_read+0xdc/0x1a0 [ 589.952147][T29130] __x64_sys_read+0x40/0x50 [ 589.952164][T29130] x64_sys_call+0x2889/0x3000 [ 589.952267][T29130] do_syscall_64+0xc0/0x2a0 [ 589.952293][T29130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.952319][T29130] RIP: 0033:0x7f4c6df4b58e [ 589.952347][T29130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 589.952369][T29130] RSP: 002b:00007f4c6c9e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.952395][T29130] RAX: ffffffffffffffda RBX: 00007f4c6c9e76c0 RCX: 00007f4c6df4b58e [ 589.952412][T29130] RDX: 000000000000000f RSI: 00007f4c6c9e70a0 RDI: 0000000000000003 [ 589.952428][T29130] RBP: 00007f4c6c9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 589.952444][T29130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.952458][T29130] R13: 00007f4c6e206038 R14: 00007f4c6e205fa0 R15: 00007fff4ee247c8 [ 589.952520][T29130] [ 589.991643][T29107] EXT4-fs (loop9): corrupt root inode, run e2fsck [ 590.106997][T29143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8034'. [ 590.107115][T29143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.217533][T29107] EXT4-fs (loop9): mount failed [ 590.219931][T29143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.312594][T29149] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8037'. [ 590.347558][T29156] xt_connbytes: Forcing CT accounting to be enabled [ 590.389239][T29159] loop3: detected capacity change from 0 to 1024 [ 590.532277][T29156] loop6: detected capacity change from 0 to 512 [ 590.548088][T29156] EXT4-fs: Ignoring removed oldalloc option [ 590.561115][T29156] ext4: Unknown parameter 'euid<00000000000000000000' [ 590.721883][T29193] loop9: detected capacity change from 0 to 1024 [ 590.734245][T29193] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 590.745295][T29193] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 590.757105][T29193] JBD2: no valid journal superblock found [ 590.763044][T29193] EXT4-fs (loop9): Could not load journal inode [ 590.803707][T29199] netlink: 'syz.8.8057': attribute type 1 has an invalid length. [ 590.820626][T29202] loop3: detected capacity change from 0 to 1024 [ 590.848563][T29202] EXT4-fs mount: 16 callbacks suppressed [ 590.848584][T29202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.870876][T29199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 590.926973][T29209] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.983722][T29209] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.001074][T29218] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 591.010768][T29218] batman_adv: batadv0: Removing interface: ipvlan2 [ 591.163449][T29209] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.191403][T24702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.254300][T29209] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.284167][T29235] loop3: detected capacity change from 0 to 4096 [ 591.303952][T29232] bridge2: entered promiscuous mode [ 591.309240][T29232] bridge2: entered allmulticast mode [ 591.319973][T29235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.354172][T24572] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.371262][T24572] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.406443][T24702] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.416021][T24572] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.424431][T24572] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.486785][T29249] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.553848][T29249] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.581377][T29257] loop6: detected capacity change from 0 to 128 [ 591.606151][T29257] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.607724][T29261] netlink: 'syz.9.8078': attribute type 1 has an invalid length. [ 591.627331][T29257] ext4 filesystem being mounted at /324/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 591.639350][T29249] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.696410][T29249] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.714546][T23413] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 591.725729][T29269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.768510][T29269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.819145][T15799] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.841448][T15799] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.850115][T15799] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.863459][T15799] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.975875][T29285] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.052074][T29285] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.173141][T29313] IPv6: Can't replace route, no match found [ 592.249070][T29318] loop6: detected capacity change from 0 to 512 [ 592.264431][T29318] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 592.276304][T29318] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 592.286561][T29318] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8100: Corrupt directory, running e2fsck is recommended [ 592.301504][T29285] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.337530][T29318] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 592.349989][T29318] EXT4-fs error (device loop6): ext4_iget_extra_inode:5073: inode #15: comm syz.6.8100: corrupted in-inode xattr: e_name out of bounds [ 592.364734][T29318] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8100: couldn't read orphan inode 15 (err -117) [ 592.381503][T29325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29325 comm=syz.7.8103 [ 592.403857][T29318] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.421578][T29318] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 