last executing test programs: 11m1.711670085s ago: executing program 32 (id=1363): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000002500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB, @ANYRES16], 0x8, 0x2eb, &(0x7f00000004c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x400, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bi', @ANYRESOCT=r0]) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0xf0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x8006, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) openat$dir(0xffffffffffffff9c, 0x0, 0xa880, 0x97) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r4, 0x0, 0x0, 0x8800000) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000001150001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000002000000000a"], 0xb8}}, 0x40010) set_mempolicy_home_node(&(0x7f00005e0000/0x1000)=nil, 0x1000, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in6={0xa, 0x4e21, 0x81, @empty, 0x8}}}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0x0, 0x1, 0x4}}}, 0x118) 10m52.172098615s ago: executing program 33 (id=1457): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) getsockopt$inet_buf(r2, 0x118, 0x0, 0x0, &(0x7f00000003c0)=0x14) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x18ff5}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 10m49.751822149s ago: executing program 34 (id=1474): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000040)={@multicast1, @empty, @remote}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4, [{0xa, 0x3}]}, @struct={0x4}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001fc0)=""/4115, 0x3c, 0x1013, 0x1}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x44, &(0x7f0000009000), 0x4) r5 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0)=0x0, &(0x7f0000000380)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f00000001c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x80, 0x3, 0x0, 0x9276, 0x0, 0x0, {0x1}}) io_uring_enter(r5, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r8, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5248ad423c469"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/170, 0x4d, 0xaa, 0x1}, 0x28) 9m22.442858823s ago: executing program 35 (id=2353): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020247b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\b\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESDEC=r10, @ANYBLOB="48f5aeca9600c4c3cba1ea2ee9dd2312caceb0be95230c67c4e2f52b2fe3f4cf7f113614d7c81bb4d000da99342409470d78459d1770bc582b3afa0923380b99bfcd75b8fae6a1561e1ef73cf0c16dd3400d6d6493f0e30cf9d9b4c3653ada7a6e78eea774b19f56d09212ec5cf77fa19af7eaa54bdf604a", @ANYRESOCT=r5, @ANYRESHEX=r11, @ANYRES64, @ANYRESOCT, @ANYRES32=r9, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) syz_clone(0x100080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xc0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x40, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) (async) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) 8m53.439817371s ago: executing program 36 (id=2636): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000800}, 0x48050) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 8m39.064345281s ago: executing program 37 (id=2742): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) io_uring_enter(0xffffffffffffffff, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) syz_emit_ethernet(0x1046, &(0x7f00000026c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a00000010101101fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e2008419078a203000000110000"], 0x0) 8m27.519721853s ago: executing program 38 (id=2811): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) rt_sigsuspend(&(0x7f0000000080)={[0x401]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() rename(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000100)='./bus/file0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900350200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYBLOB="0000000000000000000000000000004537f4d9f70e2b940000000000"], 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") r5 = creat(0x0, 0x2) write(r5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000180), &(0x7f00000002c0)=r3}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) 8m22.73108159s ago: executing program 39 (id=2849): perf_event_open(&(0x7f0000000000)={0x1, 0xb8, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x40b, 0x9, 0x0, 0x2, 0xfff, 0x8001, 0x7fff, 0x0, 0x80}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}]}, 0x24}}, 0x4) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setxattr$security_ima(0x0, &(0x7f0000000200), 0x0, 0x700, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000140)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@grpid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x80, 0x54f, &(0x7f0000000a00)="$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") mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21810b4, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x131845, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x121501) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r6, 0xc058534b, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x4, 0x3ff, 0x6}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x5}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x40) 8m13.051114027s ago: executing program 40 (id=2949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca300000000000040050001ef06000000050005000200000005000400000000000900020073797a31000000000c0007800800124000000002110003"], 0x58}}, 0x0) 7m56.109056597s ago: executing program 41 (id=2967): unshare(0x6c040000) unshare(0x44040200) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x109a, &(0x7f00000000c0)={0x0, 0x5239, 0x400, 0x3, 0x31d}, &(0x7f0000000300), &(0x7f0000000340)) r1 = syz_io_uring_setup(0x108, &(0x7f0000000380)={0x0, 0xedce, 0x80, 0x3, 0x20010b, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet6(0x10, 0x3, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4c, 0x0, r4, 0x0, 0x0, 0x0, 0x40010020, 0x69bb8c7967f8c16}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x0, 0x10000, 0x16, @dev={0xfe, 0x80, '\x00', 0x20}, @loopback, 0x8000, 0x0, 0x401, 0x8}}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0xffff, 0x0, 0x3d42, 0x40}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000000)={0x0, r4, 0x33, {0x27fffffffffffff, 0x800000008}, 0x54}, 0x1) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, &(0x7f0000000000)={0x7bea, 0x3aa7, 0xfffb, 0x2, 0x7, 0x5, 0x10}, 0xc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xc00) splice(r8, &(0x7f0000000000)=0x1, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x5, 0x6) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') socket$phonet_pipe(0x23, 0x5, 0x2) write$binfmt_script(r9, &(0x7f0000003140)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) 7m39.883295745s ago: executing program 42 (id=3205): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x840013, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbfdf9a684a51b86dd60108ffffe8000000000000000000000000000bbfe8000000000000000000000000000aa890090780000000001000000000000000000"], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x11, 0x0, 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0x0, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 7m32.838074392s ago: executing program 4 (id=3291): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0xa, 0x3, 0x87) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x8, 0x3, 0x408, 0x138, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff, 0x0, 0x0, 0x88000000], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x4e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x1d0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x80000001, 0x3, 0x20, 0x0, 'syz1\x00', 0x4}}, @common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x84, 0x25, 0x3}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x468) 7m32.6989061s ago: executing program 4 (id=3293): creat(0x0, 0x0) open$dir(0x0, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401800}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) unshare(0x8040600) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) fstat(r7, &(0x7f0000001440)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) syz_clone(0x20008200, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) syz_clone(0xc30e3400, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r11], 0x68}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x1, 0x2}, {0xe, 0x10}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x845}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r12, 0x541c, &(0x7f0000000000)) 7m32.179270435s ago: executing program 4 (id=3298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca300ef00000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a6970"], 0x58}}, 0x0) 7m32.178990405s ago: executing program 4 (id=3299): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x7e, 0x7f73d5e, 0xb, 0xb, 0xc870, 0x8100}) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x11, 0x68, 0x0, &(0x7f0000000140)) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000700)={0x800000, 0x9, 0x2, 0x7fffffff, 0x7, 0x69}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x0, @any, 0xfffb, 0x2}, 0xe) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x20380) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) r7 = syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x844d}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$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") (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x125) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000000)={0xd3f0, 0x2000, 0x8, 0xadec}) (async) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYRES16=r5, @ANYRES32=r3, @ANYRESOCT=r7, @ANYRES16=r4, @ANYRESHEX=r6], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x81e00, 0x6, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) poll(&(0x7f0000000180)=[{r9, 0x1201}, {r9, 0xa409}, {}, {r4, 0xa000}, {0xffffffffffffffff, 0x10}, {r4, 0x20}], 0x6, 0xfffffff7) (async) r10 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) (async) unshare(0x28000600) (async) syz_open_procfs$namespace(r5, &(0x7f0000000080)='ns/ipc\x00') (async) r12 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r12, &(0x7f00000004c0)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) (async) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') (async) process_madvise(r11, 0x0, 0x0, 0x15, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x8591, 0xa88, 0x4, 0x5, 0x0, 0x40, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) unshare(0x2040400) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) 7m31.947243947s ago: executing program 4 (id=3303): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 7m31.591049139s ago: executing program 4 (id=3315): r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0x2a43, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) 7m31.481826901s ago: executing program 43 (id=3315): r0 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0x2a43, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) read$rfkill(r1, &(0x7f00000000c0), 0x8) 7m24.56665569s ago: executing program 2 (id=3392): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000300)="65f3", 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 7m24.406995654s ago: executing program 2 (id=3396): setreuid(0x0, 0xee00) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="70000000120003020000000000002100"/56, @ANYRES32=0x0, @ANYBLOB="814b00000000000000000000000000002100010008"], 0x70}}, 0x0) 7m24.386518531s ago: executing program 2 (id=3397): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000011140100"], 0x18}, 0x1, 0x0, 0x0, 0x48810}, 0x4000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6100272400033afffc000000000000000000000000000003ff020000000000000000000000000001"], 0x0) bind$rxrpc(r3, &(0x7f0000000100)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @mcast2, 0x7da3}}, 0x24) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200)=0x0) fchown(r6, r7, 0x0) 7m24.066798878s ago: executing program 2 (id=3402): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x18, &(0x7f00000000c0), 0xf9, 0x58b, &(0x7f0000000840)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) geteuid() r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000000080008001d000000", 0x24) pwrite64(r1, &(0x7f0000000100)="e9", 0x1, 0x4fecc) sendfile(r1, r1, 0x0, 0xe3aa6ea) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x288, 0x120, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0xff, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@multiport={{0x50}, {0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x13, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x24, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2e8) 7m22.955260517s ago: executing program 2 (id=3419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000031c0)={0x11, 0x3, &(0x7f0000002f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa3, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000003000)='syzkaller\x00', 0xf, 0x7a, &(0x7f0000003040)=""/122, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003100)={0x2, 0xf, 0x2, 0x4}, 0x10}, 0x94) getgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000140)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x0) 7m21.612072687s ago: executing program 2 (id=3439): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800e400001000ffff27bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="03fc0300121e070008001d0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x14044080}, 0x811) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r1, 0x1}}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3a186d8, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@i_version}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x625, &(0x7f0000000980)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 