last executing test programs: 48.163255988s ago: executing program 1 (id=177): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}]}}, &(0x7f0000001f40)=""/4092, 0x26, 0xffc, 0xa}, 0x28) 48.088231831s ago: executing program 1 (id=178): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="7400010800"/16, @ANYRES32=0x0, @ANYBLOB="0b0000000000000054001a8018000a8014000700fe8000000000000000000000000000aa300002802c0001800800000000000000080000000000000008000000000000000800000000000000080000000000000008000280040001"], 0x74}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700), 0x1, 0x459, &(0x7f0000000240)="$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") unshare(0x26020480) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x925, @mcast1, 0xff}}, 0x24) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000c8c000/0x1000)=nil, 0x1000, 0x0, 0x810, 0xffffffffffffffff, 0x8000000) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000040)=0x9eb9, 0x4) keyctl$search(0xa, r4, &(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r4) flistxattr(0xffffffffffffffff, &(0x7f0000000ac0)=""/185, 0xb9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xf8e77000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) renameat2(r6, &(0x7f0000000100)='./file7\x00', r6, &(0x7f0000000000)='./file7\x00', 0x4) ptrace(0x10, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x7, 0x9}}, '.\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x1c8, 0x200, 0x48, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r9 = open(&(0x7f00000000c0)='.\x00', 0x202, 0x59ad2ec6c51905e4) ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40086607, 0x0) 45.632974616s ago: executing program 1 (id=198): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000001, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x200060d1) 44.678127116s ago: executing program 1 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) lsm_set_self_attr(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x1001, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) openat$cgroup_type(r2, &(0x7f00000008c0), 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r4, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x4f0, 0x350, 0x148, 0xffffffff, 0x238, 0x148, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, &(0x7f00000000c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x20}, [0xffffff00, 0x0, 0xff, 0xffffffff], [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], 'vlan0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x33, 0x1, 0x3, 0x4e}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x5, 0x9, 0x2}}, @common=@ipv6header={{0x28}, {0x10, 0xc}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@remote, @ipv4=@rand_addr=0x64010101, @gre_key=0x8, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x3, @ipv4=@loopback, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @gre_key=0x2, @gre_key=0x6}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"0e5b", 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0xd, @ipv6=@mcast2, @ipv4=@loopback, @icmp_id=0x68, @port=0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8d) lseek(r7, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000009c0)={r6, r5, 0x7, 0x21, &(0x7f0000000880)="625b98e2e4a141dc0aa8ff679c2b61da4b8b731c7703795a85c7c8c4938b42a8d4", 0x7, 0xf, 0x7, 0xfd9, 0x4, 0x1, 0x4, 'syz0\x00'}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) 44.596768528s ago: executing program 1 (id=203): timerfd_create(0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="000000001000000024001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 43.701871066s ago: executing program 1 (id=206): sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfafe}, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 43.678684187s ago: executing program 32 (id=206): sigaltstack(&(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfafe}, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 6.554789117s ago: executing program 2 (id=442): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000b80)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x8d, '\x00', {0x1, 0x6, "f98251", 0xd731, 0x33, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [@srh={0x3c, 0x0, 0x4, 0x0, 0x5, 0x90, 0x4}]}}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510cee25750f8cfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x4e6}, 0x114244, 0x1, 0xafe8, 0x9, 0x100000000007fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4669d0af}, 0x0, 0x10, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, &(0x7f0000000300), 0xffffffffffffffbc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, 0x0, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r6, 0xa7cf4c1c228daced, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) (fail_nth: 8) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.377653222s ago: executing program 2 (id=444): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400050000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400400005c05000500020000000500010006000000"], 0x6c}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r2 = open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x410000, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004080)=@deltaction={0x60, 0x31, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2ecd84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="25c80000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x64010102, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0xa, 0x12d5c}}, 0x44) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.615746555s ago: executing program 2 (id=447): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = getuid() quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) creat(0x0, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c4e8, 0x0, 0xff, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109a41) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r5}, &(0x7f0000000240), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r6, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa86dd62ec3eaa00442f00fe8800000000000000e7ffffffffff00fc010000000000000000000b000000020c000800080086dd080088be000000011703d2090100000000000003080022eb0000000023b458100200000000000003f801361408006558000000030000000000000000"], 0x0) 5.45760627s ago: executing program 3 (id=449): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xa1, 0x60002) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000003540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="034b", 0x2}], 0x1) 5.193157739s ago: executing program 3 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x1a4e, 0x0, 0x0, 0x7, 0x0, 0xbfff}, 0x0, 0xffefffffffffffff, r2, 0x0) close(0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0306", @ANYRES32], 0xffdd) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f40)={r0, r1, 0xf, 0x0, @void}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0xa77, 0x1000}, {0x3, 0x1ff, 0x3000}], 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x99f}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.738918883s ago: executing program 4 (id=456): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0x2, 0x8, &(0x7f0000000840)) r0 = syz_clone(0xc008000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x800, 0x10000, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x614, 0x0, 0x2000000020000005}, 0x0, 0x9, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x41, 0x3, 0xa20, 0x8e0, 0x0, 0x0, 0x0, 0x0, 0x988, 0x1f0, 0x1f0, 0x988, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff000000, 0xff, 'ip6tnl0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x878, 0x8e0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x0, 0x1}, {0x6, 0x2}, {0xa, 0x3}, {0x9a7}, {0xc, 0x1}, {0x800, 0x2}, {0xf, 0x3}, {0xa8, 0x2}, {0x101, 0x2}, {0x5, 0x3}, {0x7, 0x1}], [{0x10}, {0x1, 0x8001}, {0x3, 0x400000}, {0x3, 0x33}, {0x2}, {0x4c9, 0x8}, {0x3, 0x1000}, {0x8, 0xfffffc00}, {0x1, 0xd68}, {0x2, 0x3}, {0x9e, 0x101}], 0x3, 0x7}, {[{0x0, 0x2}, {0x10, 0x1}, {0x0, 0x3}, {0xffffff66, 0x1}, {0x3, 0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x7, 0x2}, {0x919, 0x3}, {0xd92}, {0x1, 0x3}], [{0x5, 0x4}, {0x10001, 0x4}, {0x7, 0x82353e39}, {0x46dc6175, 0x400000}, {0x1}, {0x8}, {0x5, 0x7}, {0xfffffff7, 0x8}, {0x1, 0x3ff}, {0x6, 0x1ff}, {0x8, 0x5}], 0x8, 0x1}, {[{0x3, 0x3}, {0x7fffffff, 0x3}, {0xb9b, 0x3}, {0x5, 0x2}, {0xb776}, {0x2484, 0x1}, {0x2, 0x3}, {0x6, 0x3}, {0x1000}, {0xb14a}, {0x4, 0x2}], [{0x8, 0x7d}, {0x7, 0x7ff}, {0x4, 0xd93}, {0xffffff80, 0x7f}, {0xf, 0x2}, {0xfff, 0x6}, {0x7, 0x4}, {0x7, 0x9}, {0xffff, 0x40}, {0x8, 0x8}, {0x4, 0x6}], 0x0, 0x4}, {[{0x3, 0x1}, {0x1, 0x2}, {0xb, 0x3}, {0x7fffffff}, {0x9}, {}, {0x7a3c3ae0, 0x3}, {0x8, 0x1}, {0x86}, {0x9, 0x2}, {0x1, 0x1}], [{0x9, 0x81}, {0x6, 0x4}, {0xf17, 0xd4f}, {0x2, 0xffff}, {0x7, 0x7}, {0xfffffff8, 0x8000}, {0x8, 0x10}, {0x3}, {0x6, 0x9}, {0x40, 0x5}, {0x3, 0x6}], 0x7, 0x6}, {[{0x80}, {0x4, 0x1}, {0x9, 0x3}, {0x4, 0x1}, {0x0, 0x3}, {0xffffffff, 0x2}, {0x7, 0x1}, {0x80000000, 0x3}, {0x8}, {0x6, 0x1}, {0x0, 0x3}], [{0xffffff08, 0xb49}, {0x7, 0xfffff693}, {0x0, 0x4}, {0x1, 0x7fffffff}, {0x8c, 0x7}, {0x7ff, 0x9}, {0x4, 0x6}, {0xe, 0x400}, {0x438b61b5, 0x3ff}, {0x0, 0x1}, {0x5a33, 0xffff}], 0x7, 0x7}, {[{0x0, 0x3}, {0x7}, {0x3, 0x1}, {0x8, 0x2}, {0x10001, 0x3}, {0x8c, 0x2}, {0xc}, {0xfffffff9}, {0x3}, {0x1, 0x3}, {0x3, 0x1}], [{0x6, 0x81}, {0x2, 0x1}, {0x8001, 0x8}, {0x4, 0x6}, {0x8, 0x7ff}, {0xffff8d71, 0x8}, {0x4, 0xe}, {0x1000}, {0x7, 0x5}, {0x9, 0x8a4a}, {0x7, 0x371}], 0x3, 0x9}, {[{0x9, 0x3}, {}, {0x4a, 0x2}, {0x1, 0x1}, {0x4}, {0xd0, 0x1}, {0x9, 0x3}, {0xc, 0x1}, {0x5, 0x2}, {0x7, 0x6417ad6bcf2b63ac}, {0x72d7, 0x1}], [{0xf3, 0x6}, {0x6, 0x4}, {0x1000, 0xec3}, {0x6, 0xdc0000}, {0x3, 0x853}, {0x1, 0xbb}, {0x8d3, 0x4}, {0x83, 0x9}, {0x4, 0x5ae0c760}, {0xfffffffe, 0x5}, {0x6, 0x7}], 0xa, 0x7}, {[{0x9, 0x2}, {0x400, 0x2}, {0x1}, {0x1}, {0x73}, {0x9ba, 0x3}, {0xf4}, {0x8001}, {0x400, 0x2}, {0x8000}, {0x10, 0x2}], [{0x7, 0xa4}, {0x0, 0x8}, {0x1, 0x6}, {0x6, 0x5}, {0x732, 0x4}, {0x0, 0x9}, {0x4, 0x6}, {0x2, 0xffffffff}, {0x2, 0x3}, {0x6, 0x2}, {0x6, 0xfff}], 0x8, 0x7}, {[{0x4, 0x1}, {0x6d833589, 0x2}, {0xce2, 0x2}, {0x400}, {0x0, 0x3}, {0x5}, {0xd1, 0x2}, {0x5}, {0x8000}, {0x3}, {0x425e}], [{0x9, 0x9}, {0x4, 0x16}, {0x6, 0x8}, {0x2, 0x89e}, {0x8}, {0x1d7b, 0x5}, {0x80000001, 0x40}, {0x7, 0x5}, {0x2, 0x9}, {0xe21, 0x100}, {0x400, 0xe}], 0xa, 0x2}, {[{0x10, 0x1}, {0x10, 0x2}, {0xe1b, 0x3}, {0xecf, 0x2}, {0x800, 0x2}, {0x4}, {0x7, 0x4}, {0x100, 0x2}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x1}], [{0x80, 0x400}, {0x6, 0x2}, {0x4f8, 0x200}, {0x89c, 0xc}, {0xfff, 0x624}, {0x6, 0x7}, {0x2, 0x8}, {0x8, 0x5}, {0x0, 0x1000}, {0xe5, 0x1}, {0x4, 0x9}], 0x9, 0x9}, {[{0x3}, {0x8}, {0x5, 0x1}, {0xfffff800, 0x1}, {0x93cc, 0x2}, {0xfff, 0x1}, {0x5e4f168c, 0x2}, {}, {0x3bb4, 0x3}, {0x1, 0x3}, {0x7}], [{0xfffffb52, 0x8}, {0xff, 0x7fffffff}, {0x3, 0x9}, {0x8001, 0x101}, {0xa, 0x3}, {0x9, 0x9}, {0x9, 0x6}, {0x0, 0xa44}, {0xff, 0xc}, {0x7fffffff, 0x12f0b5c4}, {0x4, 0xe}], 0x8, 0x3}], 0x6, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x1000, 0x1, 0x1, 'syz1\x00', 'syz0\x00', {0xaf}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x3, 0x7}, {0x2, 0x5, 0xa}, {0x1, 0x6}, 0x100, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xa80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x848000000015, 0x805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'nr0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c28fe12ce16223ae6f47b1f2e78c412d7937383346ce43e6d64359975145df1c8ac0eb097718924278f7fb661e64b4f32dcb31776007ca30f0f018f730610a7091c1538a4122318a46cdf51d23c5b785f73d74ad282eec2c00000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf2583000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r5 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fc00000000003, 0xffffffffffffffff, 0x9) umount2(0x0, 0xa) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x5, 0x4}, 0x80, 0x0}, 0x2404081c) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xad, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0300ffff00", 0x5, 0x0, 0x0, 0x2}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="2503fffff9ff0000000016000000140001800d703a"], 0x28}, 0x1, 0x0, 0x0, 0x44880}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002540)=""/1, 0x1) ptrace(0x4207, r0) 4.717548803s ago: executing program 2 (id=457): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400050000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400400005c05000500020000000500010006000000"], 0x6c}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r2 = open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x410000, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004080)=@deltaction={0x60, 0x31, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2ecd84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="25c80000000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x50) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x64010102, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0xa, 0x12d5c}}, 0x44) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.649927345s ago: executing program 3 (id=458): r0 = socket(0x8000000010, 0x0, 0x0) write(r0, &(0x7f0000000640)="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", 0xfc) 4.593739487s ago: executing program 3 (id=459): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="27484558489fa2b01a10eef7efb607e8a8e94bc164f861364e051d0daf95b5342aff7bb70b64a061e9aa45a4029b5cf5ef2a80165442940ab3038a1bc3d1620f6aa660c8a83ba76b11b50ff477c46b1b6e8176b0553e66006c22ec9653c5795fd753b9", 0x63}, {&(0x7f0000000580)="79224308e49746d3596d5c9a8fdda624151f857440da47c76e49fa72ca180220a3fb7eeb83ab360074bed2f6c7657d1909796db932f212d9ff916d60765349bd5cfdc495b9278f518161a70140d989747eeb016ff70ad4f16c4ea75570a06bcef8e69bd648baba15f460f91cd2840a5dea43bf6dc066d4afaec294bf", 0x7c}, {&(0x7f00000007c0)="4e033688ec2a170f2a4be3f28be42587f7659fa8e99c2441aba71298a2aa2e61408a3332899dac035dce5ba9cd8c34e083b3396eafa19010f8cf6735eb047841a90912982907eba8bde7f797554db8ca0c7d8540b8fa8690e658d414963227c137a13d957228ad8b377ef9dc9dee709f6912474ed431ee78be10fb7d57095e22ce8606e10bc72669d315331f6e182162a5cf19c9c4a394b58a8aa4557d0ea5bf21ed730b6b2f4c074b46f2a6b4ed8208f71c1c3e2639b1fc74e3dd51e6367c28719452d997eada87b85521112269", 0xce}, {&(0x7f00000006c0)="54857cbcacefa7b302f151eadcd312ab0e236125ce7682380bb394c078c66bee0a0318332dc8c06e3450523ac7ede81ceb7b1d552bdb9791857ab825da9c606c3b52d773f3e116dd763e673e5aac157adb257d17866f3717e46a21678e548f977dda0fa049e3a6436ae10f6b0a45a2bea743564abefd5788e0c7daaa1b86ad7259200beed6cbd6c7a8", 0x89}, {&(0x7f0000000780)="2cd82478c3de5ca506fabbb536c0d527feb3e062aad841d4eb7a1c9c4f499a75e2f1aba2c681083c8ae55979930d9f1593", 0x31}], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000380007012cbd7800020000000100"/28, @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24008811}, 0x8010) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb810019000868f9820020006800000302907800000000ffffffff07030d0012109078ac1e0001"], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffc, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x1000}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x11, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x8000005f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x3, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4.406229983s ago: executing program 2 (id=461): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc0000001801000878546c2500000000002020207b1af8ff00000000000000000000000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x34, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, 0x0, 0x0) recvmsg(r5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$bpf(0x200000000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x206002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x5d}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES8=r2, @ANYRESDEC=r7, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRES32=r4, @ANYRESDEC=r1, @ANYBLOB="99588c1619b8cebf5a76298800e09ac29af81da05482662df78955aee439c23b404cc3dd7651e3f48c3828d7308fc31b7c613b80e84b2999ff36126315d829715926799c489a3ed1e99ed32c65caff690be614e8507adf37ede8ec0795fc6931570b79c97375acaf763058547c2a3aa5c56c3a6422938f9bcba514", @ANYRES16, @ANYRES16], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r8, &(0x7f0000000300), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000002000000080000000200000008000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ae490022f5d43ac1f5c70b00eca692b7"], 0x50) 4.257093157s ago: executing program 2 (id=462): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x3c, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x2c, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic, @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x3c}], 