592.433304][T29318] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 592.443499][T29318] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8100: Corrupt directory, running e2fsck is recommended [ 592.457968][T29318] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.8100: path /332/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 592.482769][T29318] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 8: comm syz.6.8100: path /332/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 592.515959][T29285] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.569526][T23413] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.636208][T24537] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.651486][T24537] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.672205][T24537] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.684210][T24537] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.715956][T29338] loop6: detected capacity change from 0 to 512 [ 592.743086][T29338] EXT4-fs (loop6): unsupported inode size: 61867 [ 592.749491][T29338] EXT4-fs (loop6): blocksize: 1024 [ 592.799511][T29347] syz_tun: entered allmulticast mode [ 592.931792][T29352] syz_tun: entered allmulticast mode [ 592.940839][T29351] syz_tun: left allmulticast mode [ 592.976375][T29356] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.994369][T29356] ext4 filesystem being mounted at /227/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 593.024980][T29350] syz_tun: left allmulticast mode [ 593.047931][T25879] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 593.170683][T29378] __nla_validate_parse: 12 callbacks suppressed [ 593.170726][T29378] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8121'. [ 593.211026][T29381] syz_tun: entered allmulticast mode [ 593.215985][T29378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11369 sclass=netlink_route_socket pid=29378 comm=syz.6.8121 [ 593.338308][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 593.338329][ T29] audit: type=1326 audit(2000000973.815:21417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.368311][ T29] audit: type=1326 audit(2000000973.815:21418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.391993][ T29] audit: type=1326 audit(2000000973.815:21419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.415695][ T29] audit: type=1326 audit(2000000973.815:21420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.439270][ T29] audit: type=1326 audit(2000000973.815:21421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.462909][ T29] audit: type=1326 audit(2000000973.815:21422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.486512][ T29] audit: type=1326 audit(2000000973.815:21423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.510222][ T29] audit: type=1326 audit(2000000973.815:21424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.533782][ T29] audit: type=1326 audit(2000000973.815:21425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.557535][ T29] audit: type=1326 audit(2000000973.815:21426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29369 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe67a17acb9 code=0x7ffc0000 [ 593.598763][T29384] syz_tun: left allmulticast mode [ 593.604848][T29391] ext4: Bad value for 'mb_optimize_scan' [ 593.658140][T29395] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 593.691591][T29395] ext4 filesystem being mounted at /311/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 593.755500][T29408] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8133'. [ 593.775238][T24702] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 593.792047][T29408] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8133'. [ 593.819414][T29408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8133'. [ 593.879358][T29410] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8134'. [ 593.971459][ T3008] ================================================================== [ 593.979631][ T3008] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 593.987683][ T3008] [ 593.990033][ T3008] write to 0xffff88811aa11c30 of 8 bytes by task 17012 on cpu 0: [ 593.997823][ T3008] dentry_unlink_inode+0x65/0x260 [ 594.002904][ T3008] d_delete+0x164/0x180 [ 594.007109][ T3008] d_delete_notify+0x32/0x100 [ 594.011815][ T3008] vfs_unlink+0x32c/0x440 [ 594.016185][ T3008] do_unlinkat+0x1e2/0x4b0 [ 594.020632][ T3008] __x64_sys_unlink+0x2e/0x40 [ 594.025345][ T3008] x64_sys_call+0x2f48/0x3000 [ 594.030166][ T3008] do_syscall_64+0xc0/0x2a0 [ 594.034707][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.040628][ T3008] [ 594.042975][ T3008] read to 0xffff88811aa11c30 of 8 bytes by task 3008 on cpu 1: [ 594.050543][ T3008] step_into_slowpath+0x12c/0x4c0 [ 594.055620][ T3008] path_lookupat+0x330/0x500 [ 594.060246][ T3008] filename_lookup+0x190/0x390 [ 594.065043][ T3008] do_readlinkat+0x7d/0x340 [ 594.069608][ T3008] __x64_sys_readlink+0x47/0x60 [ 594.074667][ T3008] x64_sys_call+0x2af1/0x3000 [ 594.079379][ T3008] do_syscall_64+0xc0/0x2a0 [ 594.083902][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.089832][ T3008] [ 594.092168][ T3008] value changed: 0xffff8881046ce930 -> 0x0000000000000000 [ 594.099289][ T3008] [ 594.101674][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 594.107853][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 594.118819][ T3008] Tainted: [W]=WARN [ 594.122641][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 594.132725][ T3008] ================================================================== [ 594.201560][T29421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8139'. [ 594.263427][T29421] vlan2: entered promiscuous mode