7m21.530088083s ago: executing program 44 (id=3439): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800e400001000ffff27bd700001dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="03fc0300121e070008001d0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x14044080}, 0x811) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x1, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x41}, r1, 0x1}}, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x3a186d8, &(0x7f00000002c0)={[{@abort}, {@noblock_validity}, {@grpquota}, {@i_version}, {@auto_da_alloc}, {@inlinecrypt}]}, 0x6, 0x625, &(0x7f0000000980)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 6m59.995270182s ago: executing program 6 (id=3585): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000040000000000000000090000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m59.91743048s ago: executing program 6 (id=3587): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) memfd_create(0x0, 0x2) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 6m59.665718319s ago: executing program 6 (id=3591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x6005, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x89, 0x4, 0x0, @private=0xa010100, @local}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900350200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xc, 0x4, 0x4, 0x1000, 0x0, r4}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a8, &(0x7f0000000500)="$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") write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000180), &(0x7f00000002c0)=r4}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x8, 0xfffffffc, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x1, 0x8}}) 6m58.714810163s ago: executing program 6 (id=3596): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="4401000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f0000000500)=[{0x0}, {0x0}, {0x0, 0x4d}, {&(0x7f0000000300)=""/134, 0x69}], 0x10, 0x6, 0xfffffffd) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@rand_addr=0x64010101, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3500, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getsig(0x4202, r4, 0x9, &(0x7f0000000200)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) unshare(0x22020600) r8 = socket$can_raw(0x1d, 0x3, 0x1) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r9, 0xc0bc5310, &(0x7f0000000000)={0xbf, 0x2}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$FOU_CMD_DEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250200000008000800ffffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000001c0)={r5, &(0x7f0000000000)='ext4\x00', 0x100, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x4]}, {0x100, 0xfffc, 0x1, 0x6}}, 0x1, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r4, 0x0, 0x4004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000140)) 6m58.383178569s ago: executing program 6 (id=3599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x5c, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) personality(0xfe47fef9f5ff7379) openat2$dir(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/../file0\x00', &(0x7f0000000580)={0x8040, 0x146, 0x9}, 0x18) 6m55.139203338s ago: executing program 6 (id=3610): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async) socket$inet(0x2, 0x4, 0x80000000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) clock_adjtime(0x1, &(0x7f0000000a80)={0xfff, 0x8, 0xec30, 0x9e4, 0x7, 0x0, 0x1, 0x6, 0x0, 0x1, 0x7, 0x8, 0x2, 0xc, 0x4, 0x9, 0x7, 0x7fffffff, 0x85, 0x9, 0x4, 0x2, 0x6, 0x6, 0x7, 0x7}) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000780)={0x89, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'none\x00', 0x13, 0x8, 0x4a}, 0x2c) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@isdn={0x22, 0x0, 0x8, 0xfc, 0xc0}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000240)="6948457ec5e89808a8a3733ec23a7de550513fd77e1772584c3306fc9e781000f650316d86311939162e4dd44b99276a19fac3edec172dd26ce135ca6b14a3cdcef53e4b182765aa02d011b157fa17fb60bd946b4cbf8434ccaeb7f878d87f99d497670d7de2e393a0e652dc78788399607e33aad33ab3fa3cb6d3b917f84153cf4599c297a2cfb0a2fc860721bac26247ec200069e46f05b49391e073", 0x9d}, {&(0x7f0000000140)="a4fab0540b4b315a4156e084bd16ba5040dbaa190e054921defa20bae31f5b3debe857e6", 0x24}, {&(0x7f0000000440)="27f40a342c062f226bed4970e238826b7606adb3330b093bceaa7a4b6db2c07f06e95cd8109e501fefa34bae3462f8adaaeac777543c4114168d8501e4107d1d82363d74635a852c4350465d27ca3e86b8f8c902b88ad199c6c9de547325730b919d1854e051e549141c984de82199ed15d531208121d0d6a575c3d6221b950189c5f57a384bcc0ec8883c05", 0x8c}, {&(0x7f0000000180)="052c3388d1587f10f7c160f2b7571879c78c39aadfaa3c9377094c6d58fe8ac74ea942578ca7fe9e1d14", 0x2a}, {&(0x7f0000000500)="1ddf9e105d570888de3afb23f48ed3e37bd3abd0bd266065734c67647d9ef5186a65654dfd7d919b388a6643f1c09390f9418a8332095b22663241deaac6f5fd9c02a5b975937977dc542f13d96933fd145c624e3f6b6e8fafb38466a37f18a667441a1d0b771e04908154c69a2175dedcf1dd5affa733a8a26faab5d7728c1b07f4a672975af3e086d1fcad9747dbe7dd06f85de127973832108c0d032769f87c140f17b0f4c4cb14c7525728e93a728ea7c3bd9b93e07e1566511f8a63e57a766051a4ea580150aa68df37ae9e8e35ed31982bfe2add3dd58b4b6a7710cd", 0xdf}], 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x40810) (async) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async, rerun: 32) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) r7 = accept(r3, 0x0, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@bh}, {@grpquota}, {@usrjquota}, {@oldalloc}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '@@-,(*%\\\xc9'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@flag='posixacl'}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 6m55.08686559s ago: executing program 45 (id=3610): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) (async) socket$inet(0x2, 0x4, 0x80000000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfe, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x20000800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) clock_adjtime(0x1, &(0x7f0000000a80)={0xfff, 0x8, 0xec30, 0x9e4, 0x7, 0x0, 0x1, 0x6, 0x0, 0x1, 0x7, 0x8, 0x2, 0xc, 0x4, 0x9, 0x7, 0x7fffffff, 0x85, 0x9, 0x4, 0x2, 0x6, 0x6, 0x7, 0x7}) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000780)={0x89, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'none\x00', 0x13, 0x8, 0x4a}, 0x2c) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000000c0)=@isdn={0x22, 0x0, 0x8, 0xfc, 0xc0}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="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", 0xfd}, {&(0x7f0000000240)="6948457ec5e89808a8a3733ec23a7de550513fd77e1772584c3306fc9e781000f650316d86311939162e4dd44b99276a19fac3edec172dd26ce135ca6b14a3cdcef53e4b182765aa02d011b157fa17fb60bd946b4cbf8434ccaeb7f878d87f99d497670d7de2e393a0e652dc78788399607e33aad33ab3fa3cb6d3b917f84153cf4599c297a2cfb0a2fc860721bac26247ec200069e46f05b49391e073", 