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x60480) r1 = epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x66, 0x7, 0x10001, 0x641, 0xd, "86d28bc133e72909514b4d04935aa2470777e8"}) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r5, 0x0, 0x178) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x1f, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002000)=ANY=[@ANYBLOB="bc030000107df2042abd7000eaffffff000003e4", @ANYRES32=r8, @ANYBLOB="13000000c418060030001280080001007369740024000280060011004e2200000500090029"], 0x3bc}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044) close(r5) syz_open_procfs$pagemap(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x104000, 0x0, 0xffffffff, 0x0, 0x2000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280), &(0x7f0000000680)=@v1={0x2, "cc564246d9d7a5de76"}, 0xa, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) fcntl$lock(r5, 0x24, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xe, 0x4, 0x4, 0x1ffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) epoll_wait(r1, &(0x7f0000000340)=[{}], 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x300, {}, [{0x4}]}, 0x18}}, 0x0) 3.464727972s ago: executing program 3 (id=469): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="e30000fcff"], 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0), 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) lgetxattr(0x0, &(0x7f0000000100)=@known='system.advise\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@jqfmt_vfsv1}, {@usrjquota_path={'usrjquota', 0x3d, './file1/file1'}}, {@nodelalloc}, {@init_itable}, {@nodioread_nolock}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x9) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyad/4WOddkfE4rkC9NCpu9TeFvvybbR1EcGGJO9PaWzYrQAAoB/5Mf6HI+KT7eP/6RhrH80BAAAAoyR7eyr+lURkAAAAwMhKI2IqkrRSjAWYijStVDpjeD8a19N6o9n69HJje2MpnxdRjlK6vFqvzRRjhctRSvLybDHGdr/82pHyXEQ8FxE/nL7WLlcWG/WlYV/8AAAAgCvixouHz///OZ228wAAAMCIKfcsAAAAAKPCKT8AAACMPuf/AAAAMNK++u67ecr23+O99P7O9lrj/TtLteZaZX17sbLY2NqsrDQaK+1n9q2fVl+90dj8bGxs36u2as1Wtbmze3e9sb3Rurt66BXYAAAAwCV67sUHv0siYu/z19opiucAAhzyx2E3ABiksWE3ABia8WE3ABia0qlL2EPAqEtOmX988E7nWmH8+mLaAwAADN6tjx+//z9RzDv92gDw/8xYHwC4etzdg6urdNYRgDcH3RJgWD7U+Xim1/yeD+/o4/5/5xpDlp2pYQAAwMBMtVOSVorj9KlI00ol4tn2awFKyfJqvTZTnB/8drr0TF6eba+ZnDpmGAAAAAAAAAAAAAAAAAAAAAAAAADoyLIkMgAAAGCkRaR/TtpP84+4Nf3K1OGrA0fe+vXT9358b6HV2pqNmEj+Pp1PmoiI1k+K6a9lXgkAAAAAT4HOeXrxOTvs1gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwah4/+mBxP11m3L9+MSLK3eKPx2T7czJKEXH9H0mMH1gviYixAcTfux8RN7vFT+JJlmXlohXd4l+74Pjl9qbpHj+NiBsDiA9X2YN8//NOt+9fGi+1P7t//8aLdF6993/pf/d/Yz32P88eKffy/MNfVHvGvx/x/Hj3/c9+/KQT/1CIvPByn3385jd2d7vOOFBlt/gHY1Vb65vV5s7undX1hZXaSm1jbm72jfk351+fn6kur9Zrxd+uYX7wiV8+Oan/13vELx/u/7Ht/0pfvc/i3w/vPfpIp1DqFv/2y91/f2/2iJ8Wv32fKvL5/Fv7+b1O/qAXfv6bF07q/1KP/k+e0v/bffU/Pvfq1773h65zjm0NAOAyNHd21xbq9drWCZnJPpa55MzbT0czBpiJp6MZw8pk3+38P56vnnOufiyTnWf18RhAMyaOfU/H4qwVJhF7eV19/kMCAAAj5n8H/SfdQQIAAAAAAAAAAAAAAAAAAAAu0hkfSzYZEX0vfDTm3nC6CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwov8EAAD//4kX0Xk=") syz_io_uring_setup(0x63eb, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140), &(0x7f0000000480), 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7}, 0x1c) 3.396765195s ago: executing program 0 (id=470): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x88f7, 0x4080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000080)=""/108, 0x6c}], 0x1, 0xa3, 0xd) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20d3, &(0x7f0000000300)=[{&(0x7f0000000400)=""/110, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f00000006c0)=""/118, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x53}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000001fc0)=""/191, 0xffffffffffffff52}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000200)=""/4096) 3.257651219s ago: executing program 0 (id=471): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="014800001953010014003500626f6e643000000000000000000000001c00128009000100626f6e64000000000c0002800500110001000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400050000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400400005c05000500020000000500010006000000"], 0x6c}}, 0x8000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) r2 = open(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x410000, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004180)={&(0x7f0000004080)=@deltaction={0x60, 0x31, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x14, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x43}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2ecd84) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="25c80000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r4, 0xee01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x64010102, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0xa, 0x12d5c}}, 0x44) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 3.23676422s ago: executing program 5 (id=472): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000b80)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x8d, '\x00', {0x1, 0x6, "f98251", 0xd731, 0x33, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [@srh={0x3c, 0x0, 0x4, 0x0, 0x5, 0x90, 0x4}]}}}}}}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510cee25750f8cfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x4e6}, 0x114244, 0x1, 0xafe8, 0x9, 0x100000000007fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4669d0af}, 0x0, 0x10, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$kcm(0x21, 0x2, 0xa) setsockopt$sock_attach_bpf(r3, 0x110, 0x2, &(0x7f0000000300), 0xffffffffffffffbc) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r4, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, 0x0, 0x4000) sendmsg$TEAM_CMD_OPTIONS_SET(r2, 0x0, 0x40010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f0000000180)={0x0, 0x500, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r6, 0xa7cf4c1c228daced, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) sendmsg$nl_route_sched(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.174159831s ago: executing program 5 (id=473): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x101c91c, &(0x7f0000000400)={[{@inode_readahead_blks}, {@noblock_validity}, {@noquota}, {@inlinecrypt}, {@errors_remount}, {@noblock_validity}, {@usrjquota}, {@nodelalloc}, {@dax_always, 0x32}]}, 0x1d, 0x4e7, &(0x7f0000000540)="$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") 3.005836076s ago: executing program 5 (id=474): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x83, 0xddb, 0x4b, 0x1, 0x8, 0x8}}, {0x4}}]}]}, 0x48}}, 0x14) (fail_nth: 4) 2.910985659s ago: executing program 0 (id=475): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x2, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty=0x18000000}, 0x10) 2.54065555s ago: executing program 5 (id=476): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x3, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x8010) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, &(0x7f00000005c0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000007c0), 0x0, 0x40) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) ioprio_set$uid(0x3, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x141a82, 0xe0) sendfile(r6, r6, 0x0, 0x3) syz_io_uring_setup(0x4957, &(0x7f00000003c0)={0x0, 0xa085, 0x4000, 0x3, 0x34e}, &(0x7f0000000440), 0x0, &(0x7f0000000540)) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaf072436d6f1791040000000030021000000c6b7b5caf0c0b4e112244e04167"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@grpid}, {@grpjquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000ec0)="$eJzs281rHOUfAPDvTLKb9teX5FfrS2vVaBGCYtKkVXvwolQQqSjooR5jsi2h20aaKLYWm4p4EqSgZ/Eo+hd4E0HUk+DVkycpFO2lrafITGaSTbp5odlk0+7nAzP7PDPP7Dzfnbdnn2c3gI7Vn82SiJ0R8UdE9M5lFxfon3u5ef3i2K3rF8eSmJ198+8kL3fj+sWxsmi53Y4iM5BGpJ8kxU4Wmzp/4fRovV47V+SHps+8OzR1/sIz758ZPVU7VTs7cvTokcPDzz838mxL4sziurH/o8kD+155+8prYyeuvPPLd1l9dxbrG+Nolf4s8H9mc0vXPdnqnbXZrnzek8+T7jZXhjXriojscFXy6783umLh4PXGyx+3tXLAhsqeTT3Lr56ZBe5hSay1ZKXhngHc/coHffb9t5w2odmxZVx7ce4LUBb3zWKaW9MdaVGmMv/9tvX6I+LEzL9fZVNsUD8EAECjz8a+PF6Nnvjw1revZm2P3vk1aTyQv/6Zz3cXYyh9EfH/iNgTEfdFxN6IuD8iL/tgRDy0zvrc3v5Jr67zLVeUtf9eKMa2Frf/ytZf9HUVuV15/JXk5ES9dqj4TAai0pPlh1fYxw/Hfv98uXWN7b9syvZftgWLelztXtJBNz46PRqV9US94NrliP3dzeJP5kcCkojYFxH757da0wDP7jIx8dQ3B5YrtHr8K2jBONPs11l4M1n8M7Ek/lLSOD45cdv45NC2qNcODZVnxe1+/e3TN5bb/7rib4FrtbnXhuO/tEhf0jheO9Xa/d/h+Z9Wk7fyceZqMeb4wej09LnhiGpyPM9Xi7L58pGFbct8WT47/wcONr/+9xTbZPE/HBHZSfxIRDwaEY8VdX88Ip6IiIMrxPjzS6vHH2mbjv/liPGm97/583/J8T9/4XR5a1xYsmKi6/RP3y+3/7Ud/yN5aqBYkt//VtGsOt1NqnynnxsAAADcTdL8N/BJOjifTtPBwbnf8O+N/6X1yanpp09Ovnd2fO638n1RScuert6iP7Q+Ua8NJzPFO1aSY1GvjRR9xWV/6eGi3/iLru15fnBssj7e5tih0+1Y5vrP/NXV7toBG2x706Uj1U2vCNAGS8fR08XZS6+HmwHcq/xfGzrXKtd/uln1ADaf5z90rmbX/6UleWMBcG/y/IfO5fqHDpX+2O4aAG3k+Q8dadU/77cnsa1xSXXlwtUtUueWJbbqQckTEWUi3RL1kdigRLvvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK3xXwAAAP//uIXZzg==") 2.353921607s ago: executing program 0 (id=477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) 2.270367759s ago: executing program 0 (id=478): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000001, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, 0x0, 0x0, 0x200060d1) 2.101059634s ago: executing program 4 (id=479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x39b3) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xffffffffffff2836) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x138, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x2c}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x2, 0x8001, 0x9, 0x19, 0x14, 0x2}}, @TCA_CHOKE_STAB={0x104, 0x2, "5a33303afe31228e68f8a09170a701dbb733e831ac4ec69afac35bd25865d63aff8af76ad25c216134f1ca72280c80557fa745f91f1950ff553b3e01e7b469e393154cb01610ac989a1955e3d24a0c57cb715a284c0cdce57fe823d68f34a64f67593b297bcf084527a2c5bbcc99ea15902fd168d476d5960e51f66ea689a5b30313a795cbbdcb37b6984665b2ad725dc9428bd02fb294477ccafee878d402012632d5bc46d1e8c60aef589df3b10fb8e2af2cd5265262dd0977b31ae7966b08c8089f35f8e54f950721e7b4638cfba882f14d258c5026aacbc108c80f8b8ba9012679ab1ebd3769ab78d47167ab2444aaabdb00e7fe416d6fc45558d71f2108"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x80, 0x3, 0xd, 0x1a, 0x15, 0x8}}]}}]}, 0x168}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {}, {0x1, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x408d4) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000880)="6a46bf379dba15feada7fcb5efa6b3046873f0c894521b4f88dc55ac008c592021f72626e498564dcdb0d968ac0a30ccc5d0773d458a2835cf340bdd209f2e535cb7bf88e47faf9b62a81bac408b0e89d443c17b33df73a99e92f3edb774edbe5f796b69d3344496ad4d9524fee92fb1a6cacc396fac000b94c1810d55f56e6dc9ff6db21d00", 0x86}, {&(0x7f0000000240)="8a39c192412aed8ce1b8b899a8a9c8a627727768ae7ee59bcf21cee5a088d1193b93d2f3b1a31d49ef5a5dae3839edba12bcbf9a4ead32641762609d85179084b010b33ec917138d9b4d5d96c156dd749190", 0x52}, {&(0x7f00000003c0)="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", 0xfe}], 0x3, &(0x7f0000000b40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xde}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x41}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @initdev={0xac, 0x1e, 0x7, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xd0}, 0x8000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0)=0x6, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000000)=[{0x3a46, 0x4, 0x9, 0x4}, {0xfffd, 0xd9, 0xff, 0x7}, {0x5, 0x0, 0x4, 0x7}, {0x46, 0x1, 0x7, 0x200}]}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000300)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x7fa962bfffff, 0x12, r6, 0x0) 1.582035611s ago: executing program 5 (id=480): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000300)=[{&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="27484558489fa2b01a10eef7efb607e8a8e94bc164f861364e051d0daf95b5342aff7bb70b64a061e9aa45a4029b5cf5ef2a80165442940ab3038a1bc3d1620f6aa660c8a83ba76b11b50ff477c46b1b6e8176b0553e66006c22ec9653c5795fd753b9", 0x63}, {&(0x7f0000000580)="79224308e49746d3596d5c9a8fdda624151f857440da47c76e49fa72ca180220a3fb7eeb83ab360074bed2f6c7657d1909796db932f212d9ff916d60765349bd5cfdc495b9278f518161a70140d989747eeb016ff70ad4f16c4ea75570a06bcef8e69bd648baba15f460f91cd2840a5dea43bf6dc066d4afaec294bf", 0x7c}, {&(0x7f00000007c0)="4e033688ec2a170f2a4be3f28be42587f7659fa8e99c2441aba71298a2aa2e61408a3332899dac035dce5ba9cd8c34e083b3396eafa19010f8cf6735eb047841a90912982907eba8bde7f797554db8ca0c7d8540b8fa8690e658d414963227c137a13d957228ad8b377ef9dc9dee709f6912474ed431ee78be10fb7d57095e22ce8606e10bc72669d315331f6e182162a5cf19c9c4a394b58a8aa4557d0ea5bf21ed730b6b2f4c074b46f2a6b4ed8208f71c1c3e2639b1fc74e3dd51e6367c28719452d997eada87b85521112269", 0xce}, {&(0x7f0000000780)="2cd82478c3de5ca506fabbb536c0d527feb3e062aad841d4eb7a1c9c4f499a75e2f1aba2c681083c8ae55979930d9f15932f", 0x32}], 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000380007012cbd7800020000000100"/28, @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x24008811}, 0x8010) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb810019000868f9820020006800000302907800000000ffffffff07030d0012109078ac1e0001"], 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdffffffffffffffc, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/64, 0x328000, 0x1000}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x11, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x8000005f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x3, 0x0, 0x10}, 0x0, 0xffffffffffffffff, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.303142909s ago: executing program 3 (id=481): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffad, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x45) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x83) mkdirat(r3, &(0x7f0000000040)='./file0\x00', 0x120) shutdown(r2, 0x1) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) 1.169800713s ago: executing program 4 (id=482): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x2c000010) r2 = getuid() quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, r2, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x8, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) creat(0x0, 0x18) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c4e8, 0x0, 0xff, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x109a41) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r6}, &(0x7f0000000240), &(0x7f0000000340)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r7, r5, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000001400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa86dd62ec3eaa00442f00fe8800000000000000e7ffffffffff00fc010000000000000000000b000000020c000800080086dd080088be000000011703d2090100000000000003080022eb0000000023b458100200000000000003f801361408006558000000030000000000000000"], 0x0) 138.511765ms ago: executing program 4 (id=483): ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x4, 0x4, "1afa86d32101b52ddf370cbdb2b64700", 0x200}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) memfd_secret(0xbf2288092a27a066) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000580)=@ethtool_regs={0x33, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {0x0, 0x8001}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000140) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x6, r5, 0x4}, 0x38) 132.511555ms ago: executing program 0 (id=484): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) ppoll(&(0x7f00000005c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000080)=[{0x0}], 0x1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, 0x0, 0x7, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x358, 0xffffffff, 0x108, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xa8, 0xd0, 0x8502, {0x700}}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 17.852439ms ago: executing program 4 (id=485): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/201, 0xc9}], 0x1, 0x9, 0x8) 14.707299ms ago: executing program 5 (id=486): r0 = timerfd_create(0x0, 0x80000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x0, 0x11ed, &(0x7f0000002480)="$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") openat$ppp(0xffffffffffffff9c, 0x0, 0x22d00, 0x0) creat(&(0x7f00000004c0)='./bus\x00', 0x75) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0431a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x5, 0x0, 0x0, 0x0, 0xe}, 0x94) 0s ago: executing program 4 (id=487): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788a5c93a6b7b3c8e9a2fe0760f01", 0xf) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.931817][ T3935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32016 sclass=netlink_route_socket pid=3935 comm=syz.0.112 [ 59.969701][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.048061][ T36] EXT4-fs (loop2): This should not happen!! Data will be lost [ 60.048061][ T36] [ 60.062585][ T36] EXT4-fs (loop2): Total free blocks count 0 [ 60.086108][ T36] EXT4-fs (loop2): Free/Dirty block details [ 60.120133][ T36] EXT4-fs (loop2): free_blocks=4096 [ 60.148292][ T3942] loop3: detected capacity change from 0 to 2048 [ 60.166468][ T3936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.112'. [ 60.199835][ T36] EXT4-fs (loop2): dirty_blocks=32 [ 60.230550][ T36] EXT4-fs (loop2): Block reservation details [ 60.271500][ T3942] loop3: p1 p4 [ 60.298318][ T36] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 60.328787][ T3942] loop3: p4 size 589824 extends beyond EOD, truncated [ 60.450693][ T36] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 60.591186][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 60.656877][ T28] audit: type=1400 audit(1778856057.394:479): avc: denied { setopt } for pid=3943 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.751377][ T28] audit: type=1400 audit(1778856057.424:480): avc: denied { connect } for pid=3943 comm="syz.2.115" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.875487][ T3952] loop3: detected capacity change from 0 to 1024 [ 60.921031][ T3952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e098, mo2=0002] [ 60.958180][ T3952] System zones: 0-1, 3-8 [ 60.964801][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.987513][ T3952] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.022170][ T3908] loop4: detected capacity change from 0 to 8192 [ 61.160378][ T3908] loop4: p1 < > p2 p4 < p5 > [ 61.178319][ T3908] loop4: partition table partially beyond EOD, truncated [ 61.223472][ T3908] loop4: p1 start 134217728 is beyond EOD, truncated [ 61.259442][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.270079][ T3908] loop4: p2 size 591360 extends beyond EOD, truncated [ 61.335994][ T3908] loop4: p5 size 591360 extends beyond EOD, truncated [ 61.595792][ T3971] netlink: 'syz.2.123': attribute type 1 has an invalid length. [ 61.810529][ T3976] loop7: detected capacity change from 0 to 7 [ 62.001080][ T3971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.037352][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.046675][ C1] buffer_io_error: 4 callbacks suppressed [ 62.046690][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.082960][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.092202][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.138905][ T3976] loop7: unable to read partition table [ 62.169519][ T3976] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 62.182363][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.191640][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.202370][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.211564][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.219841][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.229029][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.238105][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.247314][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.285603][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 62.294825][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 62.617572][ T3983] bridge0: entered allmulticast mode [ 62.991006][ T3988] atomic_op ffff88811b7f8928 conn xmit_atomic 0000000000000000 [ 63.160202][ T28] audit: type=1400 audit(1778856059.894:481): avc: denied { bind } for pid=3991 comm="syz.2.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 63.540118][ T4005] loop3: detected capacity change from 0 to 512 [ 63.683529][ T4005] EXT4-fs (loop3): 1 orphan inode deleted [ 63.708482][ T4005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.739096][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.111624][ T4012] atomic_op ffff88811c650128 conn xmit_atomic 0000000000000000 [ 64.435293][ T28] audit: type=1326 audit(1778856061.174:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4020 comm="syz.2.136" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f367adace59 code=0x0 [ 64.441229][ T4018] loop4: detected capacity change from 0 to 512 [ 64.479338][ T4018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.511080][ T4018] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.525473][ T4018] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.555606][ T4018] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.135: inode #0: comm syz.4.135: iget: illegal inode # [ 64.658082][ T4018] loop4: lost filesystem error report for type 5 error -117 [ 64.660260][ T4018] EXT4-fs (loop4): Remounting filesystem read-only [ 64.674272][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 64.674294][ C1] EXT4-fs (loop4): initial error at time 1778856061: ext4_init_orphan_info:583 [ 64.674315][ C1] EXT4-fs (loop4): last error at time 1778856061: ext4_init_orphan_info:583 [ 64.716872][ T4029] loop3: detected capacity change from 0 to 128 [ 64.745966][ T4018] EXT4-fs (loop4): get orphan inode failed [ 64.763045][ T4018] EXT4-fs (loop4): mount failed [ 64.847356][ T4039] syz.1.141 uses obsolete (PF_INET,SOCK_PACKET) [ 64.849725][ T4041] tmpfs: Unknown parameter 'grpquota' [ 64.870100][ T28] audit: type=1400 audit(1778856061.614:483): avc: denied { ioctl } for pid=4037 comm="syz.1.141" path="socket:[5802]" dev="sockfs" ino=5802 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.929596][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 64.962399][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 64.984498][ T4040] loop2: detected capacity change from 0 to 2048 [ 65.090259][ T4040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.234229][ T28] audit: type=1400 audit(1778856061.974:484): avc: denied { write } for pid=4038 comm="syz.2.140" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.311659][ T28] audit: type=1400 audit(1778856062.034:485): avc: denied { write } for pid=4038 comm="syz.2.140" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.335261][ T28] audit: type=1400 audit(1778856062.044:486): avc: denied { connect } for pid=4055 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.369152][ T28] audit: type=1400 audit(1778856062.044:487): avc: denied { read } for pid=4055 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 65.523336][ T4060] loop4: detected capacity change from 0 to 1024 [ 65.539815][ T4060] EXT4-fs: dax option not supported [ 65.750243][ T3460] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 65.781019][ T3460] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.812928][ T3460] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.812928][ T3460] [ 65.836054][ T3460] EXT4-fs (loop2): Total free blocks count 0 [ 65.847271][ T3460] EXT4-fs (loop2): Free/Dirty block details [ 65.857303][ T3460] EXT4-fs (loop2): free_blocks=4096 [ 65.864991][ T3460] EXT4-fs (loop2): dirty_blocks=32 [ 65.873873][ T3460] EXT4-fs (loop2): Block reservation details [ 65.886162][ T3460] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 65.900543][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 65.923480][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 66.016869][ T4066] capability: warning: `syz.2.148' uses 32-bit capabilities (legacy support in use) [ 66.107392][ T4068] loop4: detected capacity change from 0 to 128 [ 66.291578][ T28] audit: type=1400 audit(1778856063.024:488): avc: denied { shutdown } for pid=4069 comm="syz.1.149" lport=46940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.510814][ T4082] futex_wake_op: syz.1.153 tries to shift op by -65; fix this program [ 66.575501][ T4082] netlink: 764 bytes leftover after parsing attributes in process `syz.1.153'. [ 66.813457][ T4087] atomic_op ffff88811cacfd28 conn xmit_atomic 0000000000000000 [ 67.174445][ T4096] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 67.423660][ T4110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.159'. [ 67.806097][ T4112] atomic_op ffff888137c47928 conn xmit_atomic 0000000000000000 [ 68.152580][ T4118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 68.198888][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.161'. [ 68.508485][ T4134] netlink: 20 bytes leftover after parsing attributes in process `syz.4.166'. [ 68.595912][ T28] audit: type=1400 audit(1778856065.334:489): avc: denied { create } for pid=4136 comm="syz.2.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 68.652995][ T4138] loop0: detected capacity change from 0 to 128 [ 68.787023][ T4143] loop3: detected capacity change from 0 to 128 [ 69.460539][ T4151] atomic_op ffff88811ae99d28 conn xmit_atomic 0000000000000000 [ 69.518719][ T28] audit: type=1400 audit(1778856066.254:490): avc: denied { write } for pid=4149 comm="syz.4.170" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.858493][ T4156] FAULT_INJECTION: forcing a failure. [ 69.858493][ T4156] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.888656][ T4156] CPU: 1 UID: 0 PID: 4156 Comm: syz.0.171 Tainted: G W syzkaller #0 PREEMPT(full) [ 69.888693][ T4156] Tainted: [W]=WARN [ 69.888701][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 69.888715][ T4156] Call Trace: [ 69.888722][ T4156] [ 69.888738][ T4156] __dump_stack+0x1d/0x30 [ 69.888801][ T4156] dump_stack_lvl+0x95/0xd0 [ 69.888824][ T4156] dump_stack+0x15/0x1b [ 69.888845][ T4156] should_fail_ex+0x263/0x280 [ 69.888896][ T4156] should_fail+0xb/0x20 [ 69.888949][ T4156] should_fail_usercopy+0x1a/0x20 [ 69.889060][ T4156] _copy_from_user+0x1c/0xb0 [ 69.889094][ T4156] snd_seq_event_dup+0x308/0x420 [ 69.889150][ T4156] snd_seq_client_enqueue_event+0x216/0x2c0 [ 69.889254][ T4156] snd_seq_write+0x454/0x560 [ 69.889335][ T4156] ? __pfx_snd_seq_write+0x10/0x10 [ 69.889364][ T4156] vfs_write+0x269/0x9f0 [ 69.889395][ T4156] ? __rcu_read_unlock+0x4e/0x70 [ 69.889426][ T4156] ? __fget_files+0x184/0x1c0 [ 69.889451][ T4156] ksys_write+0xdc/0x1a0 [ 69.889482][ T4156] __x64_sys_write+0x40/0x50 [ 69.889514][ T4156] x64_sys_call+0x27e1/0x3020 [ 69.889618][ T4156] do_syscall_64+0x12c/0x3b0 [ 69.889702][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.889768][ T4156] RIP: 0033:0x7fc7a5eace59 [ 69.889787][ T4156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.889807][ T4156] RSP: 002b:00007fc7a4907028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.889830][ T4156] RAX: ffffffffffffffda RBX: 00007fc7a6125fa0 RCX: 00007fc7a5eace59 [ 69.889846][ T4156] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 69.889925][ T4156] RBP: 00007fc7a4907090 R08: 0000000000000000 R09: 0000000000000000 [ 69.890008][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.890023][ T4156] R13: 00007fc7a6126038 R14: 00007fc7a6125fa0 R15: 00007ffe159244d8 [ 69.890045][ T4156] [ 70.113676][ T4137] loop2: detected capacity change from 0 to 512 [ 70.194161][ T4137] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.223639][ T4162] tmpfs: Bad value for 'mpol' [ 70.233840][ T28] audit: type=1400 audit(1778856066.964:491): avc: denied { mounton } for pid=4161 comm="syz.4.172" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.238278][ T4137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.391000][ T4137] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.167: bad orphan inode 131083 [ 70.434724][ T28] audit: type=1326 audit(1778856067.174:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.4.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x0 [ 70.471764][ T4137] loop2: lost filesystem error report for type 5 error -117 [ 70.474373][ T4137] EXT4-fs (loop2): Remounting filesystem read-only [ 70.481923][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 70.482022][ C1] EXT4-fs (loop2): initial error at time 1778856067: ext4_orphan_get:1423 [ 70.482102][ C1] EXT4-fs (loop2): last error at time 1778856067: ext4_orphan_get:1423 [ 70.595384][ T28] audit: type=1326 audit(1778856067.334:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4172 comm="syz.4.175" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x0 [ 70.702461][ T4137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.869653][ T28] audit: type=1400 audit(1778856067.594:494): avc: denied { write } for pid=4136 comm="syz.2.167" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 70.914668][ T28] audit: type=1400 audit(1778856067.614:495): avc: denied { create } for pid=4136 comm="syz.2.167" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.973473][ T28] audit: type=1400 audit(1778856067.634:496): avc: denied { create } for pid=4182 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 71.030618][ T28] audit: type=1400 audit(1778856067.634:497): avc: denied { module_request } for pid=4182 comm="syz.1.178" kmod="net-pf-16-proto-18" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.118654][ T28] audit: type=1400 audit(1778856067.644:498): avc: denied { read write } for pid=4136 comm="syz.2.167" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.189966][ T28] audit: type=1400 audit(1778856067.644:499): avc: denied { open } for pid=4136 comm="syz.2.167" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.348820][ T4193] loop0: detected capacity change from 0 to 2048 [ 71.409897][ T4193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.461201][ T4193] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.548045][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.632955][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.705756][ T4202] loop2: detected capacity change from 0 to 512 [ 71.747722][ T4202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 71.788404][ T4186] loop3: detected capacity change from 0 to 1024 [ 71.818515][ T4186] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.837826][ T4202] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.185: corrupted xattr entries [ 71.872175][ T4186] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.179: lblock 5 mapped to illegal pblock 5 (length 1) [ 71.932313][ T4202] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 71.932904][ T4202] EXT4-fs (loop2): 1 truncate cleaned up [ 71.942087][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 71.942110][ C0] EXT4-fs (loop2): initial error at time 1778856068: xattr_find_entry:337: inode 15 [ 71.942154][ C0] EXT4-fs (loop2): last error at time 1778856068: xattr_find_entry:337: inode 15 [ 71.973522][ T4186] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 71.978023][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 71.993733][ C0] EXT4-fs (loop3): initial error at time 1778856068: ext4_map_blocks:833: inode 3: block 5 [ 72.003882][ C0] EXT4-fs (loop3): last error at time 1778856068: ext4_map_blocks:833: inode 3: block 5 [ 72.014466][ T4186] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.179: Failed to acquire dquot type 0 [ 72.029767][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.052517][ T4186] loop3: lost filesystem error report for type 5 error -117 [ 72.054901][ T4186] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.179: lblock 5 mapped to illegal pblock 5 (length 1) [ 72.098210][ T4186] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.098945][ T4186] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.179: Failed to acquire dquot type 0 [ 72.122200][ T4186] loop3: lost filesystem error report for type 5 error -117 [ 72.123655][ T4186] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.179: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.158796][ T4186] loop3: lost filesystem error report for type 5 error -117 [ 72.159905][ T4186] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.179: lblock 5 mapped to illegal pblock 5 (length 1) [ 72.206615][ T4186] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 72.207314][ T4186] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.179: Failed to acquire dquot type 0 [ 72.239972][ T4211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 72.240805][ T4186] loop3: lost filesystem error report for type 5 error -117 [ 72.264937][ T4186] EXT4-fs (loop3): 1 orphan inode deleted [ 72.313119][ T4186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.385460][ T4186] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.179: lblock 5 mapped to illegal pblock 5 (length 1) [ 72.434621][ T4186] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.179: Failed to acquire dquot type 0 [ 72.532172][ T4186] syz.3.179 (4186) used greatest stack depth: 9344 bytes left [ 72.548963][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.816778][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.893641][ T4234] loop2: detected capacity change from 0 to 1024 [ 72.946236][ T4234] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 72.970969][ T4234] System