0x9d}, {&(0x7f0000000140)="a4fab0540b4b315a4156e084bd16ba5040dbaa190e054921defa20bae31f5b3debe857e6", 0x24}, {&(0x7f0000000440)="27f40a342c062f226bed4970e238826b7606adb3330b093bceaa7a4b6db2c07f06e95cd8109e501fefa34bae3462f8adaaeac777543c4114168d8501e4107d1d82363d74635a852c4350465d27ca3e86b8f8c902b88ad199c6c9de547325730b919d1854e051e549141c984de82199ed15d531208121d0d6a575c3d6221b950189c5f57a384bcc0ec8883c05", 0x8c}, {&(0x7f0000000180)="052c3388d1587f10f7c160f2b7571879c78c39aadfaa3c9377094c6d58fe8ac74ea942578ca7fe9e1d14", 0x2a}, {&(0x7f0000000500)="1ddf9e105d570888de3afb23f48ed3e37bd3abd0bd266065734c67647d9ef5186a65654dfd7d919b388a6643f1c09390f9418a8332095b22663241deaac6f5fd9c02a5b975937977dc542f13d96933fd145c624e3f6b6e8fafb38466a37f18a667441a1d0b771e04908154c69a2175dedcf1dd5affa733a8a26faab5d7728c1b07f4a672975af3e086d1fcad9747dbe7dd06f85de127973832108c0d032769f87c140f17b0f4c4cb14c7525728e93a728ea7c3bd9b93e07e1566511f8a63e57a766051a4ea580150aa68df37ae9e8e35ed31982bfe2add3dd58b4b6a7710cd", 0xdf}], 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1a8}, 0x40810) (async) listen(r3, 0x0) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f0000000140)='2', 0x1, 0x8000c61) (async, rerun: 32) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 32) r7 = accept(r3, 0x0, 0x0) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@orlov}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@bh}, {@grpquota}, {@usrjquota}, {@oldalloc}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'vfat\x00'}}, {@dont_appraise}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, '@@-,(*%\\\xc9'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@flag='posixacl'}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") (async, rerun: 64) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) 6m40.639293698s ago: executing program 8 (id=3753): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000900), &(0x7f0000000940)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@multicast2, 0x4e21, 0xfff9, 0x4e22, 0x0, 0xa, 0x20, 0x80, 0x1d}, {0x401, 0x8, 0x2f042152, 0x8, 0x8, 0x49b5ed5d, 0x401, 0x2000000008}, {0x2, 0x2, 0x6, 0x8}, 0x52, 0x6e6bba, 0x2, 0x1, 0x0, 0x2}, {{@in=@empty, 0x4d3, 0x33}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x3502, 0x1, 0x0, 0x7, 0x7fff, 0x81, 0x81}}, 0xe8) (async) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r4, 0x403, 0x0) (async) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0xfffffffffffffe6f, 0x0, 0xfde0}, 0x4004800) 6m40.52833775s ago: executing program 8 (id=3754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x2400}, 0x0) 6m40.395282388s ago: executing program 8 (id=3755): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x500000000000000) 6m40.393352317s ago: executing program 8 (id=3757): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000540), 0x6, 0x627, &(0x7f0000000580)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbb9, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x3}, {0x9b600000, 0x80000000, 0x3, 0x0, 0x9}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) syz_clone3(&(0x7f0000000080)={0x166002400, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000bc0)={0x380, 0x13, 0x200, 0x70bd2b, 0x25dfdbfd, {0x1, 0xff, 0x6, 0x57, {0x4e22, 0x4e21, [0x1000, 0x0, 0xfff, 0x4fad1a6d], [0x80, 0x101, 0x9, 0x5], r2, [0x8713, 0x1]}, 0x800, 0x10}, [@INET_DIAG_REQ_BYTECODE={0xa9, 0x1, "218b4a8a19ed2a0bf66ae2a4a6d8ee4585589d1348526ec5cfe5cf4e763267e5b60237f0b2aefc209f6882dad874cc6d619b760597032e35c61a87da26b0283af6b864495e69e6c1e4c8c37200d4ccb9b5674d09d2e100891d818cf3ad6d4cda3de6533f75efc5fd1d119a69705b8ae1cd4a8ca0ec8db3345bebc987359a2d9443b7319cd034330e2c80003c62fde6ae069f3ff4d56188d5332231b96cfd7692ea9bb03179"}, @INET_DIAG_REQ_BYTECODE={0xe9, 0x1, "9adff453e0eaed54a36e84f3405cd31a08d38634f209a8b27cd139d22082c37b79c75390e32ff400edb66c6895e96b05b04f39e106c398376c7f524bf76aacf46c366a08e13ad78dbba4880f4913d6b2f4e160cb4c0023276c3672d460d4e0a57ad8e33f33d70c71bc807398d14fcf9d559afb7d37db98ebfeff1a7c942e7d18a17d77fe4bab29f97ef7267c2fe5870aeffed0f56043002186a183e358638195a1a2055d75140c39c73d18f5822f43353ff510a82f0350ad97c025f85ce7d3bd8ff36f2bc4068044e8296f26a0f630ce5e885a98738f5495bfd454e1462dda9e51cc42e920"}, @INET_DIAG_REQ_BYTECODE={0x1b, 0x1, "583e943014f320809a712d60fb434c5f88e60ce3e1b02a"}, @INET_DIAG_REQ_BYTECODE={0x45, 0x1, "448a84f771741a9fb5db56046e538ffa98d187957b406aaa2a39241341442a936bd85dddf997f03613e4f134e6c4442bd91043e52e355e9c09cb3db96e80b4a9eb"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "af9ea3361aa3ac85845d2742b228321da134ed75f6692318cb312ec4086b247e224099d0268840d2e9d0e2f90a507cc9828c721b16c64e3972bb8a6782d6951b31c6729f630f66c419455b589faac0a6000cc0bc681d1455744d13"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "08d8d3190910aa591ab688fd065b8280b561b10668af7ace57bf3a050f885859a11d122ce5cccfc1e9880687d03af0166c7115ef3c7f316d3d95aa7f005f9653b56723ecec12e8db18e3562e87a064f5ea2febc742b62233c25b55e2c73d71f697268fc609780aa7d355c7f90e0659"}, @INET_DIAG_REQ_BYTECODE={0x64, 0x1, "b5b4c401f47ce0d8f2b910424ad93d0758a314c7ed3a50d97a6ace244ce8a66799d68e1d77c6d2fa8c32b7334f8215830f830f116537d2b8df2fe62685bcf1670af1dfc566b857f976c7649f0b6b0979982c9810cba03b860439003b98181950"}]}, 0x380}, 0x1, 0x0, 0x0, 0x40005}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 6m39.424224139s ago: executing program 8 (id=3766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01010000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010008000900010073797a30000000000900030073797a320000000098000000060a010400000000040000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000142000000190500020094000000380001800c0001006269747769736500280002800800034000000002080001400000000408000240000000120400058008000480040001000900010073797a30"], 0x10c}, 0x1, 0x0, 0x2000000}, 0x0) 6m39.133000561s ago: executing program 8 (id=3771): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42, 0xc3000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 6m39.103157566s ago: executing program 46 (id=3771): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42, 0xc3000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 4m39.397159344s ago: executing program 7 (id=4844): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f300b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x3f000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 4m39.290899417s ago: executing program 7 (id=4846): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x2208046, &(0x7f0000000b80)=ANY=[], 0x1, 0x2bd, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42e42, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x1, &(0x7f0000000740)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x600, 0x4000, 0x0, r0}]) 4m39.12526057s ago: executing program 7 (id=4848): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) 4m38.994982248s ago: executing program 7 (id=4850): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@nodiscard}, {@noblock_validity}, {@noinit_itable}, {@dioread_lock}, {@nogrpid}, {@noinit_itable}, {@jqfmt_vfsv0}, {@mb_optimize_scan}, {@sb={'sb', 0x3d, 0x1}}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="74000000100001e728bd700000000000006f0000", @ANYRES32=0x0, @ANYBLOB="00010000316f0600400012800b00010067656e657665000030000280080001000100000005000c000000000014000700fc02000000000000000000000000000105000a0001000000140003006765"], 0x74}}, 0x2000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000030000000000030005000000000002000000ac1414aa0000000000000000010015000000000001001400000000000100"], 0x68}, 0x1, 0x7}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) ioctl$TIOCCONS(r5, 0x541d) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x1f, 0x0, 0x0) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) ptrace$peekuser(0x3, r1, 0x370) ptrace$getregs(0xc, r1, 0x1, &(0x7f0000000140)=""/240) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r9, &(0x7f0000000980)="6317a41abf726a3a816765527783a398bbb3ecdf881b0ea41bc4c73b70227c98b95eeba1e668d7312af4f9d17fee64cff3e212777a8ee301e74457c954efef1f202bd781a72fa0f6a189871af826df7d22cef4b739ead21267db28029119cbc2ff8b228444d8ab332164f4061d7a21d343453caf947d9f264977433093d3c178e3dd2fb47ff9878f94326954804abe99b5c3696d3b5f301b04"}, 0x20) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) getdents(r10, 0xfffffffffffffffd, 0x58) 4m38.162457662s ago: executing program 7 (id=4860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x5}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x78cd}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) 4m36.347240255s ago: executing program 7 (id=4874): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x7a680000) 4m36.31679173s ago: executing program 47 (id=4874): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r0, 0x0, 0x0, 0x5405, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x7a680000) 1.938011617s ago: executing program 0 (id=7951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}, 0x1, 0x1000000}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000080)="677eb93d004f43739e87884fd6052fdeeb933b0a0203a8d8f866da130e7f694bd05018311c3dc9e7f5e8659b7d2c3b963decf7952173e1d9c3873ab8264c3b15e7de086cc0a91b941ec1f349621203640f31357c23397b9435e388845a1d72645415477b6657fee1b0f72988595a9359fbcd3bada8070a961c23c4a698e65b3e1fa164aa99020998a148085388a1055ecd5d0b506f5856467f1f1e8a17a1f50b232dc08b2541f879c390931ef6df343ba545092866a041c487bbf26f0297e4bcd5e81ed40f031d592c09a66510a5a57f17c3e4154523fefd56e17264", 0xdc, 0x40000, &(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0xc00000, @mcast2, 0xd215}, 0x80) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FIGETBSZ(r0, 0x2, 0x0) write$binfmt_script(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='syscall\x00') mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000240)={0x1, 0x1, 0x5b, 0x7}) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900110000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r5 = syz_pidfd_open(0x0, 0x0) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="2b6d656d6f7279202b70696473202d626c6b696b202b637075736574202d6e6574202d6e65748a636c73202b637075736574202a626c202d726c696d697420"], 0x49) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) set_mempolicy(0x3, &(0x7f0000000940)=0xfff, 0xcf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) 1.817399568s ago: executing program 1 (id=7952): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[], 0x50}}, 0x0) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800004, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x50, &(0x7f0000000440)=""/80}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffaf}) 1.730038764s ago: executing program 1 (id=7953): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000980)=[{&(0x7f0000000440)="4800000014001d1009074beafd0d8c560a84606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000100001002bad700000000000fc0100000000000000000000000000000a0101000000000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}}, 0x4050) 1.64850414s ago: executing program 1 (id=7954): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x17}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8aaa}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.267145828s ago: executing program 3 (id=7958): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x8000) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=@newlink={0x78, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x40, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xfffffff8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x312, 0x80000000}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x78}}, 0x8000) 1.211647759s ago: executing program 3 (id=7960): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4(r0, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f0000000080)=0x80, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'wg2\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x202}, {r0, 0x1000}, {r1, 0x1000}, {r0, 0xc001}, {r1}, {r1, 0x40a}], 0x6, &(0x7f0000000140), &(0x7f0000000180)={[0x5a4]}, 0x8) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x76, 0xe, 0x3, 0x9, 0x0, 0x8, 0x84140, 0x6, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000200), 0x3}, 0x10001, 0xff, 0x5, 0x7, 0x10001, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) connect$802154_dgram(r5, &(0x7f0000000540)={0x24, @long={0x3, 0xffff}}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000680)={r1, &(0x7f0000000580)='nl80211\x00', 0x100, &(0x7f00000005c0)={@_ha_fsid={[0xb2, 0x6]}, {0x1400, 0x10, 0x7, 0x5}}, 0x0, &(0x7f0000000600), &(0x7f0000000640)=0xfe0000}) recvfrom$inet6(r7, &(0x7f00000006c0)=""/117, 0x75, 0x102, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r5, 0x810c9365, &(0x7f0000000740)={{0xffffffff, 0x7fffffff}, 0x100, './file0\x00'}) ioctl(r3, 0x3, &(0x7f0000000880)="f77a308c7a4fe9765af5958a73265287507acade01802529fcdf49a9c7cc60fe6e3523b3b2bf9cf7933692130466430b52e5a8a88dfc2f09e94e9061e092f4f0a7a81c321602751d10e30f0c7ce6f574305f3587a8e9443ab9d25d97df01d3a08d1e6eb4b64626288e6391c55e0db0e4933524b2bbd47947dfad8d1f38608bc7266864deed267c8c0918b9df80ebd45b51d9969d") sendfile(r6, r3, &(0x7f0000000940)=0x6, 0x2b3a) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x19) setsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000980), 0x4) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f00000009c0)) socket(0x2a, 0x800, 0x6) fgetxattr(r7, &(0x7f0000000a00)=@known='trusted.overlay.impure\x00', &(0x7f0000000a40)=""/41, 0x29) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000f) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a80), 0x10000, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r8, 0x330f, 0x5) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), r1) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000b40)={0x1f8, r9, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_WOL_MODES={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "6d7a284e93e21b90bf493b1315a2d9f1e69b770c2a4d4509edd1af2929c4df08f3cffe7fe885f282438cd3e1ba8be51b417d83c0ae7fdb6e390f26a0e54e903fa683fe"}, @ETHTOOL_A_BITSET_MASK={0xb7, 0x5, "9df7f5a76a9502eebf3e2430935fc17f86f494d8d5b68f8aa574bc84ca52153aeb4dc631ddad577bf34a7427ed62c380c2ddf3847bcd76641ad3e988788f178f0e93bf4cd367d148660192ea134209e42f5b1e7b07b833115c471cc595316129c2d27f5c6776685879ea6a5309b25b8e903786ec06611bfc77a12959f3104e3b13b69ed839c75e735ec8e1a182475f85e0f008e1ca4c19aa748f3fa61cc916e7bc43fe70b8ec9e293a14ed57b9eea740ed9b1f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6d, 0x4, "8b4c28b66dcc43a758e6b1a0f202c9557defb431ecaa391a643fab46c6d50ec62f5b1390647553a6d0fe817ac95d113baf6bb96b51a90e58384d76ad04b99877ff822801a36cbe3ee7641f6a232118125d87a0206dd32146dea1609144be5fc2b5f805237830fa14d9"}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x6000}, 0x24048000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000f40)={'gretap0\x00', &(0x7f0000000e80)={'syztnl0\x00', r2, 0x874f, 0x10, 0xb, 0x7, {{0x1c, 0x4, 0x0, 0x8, 0x70, 0x64, 0x0, 0x7, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x1f, 0xfa, [@private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @loopback]}, @timestamp_addr={0x44, 0x3c, 0xcd, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x14}, 0xe}, {@loopback, 0x66287974}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x2}, {@local, 0xff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast1, 0x7}, {@rand_addr=0x64010102, 0xdfc3}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x13, 0x5, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x285}, [@map_fd={0x18, 0x7, 0x1, 0x0, r5}]}, &(0x7f0000000e00)='GPL\x00', 0x9, 0x35, &(0x7f0000000e40)=""/53, 0x41000, 0x6, '\x00', r10, @fallback=0x1a, r7, 0x8, &(0x7f0000000f80)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000fc0)={0x3, 0x10, 0x1, 0x8001}, 0x10, 0xffffffffffffffff, r7, 0x5, 0x0, &(0x7f0000001000)=[{0x2, 0x3, 0x0, 0x4}, {0x1, 0x4, 0xd, 0x8}, {0x3, 0x5, 0x2, 0x2}, {0x0, 0x2, 0x7, 0x6}, {0x5, 0x5, 0x10, 0x9}], 0x10, 0x5}, 0x94) 1.15580881s ago: executing program 3 (id=7962): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="000000000008800000000000000000", 0xf, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r1, 0x1, 0x5, 0x6, @broadcast}, 0x14) 1.120034413s ago: executing program 3 (id=7963): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2600000000000000000000000000000095"], 0x20) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) chown(&(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x1000000, 0x1}}, 0xb8}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r2, 0x0, 0x0, 0xf1c) 1.006287025s ago: executing program 9 (id=7965): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001740)=@newtaction={0xd3c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0xd28, 0x1, [@m_police={0xd24, 0x1, 0x0, 0x0, {{0xb}, {0xcf8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x10000000}, @TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x3, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x2e, 0xfffd}}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RATE64={0xc, 0x8, 0xbe6}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x0, 0x8420, 0x8000e4ff, {0xa, 0x0, 0x3ff, 0xff, 0x3, 0x401}, {0x5, 0x1, 0x10, 0xff, 0x9, 0x9}, 0x15800, 0x1, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0xff, 0xef02, 0xef0a, 0x9, 0x23, 0x400000, 0x80000000, 0xfffffffb, 0xc, 0x3, 0x2, 0x6, 0x73f9e023, 0x6, 0x6, 0x7, 0xfb, 0xeb5, 0x7, 0x24, 0x35bad662, 0x5, 0x4, 0x29, 0x6, 0x8, 0x4, 0x5, 0x1ff, 0x140000, 0x0, 0x1a, 0x8, 0x5, 0x0, 0x5, 0x6, 0x9, 0x7, 0x2, 0x8, 0x0, 0xf, 0x2, 0x98, 0x800, 0x100, 0x8000, 0xca, 0x4, 0x2, 0x3, 0x4, 0x2, 0x1d9, 0x4, 0xfffff2c2, 0x8001, 0x0, 0x1, 0x8, 0x7, 0x9, 0x0, 0x7, 0x8, 0x7, 0x6, 0x7f, 0x3ff, 0x6e09bc56, 0x81, 0x0, 0x400, 0x4, 0x21c30312, 0x6, 0x8, 0x80, 0xc, 0x2, 0x9, 0x9, 0x1, 0xfffffff8, 0x5, 0xb, 0x5, 0xbfc3, 0x3, 0xe8b3, 0x8, 0x1, 0x6252, 0x7, 0x5, 0xc, 0x0, 0x9e, 0x1, 0x27, 0x3, 0x8, 0x10, 0x8001, 0xfff, 0x6, 0x4, 0x3, 0xfff, 0x5, 0x9, 0x16, 0x5, 0x7fffffff, 0x7f, 0x4, 0xffffff81, 0x1, 0x8, 0xc, 0x3ff, 0x6, 0xfffffff2, 0x2b22, 0x2c5, 0x2db1, 0xfffffff7, 0x200, 0x8, 0x10000e46, 0x5, 0xc9b3, 0x0, 0x9, 0x9, 0x2, 0x8, 0x7, 0x5, 0xfffffc00, 0x800, 0x400, 0x9, 0x6, 0x200, 0x48, 0x40, 0x1, 0x9, 0x7, 0x8000, 0x7, 0x1ff, 0x2237, 0x6, 0x5, 0x6, 0x0, 0x4b, 0x4, 0xffff8000, 0x80000001, 0xd, 0x3, 0x3, 0x5, 0x9, 0x5, 0x3ff, 0x800, 0x9, 0x0, 0x6, 0x2, 0x93b, 0x4, 0x9, 0x200, 0x9, 0x0, 0x9, 0x401, 0xb, 0x3, 0xffffffff, 0x3, 0x0, 0x7, 0x3, 0x1, 0x2, 0x8, 0x3, 0x9, 0x0, 0x9, 0xffffffff, 0x400, 0x9, 0x61a0, 0x7, 0x2, 0x9, 0x9, 0x200, 0x9, 0x1, 0x1, 0x0, 0x4, 0x6, 0x40, 0x7, 0xf, 0x40, 0x80, 0x3, 0x1ff, 0x1, 0x9, 0xff, 0x80, 0x0, 0x4, 0x3, 0x7, 0x9, 0x8, 0x0, 0xf17, 0x0, 0xfffffff7, 0x7, 0x9, 0x0, 0x6, 0x7, 0x3, 0x101, 0xfffffffd, 0x3723, 0xf8a, 0xa, 0xcdd6, 0x1, 0x369, 0x3, 0x9, 0x7fff, 0x8, 0x10, 0xfffffff3, 0x10, 0x3ff, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xf8}, @TCA_POLICE_RATE={0x404, 0x2, [0x26ac, 0x3, 0x9, 0xfffff000, 0x4a4, 0x3fed396c, 0x7cc, 0x9bc, 0xc77, 0xbe37, 0xfffffffb, 0x1000, 0x5, 0x2, 0x6, 0x5, 0x8, 0x7, 0x39a, 0x4103, 0x57, 0x8, 0xfffffff7, 0x1, 0x5, 0x81, 0x4, 0x5, 0xfffffffa, 0x101, 0xfffffffa, 0x7, 0xf, 0x800000, 0x5, 0x7, 0xa, 0x7, 0x0, 0x7, 0x7, 0x8, 0x3, 0x1000, 0x1, 0xd1db, 0xdf, 0x80000000, 0x556fa8b8, 0x0, 0x4, 0x3, 0x4, 0x1, 0x88, 0x200, 0x45b2, 0x4, 0x62, 0x2, 0x1, 0xe2, 0x401, 0x1ff, 0xfffffff9, 0x7, 0x1, 0x37, 0x7fff, 0x1, 0x9, 0x9, 0x5, 0x10001, 0x7, 0x1, 0x9, 0x1, 0x40, 0x1, 0xf94, 0x100, 0x6, 0x6, 0x44, 0x136, 0xe63, 0x1, 0x1, 0x9, 0xe7f0, 0xef3, 0x8, 0x400, 0x9, 0x3, 0x19, 0x8, 0x9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x3ff, 0xfffffc01, 0x200, 0x9, 0x7fffffff, 0xf, 0x1, 0x6, 0x0, 0x85c, 0x3, 0xa, 0x86, 0x1000, 0x7, 0x800, 0x8000, 0x2ffaf120, 0x38b7, 0xe6, 0x100, 0x3, 0x8f, 0xfffffff8, 0x2, 0x5, 0x5, 0x1ff, 0x8001, 0x4f7, 0x96, 0xffff75d1, 0x2, 0x6, 0xb, 0x8, 0x9, 0x8f, 0x9, 0xdf9, 0x1, 0xfffffffd, 0x835d, 0x40, 0x1, 0x8, 0x0, 0xffffffff, 0xc, 0x28, 0x7, 0x142, 0x6, 0x5, 0x7f, 0xa34, 0x5, 0x9, 0xffff, 0x6, 0x9, 0x487e, 0x9, 0x10, 0xd, 0x2bd3, 0xf9f2, 0xfff, 0xfffffff7, 0x2, 0xae, 0x9, 0x4, 0x2, 0x8000, 0xfffffff9, 0x5, 0x6, 0xff, 0x5, 0x8, 0xfffffff8, 0x150, 0x3c3, 0x1, 0x3, 0xdcff, 0x4, 0x8, 0xff, 0x1ff, 0x7, 0x8, 0xac6, 0x1, 0x10000, 0x3ff, 0x8000, 0x7, 0x906, 0x5, 0x6, 0x4f9, 0x0, 0x1, 0x4, 0x8001, 0x8001, 0x7, 0xb4000000, 0xfffffffe, 0x0, 0x80, 0x1990, 0x4, 0x2, 0x1, 0x0, 0x6d0, 0xd2, 0xa56a, 0x0, 0xc, 0x5, 0x4, 0x93, 0x6e2, 0xffffffff, 0x10, 0xfff, 0x0, 0x4, 0x8, 0x0, 0x10, 0xffffffff, 0x10, 0xf, 0x8, 0x7, 0x5, 0x6, 0x8, 0xab9, 0x6316, 0x7fff, 0x0, 0xdc4, 0x10001, 0xcfd, 0x5, 0x7]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1000, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x80000001, 0x74c6, 0x8, 0x4, 0x40000000, 0x101, 0xffff0a6a, 0x1, 0x7, 0x38, 0x8000, 0x5, 0x3, 0x3, 0x42d, 0x1, 0x9, 0x100, 0x1, 0x1, 0x81, 0x7ff800, 