zones: 0-1, 3-8 [ 72.993192][ T4234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 73.015249][ T4234] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.078228][ T4241] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 73.284127][ T3460] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:8: lblock 4 mapped to illegal pblock 4 (length 2) [ 73.333866][ T3460] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 73.361587][ T3460] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.361587][ T3460] [ 73.482603][ T76] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:5: lblock 8 mapped to illegal pblock 8 (length 4) [ 73.515968][ T76] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 73.791109][ T4255] atomic_op ffff88811b40e928 conn xmit_atomic 0000000000000000 [ 73.992466][ T76] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.992466][ T76] [ 74.010625][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 74.038628][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 74.076746][ T4263] ieee802154 phy0 wpan0: encryption failed: -90 [ 74.218217][ T4267] netlink: 'syz.4.201': attribute type 3 has an invalid length. [ 74.242680][ T4267] netlink: 'syz.4.201': attribute type 1 has an invalid length. [ 74.317625][ T4267] netlink: 216 bytes leftover after parsing attributes in process `syz.4.201'. [ 74.357394][ T4272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.201'. [ 74.576447][ T76] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.654061][ T76] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.739088][ T76] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.832578][ T76] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.880018][ T4276] netlink: 'syz.4.204': attribute type 3 has an invalid length. [ 74.918349][ T4276] netlink: 'syz.4.204': attribute type 1 has an invalid length. [ 74.947949][ T4276] netlink: 216 bytes leftover after parsing attributes in process `syz.4.204'. [ 75.055900][ T76] bridge_slave_1: left allmulticast mode [ 75.072285][ T76] bridge_slave_1: left promiscuous mode [ 75.095761][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.114348][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.204'. [ 75.126826][ T76] bridge_slave_0: left allmulticast mode [ 75.143481][ T76] bridge_slave_0: left promiscuous mode [ 75.161332][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.172954][ T4279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 75.337230][ T76] bridge0 (unregistering): left allmulticast mode [ 75.419226][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.449666][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.463030][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 75.463048][ T28] audit: type=1400 audit(1778856072.204:527): avc: denied { read } for pid=4286 comm="syz.3.208" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.503667][ T76] bond0 (unregistering): Released all slaves [ 75.531612][ T28] audit: type=1400 audit(1778856072.204:528): avc: denied { open } for pid=4286 comm="syz.3.208" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 75.586093][ T76] tipc: Left network mode [ 75.596432][ T76] hsr_slave_0: left promiscuous mode [ 75.609792][ T76] hsr_slave_1: left promiscuous mode [ 75.615562][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.623396][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.639455][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.649207][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.671500][ T76] veth1_macvtap: left promiscuous mode [ 75.688178][ T76] veth0_macvtap: left promiscuous mode [ 75.715173][ T76] veth1_vlan: left promiscuous mode [ 75.730716][ T76] veth0_vlan: left promiscuous mode [ 75.767729][ T28] audit: type=1400 audit(1778856072.504:529): avc: denied { bind } for pid=4292 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 75.988555][ T76] team0 (unregistering): Port device team_slave_1 removed [ 76.016025][ T76] team0 (unregistering): Port device team_slave_0 removed [ 76.143170][ T4303] loop2: detected capacity change from 0 to 512 [ 76.242190][ T4303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.332314][ T4303] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.382398][ T4302] loop0: detected capacity change from 0 to 128 [ 76.405668][ T28] audit: type=1400 audit(1778856073.144:530): avc: denied { write } for pid=4309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.470605][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 76.510089][ T28] audit: type=1400 audit(1778856073.174:531): avc: denied { write } for pid=4327 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.518473][ T4332] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.212: corrupted xattr block 33: invalid ea_ino [ 76.608301][ T76] IPVS: stop unused estimator thread 0... [ 76.655870][ T4332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 76.745046][ T4332] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.212: corrupted xattr block 33: invalid ea_ino [ 76.804012][ T4332] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 76.816694][ T4332] EXT4-fs error (device loop2): ext4_xattr_block_find:1881: inode #15: comm syz.2.212: corrupted xattr block 33: invalid ea_ino [ 76.859459][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.876786][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.884127][ T4283] bridge_slave_0: entered allmulticast mode [ 76.894193][ T4283] bridge_slave_0: entered promiscuous mode [ 76.917842][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.926872][ T28] audit: type=1400 audit(1778856073.664:532): avc: denied { write } for pid=4338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.956177][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.969601][ T4283] bridge_slave_1: entered allmulticast mode [ 76.986893][ T4283] bridge_slave_1: entered promiscuous mode [ 76.998925][ T28] audit: type=1400 audit(1778856073.744:533): avc: denied { write } for pid=4352 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.114015][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 77.120866][ T4359] netlink: 'syz.4.216': attribute type 3 has an invalid length. [ 77.134919][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.154366][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.169808][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.188570][ T4359] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 77.228215][ T4359] netlink: 216 bytes leftover after parsing attributes in process `syz.4.216'. [ 77.248374][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 77.265308][ T4283] team0: Port device team_slave_0 added [ 77.279856][ T4283] team0: Port device team_slave_1 added [ 77.296337][ T4361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4361 comm=syz.3.217 [ 77.343627][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.369106][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.464021][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.523189][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.537697][ T28] audit: type=1400 audit(1778856074.274:534): avc: denied { write } for pid=4367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.563888][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.619493][ T28] audit: type=1400 audit(1778856074.304:535): avc: denied { write } for pid=4378 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.663741][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.702634][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.219'. [ 77.713436][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 77.825028][ T4283] hsr_slave_0: entered promiscuous mode [ 77.841658][ T4283] hsr_slave_1: entered promiscuous mode [ 77.856856][ T4283] debugfs: 'hsr0' already exists in 'hsr' [ 77.879608][ T4283] Cannot create hsr debugfs directory [ 78.038294][ T4383] loop2: detected capacity change from 0 to 2048 [ 78.319590][ T4383] loop2: p1 p4 [ 78.324018][ T4383] loop2: p4 size 589824 extends beyond EOD, truncated [ 78.376979][ T28] audit: type=1400 audit(1778856075.114:536): avc: denied { write } for pid=4387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.497566][ T4402] netlink: 'syz.0.220': attribute type 8 has an invalid length. [ 78.528181][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 78.563658][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 78.575654][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 78.586005][ T4403] 9pnet_virtio: no channels available for device ./file0 [ 78.674193][ T4283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.698450][ T4283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.723743][ T4283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.743803][ T4283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.754755][ T4283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.776567][ T4283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.813584][ T4283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.851337][ T4283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.966603][ T4435] netlink: 'syz.4.228': attribute type 3 has an invalid length. [ 78.984341][ T4435] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 78.995608][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.002370][ T4435] netlink: 216 bytes leftover after parsing attributes in process `syz.4.228'. [ 79.041398][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.051399][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'. [ 79.056821][ T4438] loop9: detected capacity change from 0 to 7 [ 79.071502][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.078680][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.089671][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.096827][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.107095][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.133417][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.141703][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.157594][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.170807][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.179208][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.200685][ T4438] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.212458][ T4438] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.224093][ T4438] loop9: unable to read partition table [ 79.231647][ T4438] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 79.278479][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.299125][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 79.325539][ T4283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.435972][ T4452] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.442580][ T4452] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.452289][ T4454] loop2: detected capacity change from 0 to 2048 [ 79.473663][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 79.493826][ T4452] hsr_slave_0: left promiscuous mode [ 79.507327][ T4452] hsr_slave_1: left promiscuous mode [ 79.520403][ T4454] loop2: p1 p4 [ 79.527275][ T4454] loop2: p4 size 589824 extends beyond EOD, truncated [ 79.633516][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.765755][ T4468] loop3: detected capacity change from 0 to 2048 [ 80.019686][ T4468] loop3: p1 p4 [ 80.128548][ T4468] loop3: p4 size 589824 extends beyond EOD, truncated [ 80.429121][ T4283] veth0_vlan: entered promiscuous mode [ 80.472362][ T4283] veth1_vlan: entered promiscuous mode [ 80.563084][ T4283] veth0_macvtap: entered promiscuous mode [ 80.601032][ T4283] veth1_macvtap: entered promiscuous mode [ 80.674457][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.742398][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.788248][ T3460] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.829653][ T3460] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.878373][ T3460] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.907147][ T3460] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.071067][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.207'. [ 81.134092][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 81.134111][ T28] audit: type=1400 audit(1778856077.874:559): avc: denied { name_bind } for pid=4500 comm="syz.5.207" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 81.180040][ T4503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 81.269473][ T4505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.243'. [ 81.610412][ T4510] loop4: detected capacity change from 0 to 512 [ 81.643253][ T4510] EXT4-fs (loop4): 1 orphan inode deleted [ 81.661349][ T4510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.855902][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.884470][ T4520] loop0: detected capacity change from 0 to 128 [ 81.897520][ T4522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.246'. [ 82.249526][ T4524] atomic_op ffff88811b7fa128 conn xmit_atomic 0000000000000000 [ 82.543781][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 82.685637][ T4530] team0 (unregistering): Port device team_slave_0 removed [ 82.739361][ T4530] team0 (unregistering): Port device team_slave_1 removed [ 82.746775][ T28] audit: type=1326 audit(1778856079.484:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 82.773421][ T4545] FAULT_INJECTION: forcing a failure. [ 82.773421][ T4545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.792833][ T28] audit: type=1326 audit(1778856079.484:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 82.811336][ T4545] CPU: 0 UID: 0 PID: 4545 Comm: syz.4.252 Tainted: G W syzkaller #0 PREEMPT(full) [ 82.811372][ T4545] Tainted: [W]=WARN [ 82.811379][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 82.811450][ T4545] Call Trace: [ 82.811457][ T4545] [ 82.811472][ T4545] __dump_stack+0x1d/0x30 [ 82.811497][ T4545] dump_stack_lvl+0x95/0xd0 [ 82.811584][ T4545] dump_stack+0x15/0x1b [ 82.811603][ T4545] should_fail_ex+0x263/0x280 [ 82.811702][ T4545] should_fail+0xb/0x20 [ 82.811726][ T4545] should_fail_usercopy+0x1a/0x20 [ 82.811754][ T4545] strncpy_from_user+0x27/0x250 [ 82.811779][ T4545] path_setxattrat+0xeb/0x310 [ 82.811827][ T4545] __x64_sys_fsetxattr+0x6b/0x80 [ 82.811849][ T4545] x64_sys_call+0x2f0e/0x3020 [ 82.811876][ T4545] do_syscall_64+0x12c/0x3b0 [ 82.811904][ T4545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.812000][ T4545] RIP: 0033:0x7fc127fdce59 [ 82.812018][ T4545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.812035][ T4545] RSP: 002b:00007fc126a2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 82.812058][ T4545] RAX: ffffffffffffffda RBX: 00007fc128255fa0 RCX: 00007fc127fdce59 [ 82.812152][ T4545] RDX: 0000200000000880 RSI: 0000200000000400 RDI: 0000000000000000 [ 82.812204][ T4545] RBP: 00007fc126a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.812217][ T4545] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 82.812306][ T4545] R13: 00007fc128256038 R14: 00007fc128255fa0 R15: 00007ffc41ef0198 [ 82.812325][ T4545] [ 82.986633][ T4539] loop5: detected capacity change from 0 to 8192 [ 83.012288][ T4530] team0 (unregistering): Port device bond1 removed [ 83.024414][ T28] audit: type=1326 audit(1778856079.514:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 83.050221][ T28] audit: type=1326 audit(1778856079.514:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc127f9d68e code=0x7ffc0000 [ 83.075908][ T28] audit: type=1326 audit(1778856079.514:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 83.076418][ T4551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.253'. [ 83.101502][ T28] audit: type=1326 audit(1778856079.514:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc127f9d68e code=0x7ffc0000 [ 83.136448][ T28] audit: type=1326 audit(1778856079.514:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 83.162075][ T28] audit: type=1326 audit(1778856079.534:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fc127f9d68e code=0x7ffc0000 [ 83.197028][ T28] audit: type=1326 audit(1778856079.534:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4544 comm="syz.4.252" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc127f9d68e code=0x7ffc0000 [ 83.268307][ T4558] loop5: detected capacity change from 0 to 512 [ 83.323171][ T4558] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.344578][ T4558] EXT4-fs (loop5): 1 truncate cleaned up [ 83.346446][ T4560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.257'. [ 83.351020][ T4558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.384287][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.468652][ T4568] loop0: detected capacity change from 0 to 2048 [ 83.490047][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.259'. [ 83.509494][ T4568] loop0: p1 p4 [ 83.517884][ T4568] loop0: p4 size 589824 extends beyond EOD, truncated [ 83.946642][ T4583] loop9: detected capacity change from 0 to 7 [ 83.981742][ T4583] loop9: unable to read partition table [ 84.000769][ T4583] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 84.094253][ T4588] loop9: detected capacity change from 0 to 7 [ 84.122404][ T4588] buffer_io_error: 14 callbacks suppressed [ 84.122420][ T4588] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.163340][ T4588] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.189055][ T4588] loop9: unable to read partition table [ 84.214890][ T4588] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 84.216112][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.269976][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.303178][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.324812][ T4594] loop4: detected capacity change from 0 to 512 [ 84.329390][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.356477][ T4594] EXT4-fs (loop4): inodes count not valid: 76 vs 32 [ 84.366767][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.397032][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.423664][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.429545][ T4597] loop2: detected capacity change from 0 to 2048 [ 84.453872][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 84.480632][ T4597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.515274][ T4605] loop4: detected capacity change from 0 to 512 [ 84.522504][ T4605] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 84.537673][ T4605] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.272: Invalid inode bitmap blk 4 in block_group 0 [ 84.579429][ T4605] loop4: lost filesystem error report for type 5 error -117 [ 84.581377][ T4605] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.603050][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.644230][ T4610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.675250][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.783816][ T4618] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 84.784027][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.837397][ T4618] EXT4-fs (loop3): 1 truncate cleaned up [ 84.883715][ T4620] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.911878][ T4627] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e098, mo2=0002] [ 84.920896][ T4627] System zones: 0-1, 3-8 [ 84.937234][ T4618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.985221][ T4627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.002069][ T4627] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.013581][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.153464][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.496273][ T4642] atomic_op ffff8881057ec528 conn xmit_atomic 0000000000000000 [ 86.309302][ T4649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32016 sclass=netlink_route_socket pid=4649 comm=syz.5.285 [ 86.408428][ T4652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.285'. [ 86.753371][ T4658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 86.799096][ T4659] set_capacity_and_notify: 4 callbacks suppressed [ 86.799130][ T4659] loop0: detected capacity change from 0 to 2048 [ 86.819604][ T4654] loop2: detected capacity change from 0 to 512 [ 86.847016][ T4654] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 86.859774][ T4654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 86.875098][ T4654] System zones: 1-12 [ 86.886588][ T4662] loop4: detected capacity change from 0 to 512 [ 86.888695][ T4654] EXT4-fs (loop2): orphan cleanup on readonly fs [ 86.902049][ T4654] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.286: bg 0: block 361: padding at end of block bitmap is not set [ 86.921568][ T4654] loop2: lost filesystem error report for type 5 error -117 [ 86.921865][ T4654] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 86.929238][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 86.929260][ C0] EXT4-fs (loop2): initial error at time 1778856083: ext4_validate_block_bitmap:441 [ 86.929283][ C0] EXT4-fs (loop2): last error at time 1778856083: ext4_validate_block_bitmap:441 [ 86.963824][ T4659] loop0: p1 p4 [ 86.977164][ T4666] FAULT_INJECTION: forcing a failure. [ 86.977164][ T4666] name failslab, interval 1, probability 0, space 0, times 1 [ 87.017361][ T4659] loop0: p4 size 589824 extends beyond EOD, truncated [ 87.055149][ T4662] EXT4-fs error (device loop4): ext4_free_inode:354: comm syz.4.287: bit already cleared for inode 11 [ 87.086395][ T4666] CPU: 0 UID: 0 PID: 4666 Comm: syz.3.288 Tainted: G W syzkaller #0 PREEMPT(full) [ 87.086428][ T4666] Tainted: [W]=WARN [ 87.086437][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 87.086451][ T4666] Call Trace: [ 87.086460][ T4666] [ 87.086470][ T4666] __dump_stack+0x1d/0x30 [ 87.086507][ T4666] dump_stack_lvl+0x95/0xd0 [ 87.086594][ T4666] dump_stack+0x15/0x1b [ 87.086667][ T4666] should_fail_ex+0x263/0x280 [ 87.086774][ T4666] ? __se_sys_memfd_create+0x1df/0x3b0 [ 87.086862][ T4666] should_failslab+0x8c/0xb0 [ 87.087037][ T4666] __kmalloc_cache_noprof+0x5f/0x400 [ 87.087073][ T4666] ? fput+0x8f/0xc0 [ 87.087098][ T4666] __se_sys_memfd_create+0x1df/0x3b0 [ 87.087211][ T4666] __x64_sys_memfd_create+0x31/0x40 [ 87.087239][ T4666] x64_sys_call+0x1f22/0x3020 [ 87.087265][ T4666] do_syscall_64+0x12c/0x3b0 [ 87.087306][ T4666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.087340][ T4666] RIP: 0033:0x7f2aed46ce59 [ 87.087356][ T4666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.087373][ T4666] RSP: 002b:00007f2aebea5e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 87.087396][ T4666] RAX: ffffffffffffffda RBX: 000000000000047a RCX: 00007f2aed46ce59 [ 87.087410][ T4666] RDX: 00007f2aebea5ee0 RSI: 0000000000000000 RDI: 00007f2aed502f4f [ 87.087426][ T4666] RBP: 00002000000006c0 R08: 00000000ffffffff R09: 0000000000000000 [ 87.087442][ T4666] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000000 [ 87.087457][ T4666] R13: 00007f2aebea5ee0 R14: 00007f2aebea5ea0 R15: 00002000000001c0 [ 87.087537][ T4666] [ 87.138072][ T4654] loop2: lost filesystem error report for type 5 error -117 [ 87.156327][ T4662] loop4: lost filesystem error report for type 5 error -117 [ 87.255061][ T4654] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.286: invalid indirect mapped block 12 (level 1) [ 87.255101][ T4654] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.267730][ T4662] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 87.273056][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 87.273076][ C0] EXT4-fs (loop4): initial error at time 1778856084: ext4_free_inode:354 [ 87.273103][ C0] EXT4-fs (loop4): last error at time 1778856084: ext4_free_inode:354 [ 87.333634][ T4654] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.286: invalid indirect mapped block 2 (level 2) [ 87.335269][ T4662] loop4: lost filesystem error report for type 5 error -117 [ 87.347399][ T4662] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 87.347426][ T4675] capability: warning: `syz.5.290' uses deprecated v2 capabilities in a way that may be insecure [ 87.354949][ T4662] loop4: lost filesystem error report for type 5 error -117 [ 87.398094][ T4654] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 87.405968][ T4662] EXT4-fs (loop4): 1 orphan inode deleted [ 87.406128][ T4654] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #11: comm syz.2.286: data will be lost [ 87.423660][ T4662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.466291][ T4654] EXT4-fs (loop2): 1 truncate cleaned up [ 87.476844][ T4654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 87.508829][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 87.508847][ T28] audit: type=1400 audit(1778856084.244:591): avc: denied { append } for pid=4677 comm="syz.5.292" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 87.595141][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.619625][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 87.629693][ T4684] loop3: detected capacity change from 0 to 1024 [ 87.674956][ T4684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e098, mo2=0002] [ 87.684419][ T4684] System zones: 0-1, 3-8 [ 87.743402][ T4684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.755650][ T4684] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.062804][ T4696] atomic_op ffff88811b3b6d28 conn xmit_atomic 0000000000000000 [ 88.137824][ T4694] loop0: detected capacity change from 0 to 512 [ 88.268719][ T4694] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.298: invalid indirect mapped block 4294967295 (level 1) [ 88.269666][ T4688] loop4: detected capacity change from 0 to 512 [ 88.308055][ T4688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.328130][ T4694] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.330598][ T4694] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.298: invalid indirect mapped block 4294967295 (level 1) [ 88.339965][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 88.339987][ C1] EXT4-fs (loop0): initial error at time 1778856085: ext4_free_branches:1023: inode 11 [ 88.340016][ C1] EXT4-fs (loop0): last error at time 1778856085: ext4_free_branches:1023: inode 11 [ 88.386711][ T4694] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 88.405738][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.498204][ T4694] EXT4-fs (loop0): 2 truncates cleaned up [ 88.505973][ T4688] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.524021][ T4704] netlink: 268 bytes leftover after parsing attributes in process `syz.3.299'. [ 88.536845][ T4694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.554802][ T4704] netlink: 36 bytes leftover after parsing attributes in process `syz.3.299'. [ 88.565052][ T4688] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 88.602107][ T4704] tipc: Started in network mode [ 88.614961][ T4704] tipc: Node identity ac14140f, cluster identity 4711 [ 88.622992][ T4710] loop2: detected capacity change from 0 to 512 [ 88.630985][ T4704] tipc: New replicast peer: 255.255.255.255 [ 88.640642][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 88.640741][ T4704] tipc: Enabled bearer , priority 10 [ 88.655667][ T4710] EXT4-fs: Ignoring removed oldalloc option [ 88.679382][ T4710] EXT4-fs: Ignoring removed mblk_io_submit option [ 88.716339][ T4710] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 88.734925][ T4688] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.296: inode #0: comm syz.4.296: iget: illegal inode # [ 88.739759][ T4714] loop5: detected capacity change from 0 to 512 [ 88.753548][ T4710] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.301: corrupted in-inode xattr: e_value size too large [ 88.772891][ T4688] loop4: lost filesystem error report for type 5 error -117 [ 88.773869][ T4688] EXT4-fs (loop4): Remounting filesystem read-only [ 88.781962][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 88.782132][ C0] EXT4-fs (loop4): initial error at time 1778856085: ext4_init_orphan_info:583 [ 88.782347][ C0] EXT4-fs (loop4): last error at time 1778856085: ext4_init_orphan_info:583 [ 88.810010][ T4710] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 88.810233][ T4710] EXT4-fs (loop2): Remounting filesystem read-only [ 88.810839][ T4710] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.817689][ T4710] EXT4-fs (loop2): shut down requested (2) [ 88.822334][ T4714] EXT4-fs (loop5): 1 orphan inode deleted [ 88.834523][ T4688] EXT4-fs (loop4): get orphan inode failed [ 88.836161][ T28] audit: type=1400 audit(1778856085.564:592): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 88.836190][ T28] audit: type=1400 audit(1778856085.564:593): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.836278][ T28] audit: type=1400 audit(1778856085.564:594): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.836343][ T28] audit: type=1400 audit(1778856085.564:595): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.836427][ T28] audit: type=1400 audit(1778856085.564:596): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.836468][ T28] audit: type=1400 audit(1778856085.564:597): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.836496][ T28] audit: type=1400 audit(1778856085.564:598): avc: denied { getattr } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 88.945523][ T28] audit: type=1400 audit(1778856085.684:599): avc: denied { write } for pid=4708 comm="syz.2.301" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.965277][ T4714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.995643][ T4688] EXT4-fs (loop4): mount failed [ 89.005677][ T4718] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 89.132353][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.199831][ T28] audit: type=1400 audit(1778856085.934:600): avc: denied { create } for pid=4720 comm="syz.5.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.250589][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.403814][ T4739] FAULT_INJECTION: forcing a failure. [ 89.403814][ T4739] name failslab, interval 1, probability 0, space 0, times 0 [ 89.425714][ T4742] tmpfs: Unknown parameter 'grpquota' [ 89.482554][ T4739] CPU: 0 UID: 0 PID: 4739 Comm: syz.3.307 Tainted: G W syzkaller #0 PREEMPT(full) [ 89.482592][ T4739] Tainted: [W]=WARN [ 89.482600][ T4739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 89.482613][ T4739] Call Trace: [ 89.482621][ T4739] [ 89.482631][ T4739] __dump_stack+0x1d/0x30 [ 89.482670][ T4739] dump_stack_lvl+0x95/0xd0 [ 89.482693][ T4739] dump_stack+0x15/0x1b [ 89.482762][ T4739] should_fail_ex+0x263/0x280 [ 89.482792][ T4739] should_failslab+0x8c/0xb0 [ 89.482825][ T4739] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 89.482860][ T4739] ? __alloc_skb+0x2d6/0x690 [ 89.483035][ T4739] __alloc_skb+0x2d6/0x690 [ 89.483056][ T4739] ? __alloc_skb+0x200/0x690 [ 89.483076][ T4739] netlink_alloc_large_skb+0xbf/0xf0 [ 89.483146][ T4739] netlink_sendmsg+0x40c/0x6f0 [ 89.483180][ T4739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.483290][ T4739] ____sys_sendmsg+0x563/0x5b0 [ 89.483319][ T4739] ___sys_sendmsg+0x195/0x1e0 [ 89.483343][ T4739] ? path_openat+0x1b01/0x2050 [ 89.483382][ T4739] __sys_sendmmsg+0x185/0x320 [ 89.483470][ T4739] __x64_sys_sendmmsg+0x57/0x70 [ 89.483498][ T4739] x64_sys_call+0x27aa/0x3020 [ 89.483531][ T4739] do_syscall_64+0x12c/0x3b0 [ 89.483563][ T4739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.483631][ T4739] RIP: 0033:0x7f2aed46ce59 [ 89.483651][ T4739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.483671][ T4739] RSP: 002b:00007f2aebec7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 89.483695][ T4739] RAX: ffffffffffffffda RBX: 00007f2aed6e5fa0 RCX: 00007f2aed46ce59 [ 89.483711][ T4739] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 89.483727][ T4739] RBP: 00007f2aebec7090 R08: 0000000000000000 R09: 0000000000000000 [ 89.483740][ T4739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.483826][ T4739] R13: 00007f2aed6e6038 R14: 00007f2aed6e5fa0 R15: 00007ffe91c9d708 [ 89.483928][ T4739] [ 89.612762][ T3382] IPVS: starting estimator thread 0... [ 89.731649][ T4751] loop4: detected capacity change from 0 to 1024 [ 89.748483][ T3286] tipc: Node number set to 2886997007 [ 89.750198][ T4747] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 89.774214][ T4751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e098, mo2=0002] [ 89.783723][ T4741] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 89.799345][ T4744] loop2: detected capacity change from 0 to 512 [ 89.841627][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.887635][ T4751] System zones: 0-1, 3-8 [ 89.918185][ T4751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.952627][ T4763] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 89.968573][ T4748] IPVS: using max 2448 ests per chain, 122400 per kthread [ 89.997502][ T4763] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.310: invalid indirect mapped block 4294967295 (level 0) [ 90.007534][ T4751] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.028550][ T4763] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 90.028732][ T4763] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.310: invalid indirect mapped block 4294967295 (level 1) [ 90.051994][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 90.052013][ C1] EXT4-fs (loop0): initial error at time 1778856086: ext4_free_branches:1023: inode 16 [ 90.052039][ C1] EXT4-fs (loop0): last error at time 1778856086: ext4_free_branches:1023: inode 16 [ 90.125052][ T4763] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 90.125550][ T4763] EXT4-fs (loop0): 1 orphan inode deleted [ 90.153293][ T4763] EXT4-fs (loop0): 1 truncate cleaned up [ 90.168800][ T4763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.170901][ T4744] EXT4-fs (loop2): 1 orphan inode deleted [ 90.187243][ T4744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.282418][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.326634][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.354280][ T4789] EXT4-fs: Ignoring removed orlov option [ 90.406121][ T4789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.566396][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.570310][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 90.628200][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'. [ 90.654619][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.673188][ T4814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.739827][ T4814] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.811876][ T4821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.318'. [ 90.828137][ T4821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.318'. [ 90.850234][ T4821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.318'. [ 90.888406][ T4821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.318'. [ 90.983506][ T4821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.318'. [ 91.050762][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.070708][ T4827] FAULT_INJECTION: forcing a failure. [ 91.070708][ T4827] name failslab, interval 1, probability 0, space 0, times 0 [ 91.104147][ T4827] CPU: 0 UID: 0 PID: 4827 Comm: syz.5.321 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.104183][ T4827] Tainted: [W]=WARN [ 91.104213][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.104227][ T4827] Call Trace: [ 91.104234][ T4827] [ 91.104263][ T4827] __dump_stack+0x1d/0x30 [ 91.104292][ T4827] dump_stack_lvl+0x95/0xd0 [ 91.104315][ T4827] dump_stack+0x15/0x1b [ 91.104336][ T4827] should_fail_ex+0x263/0x280 [ 91.104372][ T4827] should_failslab+0x8c/0xb0 [ 91.104407][ T4827] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 91.104476][ T4827] ? __alloc_skb+0x2d6/0x690 [ 91.104498][ T4827] __alloc_skb+0x2d6/0x690 [ 91.104519][ T4827] ? __alloc_skb+0x200/0x690 [ 91.104541][ T4827] netlink_alloc_large_skb+0xbf/0xf0 [ 91.104634][ T4827] netlink_sendmsg+0x40c/0x6f0 [ 91.104663][ T4827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.104688][ T4827] ____sys_sendmsg+0x563/0x5b0 [ 91.104719][ T4827] ___sys_sendmsg+0x195/0x1e0 [ 91.104793][ T4827] __x64_sys_sendmsg+0xd4/0x160 [ 91.104827][ T4827] x64_sys_call+0x194c/0x3020 [ 91.104857][ T4827] do_syscall_64+0x12c/0x3b0 [ 91.104921][ T4827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.104941][ T4827] RIP: 0033:0x7f53d3a0ce59 [ 91.105024][ T4827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.105040][ T4827] RSP: 002b:00007f53d245f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.105126][ T4827] RAX: ffffffffffffffda RBX: 00007f53d3c85fa0 RCX: 00007f53d3a0ce59 [ 91.105138][ T4827] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000008 [ 91.105150][ T4827] RBP: 00007f53d245f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.105161][ T4827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.105172][ T4827] R13: 00007f53d3c86038 R14: 00007f53d3c85fa0 R15: 00007fff655d2a68 [ 91.105189][ T4827] [ 91.530312][ T4835] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 91.560848][ T4835] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 91.671013][ T4843] FAULT_INJECTION: forcing a failure. [ 91.671013][ T4843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.692153][ T4843] CPU: 1 UID: 0 PID: 4843 Comm: syz.4.326 Tainted: G W syzkaller #0 PREEMPT(full) [ 91.692271][ T4843] Tainted: [W]=WARN [ 91.692280][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.692295][ T4843] Call Trace: [ 91.692302][ T4843] [ 91.692311][ T4843] __dump_stack+0x1d/0x30 [ 91.692338][ T4843] dump_stack_lvl+0x95/0xd0 [ 91.692364][ T4843] dump_stack+0x15/0x1b [ 91.692405][ T4843] should_fail_ex+0x263/0x280 [ 91.692488][ T4843] should_fail+0xb/0x20 [ 91.692514][ T4843] should_fail_usercopy+0x1a/0x20 [ 91.692540][ T4843] _copy_from_iter+0xcf/0xea0 [ 91.692633][ T4843] ? avc_has_perm+0x101/0x190 [ 91.692660][ T4843] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 91.692714][ T4843] bcm_sendmsg+0xc6/0x4a0 [ 91.692748][ T4843] ? __pfx_bcm_sendmsg+0x10/0x10 [ 91.692808][ T4843] ____sys_sendmsg+0x563/0x5b0 [ 91.692834][ T4843] ___sys_sendmsg+0x195/0x1e0 [ 91.692939][ T4843] __x64_sys_sendmsg+0xd4/0x160 [ 91.693009][ T4843] x64_sys_call+0x194c/0x3020 [ 91.693036][ T4843] do_syscall_64+0x12c/0x3b0 [ 91.693069][ T4843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.693089][ T4843] RIP: 0033:0x7fc127fdce59 [ 91.693191][ T4843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.693212][ T4843] RSP: 002b:00007fc126a2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.693235][ T4843] RAX: ffffffffffffffda RBX: 00007fc128255fa0 RCX: 00007fc127fdce59 [ 91.693248][ T4843] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 91.693315][ T4843] RBP: 00007fc126a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 91.693390][ T4843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.693421][ T4843] R13: 00007fc128256038 R14: 00007fc128255fa0 R15: 00007ffc41ef0198 [ 91.693440][ T4843] [ 91.937537][ T4846] lo: entered allmulticast mode [ 92.033772][ T4846] bY4`Ҙ: renamed from lo [ 92.078100][ T4856] set_capacity_and_notify: 4 callbacks suppressed [ 92.078201][ T4856] loop5: detected capacity change from 0 to 512 [ 92.402957][ T4862] loop0: detected capacity change from 0 to 128 [ 92.458198][ T4862] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.494884][ T4862] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.558151][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 92.558170][ T28] audit: type=1400 audit(1778856089.284:633): avc: denied { write } for pid=4859 comm="syz.0.332" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.689385][ T4865] atomic_op ffff88811ae99928 conn xmit_atomic 0000000000000000 [ 92.829026][ T28] audit: type=1400 audit(1778856089.294:634): avc: denied { write } for pid=4859 comm="syz.0.332" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 92.873411][ T28] audit: type=1400 audit(1778856089.294:635): avc: denied { setattr } for pid=4859 comm="syz.0.332" path="/56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 93.020952][ T28] audit: type=1400 audit(1778856089.764:636): avc: denied { write } for pid=4868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.094858][ T28] audit: type=1400 audit(1778856089.834:637): avc: denied { write } for pid=4884 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.217900][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.610503][ T4781] EXT4-fs (loop3): 1 orphan inode deleted [ 93.805091][ T4781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.995817][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.005406][ T4894] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 94.095979][ T4896] __nla_validate_parse: 32 callbacks suppressed [ 94.096011][ T4896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 94.173424][ T28] audit: type=1400 audit(1778856090.914:638): avc: denied { ioctl } for pid=4897 comm="syz.2.337" path="socket:[9083]" dev="sockfs" ino=9083 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.175733][ T4891] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 94.322039][ T28] audit: type=1400 audit(1778856091.064:639): avc: denied { allowed } for pid=4900 comm="syz.0.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 94.351408][ T4903] loop2: detected capacity change from 0 to 512 [ 94.390389][ T4903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.408173][ T4899] loop3: detected capacity change from 0 to 8192 [ 94.436633][ T4903] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.461151][ T4899] loop3: p1 < > p2 p4 < p5 > [ 94.467774][ T4909] loop9: detected capacity change from 0 to 7 [ 94.470814][ T4899] loop3: partition table partially beyond EOD, truncated [ 94.503676][ T4910] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.339: corrupted xattr block 33: invalid ea_ino [ 94.505578][ T4899] loop3: p1 start 134217728 is beyond EOD, truncated [ 94.521771][ T3290] buffer_io_error: 2 callbacks suppressed [ 94.521786][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.523701][ T4899] loop3: p2 size 591360 extends beyond EOD, truncated [ 94.550784][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.570760][ T4899] loop3: p5 size 591360 extends beyond EOD, truncated [ 94.578394][ T4910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.588886][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.604463][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.619502][ T4910] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.339: corrupted xattr block 33: invalid ea_ino [ 94.632902][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.649915][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.665571][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.676666][ T4911] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.339: corrupted xattr block 33: invalid ea_ino [ 94.694555][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.712497][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.731048][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 94.739996][ T4910] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.765124][ T4911] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.776888][ T4909] loop9: unable to read partition table [ 94.786676][ T4911] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.339: corrupted xattr block 33: invalid ea_ino [ 94.800021][ T4909] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 94.827411][ T4910] EXT4-fs error (device loop2): ext4_xattr_block_find:1881: inode #15: comm syz.2.339: corrupted xattr block 33: invalid ea_ino [ 94.957920][ T28] audit: type=1400 audit(1778856091.694:640): avc: denied { listen } for pid=4913 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.001956][ T28] audit: type=1400 audit(1778856091.694:641): avc: denied { ioctl } for pid=4913 comm="syz.0.342" path="socket:[9098]" dev="sockfs" ino=9098 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.081213][ T4919] FAULT_INJECTION: forcing a failure. [ 95.081213][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.121944][ T28] audit: type=1400 audit(1778856091.694:642): avc: denied { setattr } for pid=4913 comm="syz.0.342" name="SMC6" dev="sockfs" ino=9098 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.144538][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: syz.4.343 Tainted: G W syzkaller #0 PREEMPT(full) [ 95.144574][ T4919] Tainted: [W]=WARN [ 95.144582][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.144595][ T4919] Call Trace: [ 95.144622][ T4919] [ 95.144631][ T4919] __dump_stack+0x1d/0x30 [ 95.144658][ T4919] dump_stack_lvl+0x95/0xd0 [ 95.144745][ T4919] dump_stack+0x15/0x1b [ 95.144767][ T4919] should_fail_ex+0x263/0x280 [ 95.144798][ T4919] should_fail+0xb/0x20 [ 95.144823][ T4919] should_fail_usercopy+0x1a/0x20 [ 95.144867][ T4919] _copy_from_iter+0xcf/0xea0 [ 95.144895][ T4919] ? avc_has_perm+0x101/0x190 [ 95.144985][ T4919] ? selinux_socket_sendmsg+0x1ab/0x1e0 [ 95.145019][ T4919] bcm_sendmsg+0xc6/0x4a0 [ 95.145117][ T4919] ? __pfx_bcm_sendmsg+0x10/0x10 [ 95.145145][ T4919] ____sys_sendmsg+0x563/0x5b0 [ 95.145173][ T4919] ___sys_sendmsg+0x195/0x1e0 [ 95.145213][ T4919] __x64_sys_sendmsg+0xd4/0x160 [ 95.145240][ T4919] x64_sys_call+0x194c/0x3020 [ 95.145265][ T4919] do_syscall_64+0x12c/0x3b0 [ 95.145295][ T4919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.145356][ T4919] RIP: 0033:0x7fc127fdce59 [ 95.145374][ T4919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.145393][ T4919] RSP: 002b:00007fc126a0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.145416][ T4919] RAX: ffffffffffffffda RBX: 00007fc128256090 RCX: 00007fc127fdce59 [ 95.145434][ T4919] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 95.145449][ T4919] RBP: 00007fc126a0e090 R08: 0000000000000000 R09: 0000000000000000 [ 95.145463][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.145477][ T4919] R13: 00007fc128256128 R14: 00007fc128256090 R15: 00007ffc41ef0198 [ 95.145497][ T4919] [ 95.196597][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 95.373091][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.753876][ T4930] atomic_op ffff88810c7dc528 conn xmit_atomic 0000000000000000 [ 95.825848][ T4927] loop9: detected capacity change from 0 to 7 [ 95.876524][ T4927] loop9: unable to read partition table [ 95.892990][ T4927] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 95.910405][ T4929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.347'. [ 95.953136][ T4929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.347'. [ 96.532818][ T4944] loop0: detected capacity change from 0 to 512 [ 96.893267][ T4946] loop2: detected capacity change from 0 to 764 [ 96.938377][ T4944] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.460794][ T4944] EXT4-fs (loop0): 1 truncate cleaned up [ 97.467837][ T4924] loop5: detected capacity change from 0 to 512 [ 97.482969][ T4944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.607527][ T4943] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 98.083367][ T4935] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 98.574844][ T4924] EXT4-fs (loop5): 1 orphan inode deleted [ 98.704643][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.754822][ T4924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.789524][ T4956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.354'. [ 98.868847][ T4959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 98.899342][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.977867][ T4962] loop0: detected capacity change from 0 to 512 [ 99.032558][ T4962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.048552][ T4962] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.082099][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.356'. [ 99.098120][ T4962] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.357: corrupted xattr block 33: invalid ea_ino [ 99.111709][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.5.356'. [ 99.140786][ T4962] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 99.158144][ T4962] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.357: corrupted xattr block 33: invalid ea_ino [ 99.158306][ T4969] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.357: corrupted xattr block 33: invalid ea_ino [ 99.193030][ T4962] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 99.228507][ T4969] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 99.245148][ T4962] EXT4-fs error (device loop0): ext4_xattr_block_find:1881: inode #15: comm syz.0.357: corrupted xattr block 33: invalid ea_ino [ 99.273984][ T4969] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.357: corrupted xattr block 33: invalid ea_ino [ 99.341714][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.426494][ T4973] loop0: detected capacity change from 0 to 4096 [ 99.456054][ T4973] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.545451][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 99.545468][ T28] audit: type=1400 audit(1778856096.284:645): avc: denied { create } for pid=4972 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.662004][ T28] audit: type=1400 audit(1778856096.314:646): avc: denied { connect } for pid=4972 comm="syz.0.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.682894][ T28] audit: type=1400 audit(1778856096.314:647): avc: denied { write } for pid=4972 comm="syz.0.358" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.705356][ T28] audit: type=1400 audit(1778856096.334:648): avc: denied { write } for pid=4972 comm="syz.0.358" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.994760][ T4989] loop5: detected capacity change from 0 to 128 [ 100.003158][ T4986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 100.128867][ T4992] FAULT_INJECTION: forcing a failure. [ 100.128867][ T4992] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.211076][ T4992] CPU: 1 UID: 0 PID: 4992 Comm: syz.5.361 Tainted: G W syzkaller #0 PREEMPT(full) [ 100.211197][ T4992] Tainted: [W]=WARN [ 100.211205][ T4992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 100.211277][ T4992] Call Trace: [ 100.211285][ T4992] [ 100.211293][ T4992] __dump_stack+0x1d/0x30 [ 100.211321][ T4992] dump_stack_lvl+0x95/0xd0 [ 100.211350][ T4992] dump_stack+0x15/0x1b [ 100.211425][ T4992] should_fail_ex+0x263/0x280 [ 100.211497][ T4992] should_fail+0xb/0x20 [ 100.211527][ T4992] should_fail_usercopy+0x1a/0x20 [ 100.211560][ T4992] _copy_to_user+0x20/0xa0 [ 100.211627][ T4992] simple_read_from_buffer+0xb5/0x130 [ 100.211666][ T4992] proc_fail_nth_read+0x10e/0x150 [ 100.211722][ T4992] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.211825][ T4992] vfs_read+0x1ab/0x7f0 [ 100.211853][ T4992] ? __rcu_read_unlock+0x4e/0x70 [ 100.211876][ T4992] ? __fget_files+0x184/0x1c0 [ 100.211934][ T4992] ? mutex_lock+0x57/0x90 [ 100.211959][ T4992] ksys_read+0xdc/0x1a0 [ 100.212101][ T4992] __x64_sys_read+0x40/0x50 [ 100.212129][ T4992] x64_sys_call+0x2886/0x3020 [ 100.212226][ T4992] do_syscall_64+0x12c/0x3b0 [ 100.212252][ T4992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.212273][ T4992] RIP: 0033:0x7f53d39cd68e [ 100.212293][ T4992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.212315][ T4992] RSP: 002b:00007f53d245efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.212403][ T4992] RAX: ffffffffffffffda RBX: 00007f53d245f6c0 RCX: 00007f53d39cd68e [ 100.212421][ T4992] RDX: 000000000000000f RSI: 00007f53d245f0a0 RDI: 0000000000000003 [ 100.212434][ T4992] RBP: 00007f53d245f090 R08: 0000000000000000 R09: 0000000000000000 [ 100.212447][ T4992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.212459][ T4992] R13: 00007f53d3c86038 R14: 00007f53d3c85fa0 R15: 00007fff655d2a68 [ 100.212477][ T4992] [ 100.458908][ T28] audit: type=1326 audit(1778856097.204:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.4.