0x3, 0x4, 0x80000000, 0x0, 0x1, 0x6, 0xe, 0x5, 0x7, 0x4, 0xff, 0x2, 0x7, 0xe76, 0x10000, 0xfffffffa, 0x6, 0xd66, 0x9, 0x2, 0xb26, 0xb4, 0xa, 0x800, 0x7fffffff, 0x80, 0xace, 0x80000006, 0x3, 0x3, 0x380, 0x5, 0x100, 0x9, 0x9, 0x1000, 0x7f, 0x3, 0x7, 0x7, 0x18000000, 0x1, 0x10000, 0x2, 0x2, 0x7, 0xef, 0x3, 0x400, 0x0, 0x6, 0x5, 0x92b, 0x5, 0x1000, 0xb, 0x7, 0x5, 0x9, 0x7fffffff, 0x1000, 0x5, 0x76, 0x200, 0x8, 0x2, 0x6, 0x10, 0x7ff, 0x40008, 0x72, 0x7fffffff, 0x311, 0xff, 0x4, 0xffffff2f, 0x1, 0x8, 0x9, 0xa086, 0x1, 0x200, 0x800, 0x7, 0x5, 0x80000000, 0x3ff, 0x9, 0x100, 0x15d2, 0x6, 0x1, 0x1, 0x2, 0x241c1aaa, 0x2, 0x0, 0x2, 0x16b, 0x8, 0x9, 0xa, 0x981, 0x0, 0xb, 0x2, 0x2, 0xffff, 0x81, 0x3, 0x3, 0x7, 0x6, 0x4, 0x2, 0xfffffffd, 0x5, 0x40000000, 0x7a, 0x8f0a, 0x7, 0xd29, 0x7, 0x0, 0x15, 0xfffffa11, 0x2, 0x80000001, 0xfe2, 0xa, 0x8, 0x7f, 0x6, 0x4, 0x9, 0x7, 0x4, 0x6, 0xf, 0x51, 0xff, 0x2, 0xfffffffd, 0x2, 0x8, 0x3, 0xff, 0x8, 0x2c1efe9, 0x3e, 0x5d18, 0x81, 0x400, 0x4, 0x7326deb8, 0x8006, 0x7ff, 0xffffffff, 0x5, 0x0, 0x2, 0x1, 0x6, 0x9e8, 0x101, 0xb31, 0x5, 0xe2, 0x4, 0x7f1e7a56, 0x5, 0x83, 0x9, 0x203e, 0x5, 0x8, 0x5, 0x10001, 0x87, 0x9, 0x1, 0xff, 0x8, 0x9, 0x8001, 0xffffff41, 0x7, 0x0, 0xe, 0x9, 0x3, 0x3, 0x8001, 0x0, 0x401, 0xfffffff9, 0xed, 0x6, 0xb9, 0xc3, 0x200, 0x101, 0x10, 0xa, 0xc, 0x2, 0x101, 0x5, 0x1, 0xa, 0x6, 0x9, 0x7, 0x4, 0x6, 0xbdc0, 0x7, 0x9, 0x9, 0x100, 0x4, 0xfffffffe, 0x81, 0x1000, 0x1, 0x9, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe62f, 0xffffffffffffffff, 0xf, 0x3, 0x7, {0x3, 0x0, 0x8, 0x9, 0x6, 0x6}, {0x8, 0x0, 0x9, 0x9, 0x6, 0x9}, 0x5, 0xa4de, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0xd3c}}, 0x0) 996.425504ms ago: executing program 0 (id=7966): socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x803, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x6) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x300) 974.36029ms ago: executing program 9 (id=7967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x2d00000000000000}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}]}]}, 0x5c}}, 0x0) 973.67912ms ago: executing program 3 (id=7968): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xff00, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 926.687652ms ago: executing program 9 (id=7970): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000007b00)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000180)="e6e0", 0x2}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000e00000000007000000890704e0000002001100000000000000000000000100000001000000000000001c000000000000000000000008"], 0x50}}], 0x3ffffffffffff40, 0x800) 833.022066ms ago: executing program 0 (id=7971): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 832.694686ms ago: executing program 9 (id=7972): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_io_uring_setup(0x3224, 0x0, &(0x7f0000000180), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c90000000007ffffffe000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) 784.357809ms ago: executing program 0 (id=7973): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="011600000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000003000000000000000000000000000000000009000300060000000400040008000600", @ANYRES32=r1], 0x5c}, 0x1, 0xf000}, 0x0) 749.210333ms ago: executing program 5 (id=7974): r0 = socket(0x1e, 0x80000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x5, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x2000000000000001, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, 0x0, 0x0) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1f4) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000280)='./file0\x00', 0x304) syz_emit_ethernet(0x7c, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "fd7100", 0x46, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88a8, [], "0080"}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x13}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x6}}}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', r7, &(0x7f0000000080)='./file0\x00', 0x120) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r8, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private0, @multicast2, 0x3, 0xe}}) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000020000000240000002400000003000000000000000a00000d0a00000000000000020000000e000000000000000207000000000000000000"], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) r9 = gettid() rt_sigqueueinfo(r9, 0x800021, &(0x7f0000000000)) sched_setaffinity(r9, 0x8, &(0x7f00000001c0)=0x6) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000e000100000000004000090002000a140000001100010000000000000000000a00000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000200), &(0x7f00000002c0), 0x2, 0x0) 734.700021ms ago: executing program 1 (id=7975): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="bc010000190001000000000010000400e0000001000000000000000000000000ac1414bb0000000005000000000000004e22000bffff00230a0000003400abe3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000faffffffffffffff000000000000010000000000000009ddffffffffffffff00000000000000000000000000000000000000000000000000000000000000040105"], 0x1bc}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 659.263539ms ago: executing program 1 (id=7976): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x40}, 0x2, 0x34005}, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}}) 628.369103ms ago: executing program 0 (id=7977): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x7}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000000)={0x4, 0x2}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r4, 0xf50f, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x600}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xfff9, 0x6}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x1000000, 0x0, 0x0, 0x0, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 563.271683ms ago: executing program 5 (id=7978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x24040004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfc, {{@in6=@private0={0xfc, 0x0, '\x00', 0xfc}, @in=@dev={0xac, 0x14, 0x14, 0x10}, 0x0, 0x4, 0x4e24, 0x20, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x80000000, 0x20, 0x842, 0xfffffffffffffffd, 0x0, 0x8000000000000000}, {0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffffc}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000008000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 473.206048ms ago: executing program 5 (id=7979): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r4, 0x89fd, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="0100000000c000001c00128009000100626f6e64000000000c0002800500010006000020"], 0x3c}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_netdev_private(r0, 