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 100.496364][ T4997] netlink: 'syz.4.362': attribute type 10 has an invalid length. [ 100.509468][ T4998] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 100.561490][ T4997] team0: Port device veth0_to_hsr added [ 100.566040][ T28] audit: type=1326 audit(1778856097.204:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.4.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 100.609796][ T4996] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 100.638693][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.651263][ T28] audit: type=1326 audit(1778856097.204:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.4.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 100.751005][ T28] audit: type=1326 audit(1778856097.224:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.4.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 100.824769][ T28] audit: type=1326 audit(1778856097.224:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.4.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 100.899187][ T28] audit: type=1326 audit(1778856097.224:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4993 comm="syz.4.362" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc127fdce59 code=0x7ffc0000 [ 100.983042][ T4994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4994 comm=syz.4.362 [ 101.012790][ T5008] loop0: detected capacity change from 0 to 512 [ 101.054631][ T5008] EXT4-fs (loop0): 1 orphan inode deleted [ 101.073408][ T5008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.210683][ T5015] loop3: detected capacity change from 0 to 512 [ 101.250066][ T5015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.262857][ T5015] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.276500][ T5015] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.368: corrupted xattr block 33: invalid ea_ino [ 101.289884][ T5015] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.299091][ T5015] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.368: corrupted xattr block 33: invalid ea_ino [ 101.312426][ T5015] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.323680][ T5015] EXT4-fs error (device loop3): ext4_xattr_block_find:1881: inode #15: comm syz.3.368: corrupted xattr block 33: invalid ea_ino [ 101.337956][ T5015] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.368: corrupted xattr block 33: invalid ea_ino [ 101.351551][ T5015] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 101.360885][ T5015] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.368: corrupted xattr block 33: invalid ea_ino [ 101.385068][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.837539][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.887067][ T5028] loop2: detected capacity change from 0 to 2048 [ 101.994101][ T5028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.155312][ T5028] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.372: bg 0: block 234: padding at end of block bitmap is not set [ 102.179957][ T5028] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 102.199788][ T5028] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.199788][ T5028] [ 102.210363][ T5028] EXT4-fs (loop2): Total free blocks count 0 [ 102.216768][ T5028] EXT4-fs (loop2): Free/Dirty block details [ 102.222816][ T5038] loop0: detected capacity change from 0 to 1024 [ 102.223095][ T5028] EXT4-fs (loop2): free_blocks=0 [ 102.248738][ T5028] EXT4-fs (loop2): dirty_blocks=112 [ 102.253805][ T5038] EXT4-fs: Ignoring removed orlov option [ 102.264461][ T5038] EXT4-fs: Mount option(s) incompatible with ext2 [ 102.290908][ T5028] EXT4-fs (loop2): Block reservation details [ 102.310357][ T5037] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 102.328281][ T5028] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 102.346432][ T5041] loop4: detected capacity change from 0 to 2048 [ 102.366015][ T5042] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 102.383736][ T5041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.385689][ T5028] syz.2.372 (5028) used greatest stack depth: 9032 bytes left [ 102.427701][ T5041] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.376: bg 0: block 234: padding at end of block bitmap is not set [ 102.444100][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 102.456408][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.483593][ T5041] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 102.505246][ T5051] loop0: detected capacity change from 0 to 1024 [ 102.518838][ T5041] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.518838][ T5041] [ 102.528976][ T5041] EXT4-fs (loop4): Total free blocks count 0 [ 102.544800][ T5051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 102.554386][ T5041] EXT4-fs (loop4): Free/Dirty block details [ 102.566539][ T5041] EXT4-fs (loop4): free_blocks=0 [ 102.574487][ T5051] System zones: 0-1, 3-8 [ 102.579957][ T5041] EXT4-fs (loop4): dirty_blocks=112 [ 102.588610][ T5051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.602408][ T5041] EXT4-fs (loop4): Block reservation details [ 102.613973][ T5041] EXT4-fs (loop4): i_reserved_data_blocks=7 [ 102.625527][ T5051] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.683015][ T3302] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 102.709467][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.724665][ T12] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 102.753039][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 102.795268][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.795268][ T12] [ 102.816068][ T30] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 4) [ 102.844625][ T30] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 102.871801][ T30] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.871801][ T30] [ 102.893823][ T3297] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 102.915692][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.945803][ T5060] loop4: detected capacity change from 0 to 512 [ 102.955035][ T5055] loop2: detected capacity change from 0 to 512 [ 102.965455][ T5062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.382'. [ 103.025712][ T5060] EXT4-fs (loop4): 1 orphan inode deleted [ 103.030451][ T5055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 103.041349][ T5060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.127041][ T5055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.152569][ T5055] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.261799][ T5055] EXT4-fs error (device loop2): ext4_init_orphan_info:583: comm syz.2.377: inode #0: comm syz.2.377: iget: illegal inode # [ 103.282356][ T5055] loop2: lost filesystem error report for type 5 error -117 [ 103.286544][ T5055] EXT4-fs (loop2): Remounting filesystem read-only [ 103.288052][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 103.288074][ C1] EXT4-fs (loop2): initial error at time 1778856100: ext4_init_orphan_info:583 [ 103.288101][ C1] EXT4-fs (loop2): last error at time 1778856100: ext4_init_orphan_info:583 [ 103.341495][ T5055] EXT4-fs (loop2): get orphan inode failed [ 103.367408][ T5055] EXT4-fs (loop2): mount failed [ 103.513025][ T5073] atomic_op ffff888137c42528 conn xmit_atomic 0000000000000000 [ 103.691017][ T5078] tmpfs: Unknown parameter 'grpquota' [ 103.705457][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.780959][ T5080] loop4: detected capacity change from 0 to 2048 [ 103.817299][ T5080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.033328][ T5087] loop2: detected capacity change from 0 to 2048 [ 104.046177][ T5089] loop0: detected capacity change from 0 to 512 [ 104.066730][ T5089] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 104.076400][ T5089] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 104.086358][ T5087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.117961][ T5089] EXT4-fs (loop0): 1 truncate cleaned up [ 104.133836][ T5087] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.388: bg 0: block 234: padding at end of block bitmap is not set [ 104.151830][ T5089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.174313][ T5087] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 104.208418][ T5087] EXT4-fs (loop2): This should not happen!! Data will be lost [ 104.208418][ T5087] [ 104.218406][ T5087] EXT4-fs (loop2): Total free blocks count 0 [ 104.224559][ T5087] EXT4-fs (loop2): Free/Dirty block details [ 104.230835][ T5087] EXT4-fs (loop2): free_blocks=0 [ 104.236174][ T5087] EXT4-fs (loop2): dirty_blocks=112 [ 104.241660][ T5087] EXT4-fs (loop2): Block reservation details [ 104.247778][ T5087] EXT4-fs (loop2): i_reserved_data_blocks=7 [ 104.277058][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 104.302174][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.947859][ T28] kauditd_printk_skb: 633 callbacks suppressed [ 104.947974][ T28] audit: type=1400 audit(1778856101.424:1288): avc: denied { read } for pid=5100 comm="syz.2.390" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.001065][ T5095] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 105.059651][ T5106] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 105.071741][ T28] audit: type=1400 audit(1778856101.724:1289): avc: denied { execute } for pid=5100 comm="syz.2.390" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=9836 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 105.176661][ T28] audit: type=1400 audit(1778856101.744:1290): avc: denied { write } for pid=5088 comm="syz.0.389" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.315433][ T5113] loop5: detected capacity change from 0 to 512 [ 105.329773][ T28] audit: type=1400 audit(1778856102.044:1291): avc: denied { bind } for pid=5112 comm="syz.5.393" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 105.332040][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.359131][ T28] audit: type=1400 audit(1778856102.044:1292): avc: denied { name_bind } for pid=5112 comm="syz.5.393" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 105.359186][ T28] audit: type=1400 audit(1778856102.044:1293): avc: denied { node_bind } for pid=5112 comm="syz.5.393" saddr=fe80::aa src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 105.405768][ T5113] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.426092][ T5113] EXT4-fs warning (device loop5): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 105.458325][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 105.483165][ T5113] netlink: 44 bytes leftover after parsing attributes in process `syz.5.393'. [ 105.489105][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 105.493813][ T5113] IPVS: Unknown mcast interface: vetN1_macvtap [ 105.531714][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 105.531714][ T12] [ 105.546515][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 105.551433][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 105.571806][ T12] EXT4-fs (loop4): Free/Dirty block details [ 105.584325][ T12] EXT4-fs (loop4): free_blocks=4096 [ 105.594709][ T12] EXT4-fs (loop4): dirty_blocks=32 [ 105.605894][ T12] EXT4-fs (loop4): Block reservation details [ 105.617546][ T12] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 105.618105][ T5113] tmpfs: Bad value for 'mpol' [ 105.631421][ T3460] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 105.649035][ T3302] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 105.914668][ T5123] loop3: detected capacity change from 0 to 1024 [ 105.989508][ T5123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.026137][ T28] audit: type=1400 audit(1778856102.764:1294): avc: denied { write } for pid=5122 comm="syz.3.397" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.085675][ T28] audit: type=1400 audit(1778856102.794:1295): avc: denied { create } for pid=5122 comm="syz.3.397" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 106.151084][ T28] audit: type=1400 audit(1778856102.794:1296): avc: denied { write } for pid=5122 comm="syz.3.397" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 106.220325][ T28] audit: type=1400 audit(1778856102.794:1297): avc: denied { write } for pid=5122 comm="syz.3.397" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 106.446188][ T5135] xt_ecn: cannot match TCP bits for non-tcp packets [ 107.452589][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.393658][ T5145] loop3: detected capacity change from 0 to 1024 [ 108.418680][ T5145] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 108.429272][ T5145] System zones: 0-1, 3-8 [ 108.441257][ T5147] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 108.455674][ T5150] loop4: detected capacity change from 0 to 512 [ 108.459263][ T5145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 108.486162][ T5150] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.508159][ T5145] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.521128][ T5154] loop0: detected capacity change from 0 to 2048 [ 108.540845][ T5150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.403: invalid indirect mapped block 4294967295 (level 0) [ 108.563431][ T5150] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 108.571003][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 108.586990][ C1] EXT4-fs (loop4): initial error at time 1778856105: ext4_free_branches:1023: inode 16 [ 108.596966][ C1] EXT4-fs (loop4): last error at time 1778856105: ext4_free_branches:1023: inode 16 [ 108.608237][ T5150] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.403: invalid indirect mapped block 4294967295 (level 1) [ 108.622499][ T5150] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 108.634497][ T5143] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 108.733667][ T5157] atomic_op ffff88811cae6928 conn xmit_atomic 0000000000000000 [ 108.756600][ T5150] EXT4-fs (loop4): 1 orphan inode deleted [ 108.762680][ T5150] EXT4-fs (loop4): 1 truncate cleaned up [ 108.769550][ T5150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.783137][ T5154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.795670][ T3460] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:8: lblock 0 mapped to illegal pblock 0 (length 6) [ 108.815920][ T3460] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 108.871961][ T5154] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.404: bg 0: block 234: padding at end of block bitmap is not set [ 108.894830][ T3460] EXT4-fs (loop3): This should not happen!! Data will be lost [ 108.894830][ T3460] [ 108.930070][ T3460] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:8: lblock 8 mapped to illegal pblock 8 (length 4) [ 108.967330][ T5154] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 101 with error 28 [ 108.990061][ T5154] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.990061][ T5154] [ 108.997603][ T3460] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 108.999795][ T5154] EXT4-fs (loop0): Total free blocks count 0 [ 109.018331][ T5154] EXT4-fs (loop0): Free/Dirty block details [ 109.024327][ T5154] EXT4-fs (loop0): free_blocks=0 [ 109.029345][ T5154] EXT4-fs (loop0): dirty_blocks=112 [ 109.034820][ T5154] EXT4-fs (loop0): Block reservation details [ 109.042767][ T5154] EXT4-fs (loop0): i_reserved_data_blocks=7 [ 109.049147][ T3460] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.049147][ T3460] [ 109.061406][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 109.081997][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.131025][ T3297] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 109.165172][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.186476][ T5174] loop5: detected capacity change from 0 to 512 [ 109.224738][ T5174] EXT4-fs: Ignoring removed nobh option [ 109.244045][ T5174] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.272931][ T5174] EXT4-fs (loop5): 1 truncate cleaned up [ 109.288792][ T5174] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.321040][ T5183] loop2: detected capacity change from 0 to 512 [ 109.343172][ T5183] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.368081][ T5183] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 109.395214][ T5186] loop3: detected capacity change from 0 to 1024 [ 109.441666][ T5186] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 109.472077][ T5186] System zones: 0-1, 3-8 [ 109.482669][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 109.525428][ T5186] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.622249][ T56] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 109.658167][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.671318][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 109.708165][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.708165][ T56] [ 109.719522][ T56] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 4) [ 109.734367][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 109.747343][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 109.747343][ T56] [ 109.757544][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 109.769748][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 109.770237][ T5190] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 109.827852][ T5198] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 109.848664][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.419'. [ 109.869734][ T5200] loop3: detected capacity change from 0 to 256 [ 109.890762][ T5200] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.031949][ T5202] : renamed from vlan0 (while UP) [ 110.158339][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.299919][ T5209] loop9: detected capacity change from 0 to 7 [ 110.323755][ T5209] buffer_io_error: 14 callbacks suppressed [ 110.323772][ T5209] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.359774][ T5209] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.376900][ T5209] loop9: unable to read partition table [ 110.377100][ T5211] loop2: detected capacity change from 0 to 1024 [ 110.405672][ T5209] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 110.408888][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.451473][ T5211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e098, mo2=0002] [ 110.459968][ T5211] System zones: 0-1, 3-8 [ 110.470667][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.494369][ T5211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.515592][ T5216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 110.522207][ T5216] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.523560][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.538465][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.544451][ T5211] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.546574][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.568546][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.572949][ T5216] vhci_hcd vhci_hcd.0: Device attached [ 110.577377][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.590166][ T3290] Buffer I/O error on dev loop9, logical block 0, async page read [ 110.609795][ T5219] vhci_hcd vhci_hcd.0: port 0 already used [ 110.830081][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 110.841728][ T5225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 110.868086][ T3286] usb 2-1: SetAddress Request (2) to port 0 [ 110.877901][ T3286] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 110.913793][ T5233] loop2: detected capacity change from 0 to 1024 [ 110.950614][ T5233] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 110.968742][ T5233] System zones: 0-1, 3-8 [ 110.974199][ T5233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.986350][ T5233] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.999844][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 110.999863][ T28] audit: type=1400 audit(1778856107.744:1311): avc: denied { write } for pid=5230 comm="syz.2.428" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.092172][ T56] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 111.140965][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 111.175530][ T28] audit: type=1400 audit(1778856107.914:1312): avc: denied { connect } for pid=5240 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.199452][ T56] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.199452][ T56] [ 111.216700][ T30] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 4) [ 111.240460][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 4 with error 117 [ 111.246214][ T28] audit: type=1400 audit(1778856107.984:1313): avc: denied { read } for pid=5240 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 111.269396][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 111.269396][ T30] [ 111.288856][ T5239] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 111.314078][ T5239] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 111.327870][ T3304] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 111.373099][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.499675][ T28] audit: type=1400 audit(1778856108.244:1314): avc: denied { nlmsg_read } for pid=5240 comm="syz.3.433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.499699][ T5245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 111.653576][ T5254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.739859][ T5254] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.907294][ T5265] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.435: corrupted xattr block 33: invalid ea_ino [ 111.949229][ T5217] vhci_hcd: connection reset by peer [ 111.961021][ T3460] vhci_hcd vhci_hcd.0: stop threads [ 111.974357][ T3460] vhci_hcd vhci_hcd.0: release socket [ 111.985969][ T3460] vhci_hcd vhci_hcd.0: disconnect device [ 111.997489][ T5267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e098, mo2=0002] [ 112.002366][ T5265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 112.031213][ T5267] System zones: 0-1, 3-8 [ 112.038525][ T5265] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.435: corrupted xattr block 33: invalid ea_ino [ 112.039068][ T5268] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.435: corrupted xattr block 33: invalid ea_ino [ 112.080101][ T5267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 112.126314][ T5267] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.151135][ T5265] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 112.174568][ T5268] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 112.202705][ T5276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.441'. [ 112.211851][ T5268] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.435: corrupted xattr block 33: invalid ea_ino [ 112.229765][ T5265] EXT4-fs error (device loop5): ext4_xattr_block_find:1881: inode #15: comm syz.5.435: corrupted xattr block 33: invalid ea_ino [ 112.385870][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.444795][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.759592][ T5294] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 112.833627][ T5282] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 113.033136][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 113.522680][ T28] audit: type=1400 audit(1778856110.254:1315): avc: denied { mounton } for pid=5297 comm="syz.4.446" path="/" dev="ramfs" ino=10104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 113.838197][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 113.884155][ T28] audit: type=1400 audit(1778856110.624:1316): avc: denied { bind } for pid=5321 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.959600][ T28] audit: type=1400 audit(1778856110.684:1317): avc: denied { ioctl } for pid=5321 comm="syz.0.454" path="socket:[10162]" dev="sockfs" ino=10162 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 114.024208][ T28] audit: type=1400 audit(1778856110.684:1318): avc: denied { bind } for pid=5321 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 114.045372][ T5325] netlink: 16 bytes leftover after parsing attributes in process `syz.0.454'. [ 114.070128][ T5325] netlink: 2 bytes leftover after parsing attributes in process `syz.0.454'. [ 114.094118][ T28] audit: type=1326 audit(1778856110.684:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5321 comm="syz.0.454" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7a5eace59 code=0x0 [ 114.253861][ T28] audit: type=1400 audit(1778856110.994:1320): avc: denied { create } for pid=5328 comm="syz.4.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.363859][ T5332] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 114.378160][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 114.420182][ T5340] set_capacity_and_notify: 2 callbacks suppressed [ 114.420199][ T5340] loop5: detected capacity change from 0 to 1024 [ 114.433706][ T5332] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 114.510831][ T5340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.562270][ T5350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.461'. [ 114.768242][ T5340] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.843638][ T5344] loop3: detected capacity change from 0 to 8192 [ 114.941214][ T5344] loop3: p1 < > p2 p4 < p5 > [ 114.969481][ T5362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 114.981162][ T5344] loop3: partition table partially beyond EOD, truncated [ 115.042891][ T5344] loop3: p1 start 134217728 is beyond EOD, truncated [ 115.098055][ T5344] loop3: p2 size 591360 extends beyond EOD, truncated [ 115.106248][ T5344] loop3: p5 size 591360 extends beyond EOD, truncated [ 115.371054][ T5368] sctp: [Deprecated]: syz.0.468 (pid 5368) Use of int in max_burst socket option deprecated. [ 115.371054][ T5368] Use struct sctp_assoc_value instead [ 115.424675][ T5248] syz.5.434 (5248) used greatest stack depth: 7440 bytes left [ 115.617460][ T5377] loop3: detected capacity change from 0 to 1024 [ 115.652391][ T5377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.718154][ T5377] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.782320][ T5385] loop5: detected capacity change from 0 to 512 [ 115.806915][ T5385] EXT4-fs: inline encryption not supported [ 115.818166][ T5385] ext4: Bad value for 'dax' [ 115.825482][ T5381] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 115.848509][ T5381] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 115.931361][ T5387] FAULT_INJECTION: forcing a failure. [ 115.931361][ T5387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.967479][ T5387] CPU: 1 UID: 0 PID: 5387 Comm: syz.5.474 Tainted: G W syzkaller #0 PREEMPT(full) [ 115.967517][ T5387] Tainted: [W]=WARN [ 115.967591][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.967686][ T5387] Call Trace: [ 115.967693][ T5387] [ 115.967701][ T5387] __dump_stack+0x1d/0x30 [ 115.967728][ T5387] dump_stack_lvl+0x95/0xd0 [ 115.967751][ T5387] dump_stack+0x15/0x1b [ 115.967787][ T5387] should_fail_ex+0x263/0x280 [ 115.967818][ T5387] should_fail+0xb/0x20 [ 115.967846][ T5387] should_fail_usercopy+0x1a/0x20 [ 115.967907][ T5387] _copy_from_iter+0xcf/0xea0 [ 115.967939][ T5387] ? __alloc_skb+0x4f6/0x690 [ 115.967961][ T5387] ? __alloc_skb+0x200/0x690 [ 115.968023][ T5387] netlink_sendmsg+0x4ae/0x6f0 [ 115.968082][ T5387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.968114][ T5387] ____sys_sendmsg+0x563/0x5b0 [ 115.968143][ T5387] ___sys_sendmsg+0x195/0x1e0 [ 115.968200][ T5387] __x64_sys_sendmsg+0xd4/0x160 [ 115.968229][ T5387] x64_sys_call+0x194c/0x3020 [ 115.968258][ T5387] do_syscall_64+0x12c/0x3b0 [ 115.968291][ T5387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.968315][ T5387] RIP: 0033:0x7f53d3a0ce59 [ 115.968366][ T5387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.968387][ T5387] RSP: 002b:00007f53d245f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.968419][ T5387] RAX: ffffffffffffffda RBX: 00007f53d3c85fa0 RCX: 00007f53d3a0ce59 [ 115.968436][ T5387] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 115.968451][ T5387] RBP: 00007f53d245f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.968465][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.968479][ T5387] R13: 00007f53d3c86038 R14: 00007f53d3c85fa0 R15: 00007fff655d2a68 [ 115.968579][ T5387] [ 116.159434][ T3286] usb 2-1: device descriptor read/8, error -110 [ 116.384042][ T3286] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 116.408299][ T3286] usb 2-1: enqueue for inactive port 0 [ 116.416723][ T3286] usb 2-1: enqueue for inactive port 0 [ 116.433227][ T3286] usb 2-1: enqueue for inactive port 0 [ 116.600922][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 116.600986][ T28] audit: type=1400 audit(1778856113.344:1459): avc: denied { getopt } for pid=5395 comm="syz.0.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 116.842625][ T5400] loop5: detected capacity change from 0 to 512 [ 116.995183][ T5400] EXT4-fs (loop5): 1 orphan inode deleted [ 117.034405][ T28] audit: type=1400 audit(1778856113.774:1460): avc: denied { accept } for pid=5401 comm="syz.4.479" path="socket:[10980]" dev="sockfs" ino=10980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 117.073841][ T5400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.153155][ T5410] atomic_op ffff888109815d28 conn xmit_atomic 0000000000000000 [ 117.358455][ T4283] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.454027][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.5.480'. [ 117.478241][ T3286] usb usb2-port1: attempt power cycle [ 117.637180][ T12] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 1) [ 117.687388][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 117.729033][ T5415] loop5: detected capacity change from 0 to 8192 [ 117.743926][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 117.743926][ T12] [ 117.784390][ T3296] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 117.796947][ T5415] loop5: p1 < > p2 p4 < p5 > [ 117.810640][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.821454][ T5415] loop5: partition table partially beyond EOD, truncated [ 117.839325][ T5415] loop5: p1 start 134217728 is beyond EOD, truncated [ 117.868292][ T5415] loop5: p2 size 591360 extends beyond EOD, truncated [ 117.910944][ T5415] loop5: p5 size 591360 extends beyond EOD, truncated [ 119.074514][ T5435] loop5: detected capacity change from 0 to 8192 [ 119.093100][ T28] audit: type=1400 audit(1778856115.834:1461): avc: denied { append } for pid=5434 comm="syz.5.486" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 119.338246][ T3286] usb usb2-port1: unable to enumerate USB device [ 119.482560][ T5436] ================================================================== [ 119.490870][ T5436] BUG: KCSAN: data-race in touch_atime / touch_atime [ 119.497614][ T5436] [ 119.500072][ T5436] write to 0xffff88811b4233f8 of 4 bytes by task 5433 on cpu 0: [ 119.507892][ T5436] touch_atime+0x1d7/0x330 [ 119.512430][ T5436] shmem_file_splice_read+0x549/0x5a0 [ 119.517921][ T5436] splice_direct_to_actor+0x26e/0x670 [ 119.523323][ T5436] do_splice_direct+0x119/0x1a0 [ 119.528200][ T5436] do_sendfile+0x382/0x650 [ 119.532640][ T5436] __x64_sys_sendfile64+0x105/0x150 [ 119.537875][ T5436] x64_sys_call+0x2dc4/0x3020 [ 119.542569][ T5436] do_syscall_64+0x12c/0x3b0 [ 119.547191][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.553101][ T5436] [ 119.555440][ T5436] read to 0xffff88811b4233f8 of 4 bytes by task 5436 on cpu 1: [ 119.563006][ T5436] touch_atime+0x16c/0x330 [ 119.567446][ T5436] shmem_file_splice_read+0x549/0x5a0 [ 119.572839][ T5436] splice_direct_to_actor+0x26e/0x670 [ 119.578344][ T5436] do_splice_direct+0x119/0x1a0 [ 119.583230][ T5436] do_sendfile+0x382/0x650 [ 119.587664][ T5436] __x64_sys_sendfile64+0x105/0x150 [ 119.592893][ T5436] x64_sys_call+0x2dc4/0x3020 [ 119.597602][ T5436] do_syscall_64+0x12c/0x3b0 [ 119.602234][ T5436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.608147][ T5436] [ 119.610479][ T5436] value changed: 0x0cc18ec7 -> 0x0d5a2547 [ 119.616209][ T5436] [ 119.618554][ T5436] Reported by Kernel Concurrency Sanitizer on: [ 119.624748][ T5436] CPU: 1 UID: 0 PID: 5436 Comm: syz.4.487 Tainted: G W syzkaller #0 PREEMPT(full) [ 119.635535][ T5436] Tainted: [W]=WARN [ 119.639400][ T5436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.649558][ T5436] ==================================================================