0x89f5, &(0x7f00000000c0)="992e438b80d3ddec436ddee92e898b4118036c6b512080a0ecda2b4ed04bdfd7cd54f35d780e1305adb9a5c151c48c1efc81") sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000040040000140012800900010076657468000000000400028008000a00", @ANYRES32=r8], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2cb2fc00100001080000000000000000000000003d3c5b9753c91a58320cf8763c86cf22892722657d0dc1c1c811b4544c73b476891e9b956d6496a3dd2ca336806ade3dffe772ee82c688114cfe599dd611", @ANYRES32=r3, @ANYBLOB="00000000011200000a000100aaaaaaaaaaaa0000"], 0x2c}}, 0x0) 453.573145ms ago: executing program 1 (id=7980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000100)}, 0x20) 325.349994ms ago: executing program 9 (id=7981): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x124, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x2300) 203.060574ms ago: executing program 9 (id=7982): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') inotify_init() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x6, 0x1004, 0x200011, 0x6}, 0x14) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@data_err_abort}, {@jqfmt_vfsv0}, {@stripe}, {@minixdf}, {@sb={'sb', 0x3d, 0xaf8}}, {@noinit_itable}]}, 0x7, 0x46a, &(0x7f0000000640)="$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") ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) setsockopt$packet_buf(r7, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r4, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) epoll_create(0x200008) fchdir(r0) syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz8GNwjAUBNBx1pZz21RCN1RBE9RDj8goOGkBOLx3GMkjz+GH71p6tvwlPXvOqmTNJUuSlr2uWTLqlpRz9Z8yf4/+TOu32fY96nvUzma0jDHqsbtnTV2PR8n18bE7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCHvQIAAP//yZkJxg==") 202.493134ms ago: executing program 5 (id=7983): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001240)=@filter={'filter\x00', 0x42, 0x4, 0xab8, 0xffffffff, 0x0, 0x8d0, 0x0, 0xffffffff, 0xffffffff, 0xa20, 0xa20, 0xa20, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11, 0x0, 0xd}, 0x0, 0x8a0, 0x8d0, 0x0, {0x100000000000000, 0x8d0}, [@common=@inet=@multiport={{0x50}, {0x0, 0x7, [0x4e22, 0x4e22, 0x4e20, 0x4e22, 0x4e22, 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x4e23, 0x4e23, 0x4e20, 0x4e22, 0x4e23, 0x4e20], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0xfe, 0x1, 0x0, 0x0, 0x1], 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x51b, 0x1}, {0x1f, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x1000}, {0x90000, 0x25cf1f7a3184b655}, {0x40, 0x2}, {0xffffff46, 0x1}, {0x7f, 0x3}, {0x7, 0x1}], [{0x2, 0xd7be}, {0x80000001, 0xd9}, {0xb6a, 0x7f0}, {0xc183, 0x6}, {0x2, 0x6}, {0x7be, 0x1e1f}, {0x1, 0x2}, {0x3, 0x7b400000}, {0xa, 0x603}, {0x4, 0x4}, {0xf, 0x7f}], 0x4, 0x4}, {[{0x4, 0x1}, {0x9, 0x2}, {0x8}, {0x41, 0x1}, {0x7, 0x1}, {0x5cb09da2}, {0x4, 0x2}, {0x4, 0x1}, {0x400, 0x1}, {0x1, 0x3}, {0x1, 0x2}], [{0x80, 0x5}, {0x54fac28f, 0x2}, {0x5, 0x9}, {0x9, 0x2}, {0xc8, 0x6}, {0x42e}, {0x5, 0x2}, {0x7f, 0x2}, {0x4, 0xfffffeff}, {0x7, 0x7fffffff}, {0xbc, 0x9}], 0x2}, {[{0x4cafb3c1, 0x3}, {0x81, 0x3}, {0x7fffffff, 0x7c4c0ccab317f044}, {0x7, 0x1}, {0xa41, 0x1}, {0x7, 0xfa67f1f5208fe48d}, {0x400}, {0xfce, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x4, 0x1}], [{0x5, 0x8621}, {0x9, 0x1}, {0xad, 0x3}, {0x5, 0xfffffff7}, {0x9, 0x6}, {0xd7a, 0x2}, {0xe, 0xd}, {0xf, 0x3}, {0xe, 0x5}, {0x3, 0x4}, {0x3, 0x4}], 0x2}, {[{}, {0x8, 0x3}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x2}, {0x0, 0x2}, {0x7fffffff}, {0xffff}, {0xf4, 0x2}, {0x200, 0x2}], [{0x8, 0x81}, {0x2, 0x56b5}, {0x87b3, 0x8}, {0x4, 0xed0a}, {0x9, 0x9}, {0x0, 0x81d0}, {0x80000001, 0x5}, {0x9, 0xfffffff1}, {0x1, 0x6}, {0x0, 0x8}, {0x9, 0x6}], 0x0, 0x1}, {[{0xd}, {0x0, 0x1}, {0x8, 0x2}, {0x0, 0x3}, {0x9}, {0x2}, {0x1}, {0xa}, {0x7, 0x1}, {0xab, 0x2}, {0x2adf}], [{0xd1fb, 0xd}, {0xa, 0x500}, {0xff800000, 0x1000}, {0xfffffffe}, {0x7, 0x3}, {0x5, 0x10000}, {0x5, 0xe}, {0x2, 0x7ff}, {0x8, 0x6}, {0xac5d, 0x9}, {0x1f, 0x7}], 0xb, 0x5}, {[{0x7, 0x2}, {0x6, 0x3}, {0x100000, 0x3}, {0x2}, {0x7, 0x2}, {0x10}, {0xfde, 0x1}, {0x1ff}, {0x92a0, 0x3}, {0x8001}, {0x7}], [{0x4, 0x58}, {0x40, 0x1ff}, {0x9, 0x1}, {0xedb4}, {0x1, 0x7}, {0x400, 0x3}, {0x4e, 0x6}, {0x7, 0x6}, {0x6, 0x261a}, {0x91bc, 0x36}, {0x5, 0xd}], 0x2, 0xa}, {[{0x5c, 0x3}, {0x6, 0x3}, {0x7}, {0xfffffff8, 0x1}, {0x1, 0x2}, {0x92e, 0x3}, {0x8, 0x2}, {0x10000}, {0x80000001, 0x3}, {0xfffff15c, 0x2}, {0x1, 0x2}], [{0x3e, 0x1}, {0xff, 0x6b}, {0x8000, 0x7}, {0x9, 0x97f}, {0x0, 0x5}, {0x8, 0x2}, {0x7fffffff, 0x76}, {0x9, 0x90d}, {0x7, 0x7}, {0x1, 0xfffffff4}, {0x8001, 0x10}], 0xa}, {[{0xe, 0x1}, {0x401, 0x3}, {0xf30, 0x3}, {0x7f, 0x2}, {0x3, 0x2}, {0xa, 0x2}, {0x843a, 0x3}, {0x5, 0x3}, {0x2}, {0x1, 0x3}, {0x40, 0x3}], [{0x2, 0x8}, {0xff, 0x9}, {0x3, 0x1}, {0x9, 0x81}, {0x1, 0x5}, {0xa, 0x4}, {0x7, 0x5}, {0x380000, 0x3ff}, {0x41, 0x81}, {0x8, 0x40}, {0x2, 0x2}], 0x5, 0xb}, {[{0x3, 0x2}, {0xfffffff9, 0x2}, {0x8, 0x1}, {0x0, 0x3}, {0x0, 0x1}, {0x8, 0x3}, {0x38, 0x1}, {0x1, 0x1}, {0x62, 0x3}, {0x7, 0x2}, {0x3, 0x3}], [{0x6, 0x40}, {0x105b, 0x2}, {0x80000000, 0x9}, {0x4c, 0x2e98}, {0xf008, 0xd}, {0x3}, {0x7, 0x6}, {0x6326, 0x90e}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0xc778}], 0x7, 0x6}, {[{0x1, 0x3}, {0x1, 0x2}, {0x8000, 0x2}, {0x691}, {0x2, 0x2}, {0x3}, {0x9, 0x1}, {0xf7a, 0x2}, {0x5, 0x2}, {0x5, 0x1}, {0x5}], [{0x100, 0x7fff}, {0x369e, 0x2}, {0x4, 0x6}, {0x2f, 0x9}, {0x7ff, 0x7}, {0xfc, 0x3}, {0xfffffffb, 0x1ff}, {0x80, 0x2}, {0x1, 0x6}, {0xa00, 0x3}, {0x2, 0x4}], 0x6, 0x2}, {[{}, {0x9, 0x2}, {0x6, 0x3}, {0x1, 0x3}, {0x4}, {0x9}, {0x7, 0x3}, {0xb, 0x1}, {0x8}, {0xc80, 0x1}, {0x9}], [{0x4, 0x9}, {0x4, 0x5}, {0xe, 0x80000000}, {0x3, 0x4}, {0x9, 0x777bfd04}, {0x4, 0xffff}, {0x0, 0xa8c}, {0x101, 0x9}, {0x10001, 0x7}, {0x4, 0x80000001}, {0x8, 0x4}], 0x5, 0xb}], 0x9, 0x1}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0x5, 0x5, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010101, 0x0, 0x0, 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'macsec0\x00', {0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb18) 146.879545ms ago: executing program 5 (id=7984): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x93c, 0x1d}, {0x10000000, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in6=@empty, 0x3502}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0x0, 0x7}, {{@in=@multicast1, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x2b}, 0x2, @in=@empty, 0x3500}]}]}, 0x1fc}}, 0x14000) 94.559706ms ago: executing program 3 (id=7985): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0xdcfe]}, 0x8, 0x80800) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x17}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8aaa}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 39.167467ms ago: executing program 5 (id=7986): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x240488d1) syz_open_procfs(0x0, &(0x7f0000000080)='net/softnet_stat\x00') r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) fcntl$setlease(r0, 0x400, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x24, &(0x7f0000000400)=ANY=[], 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='$\x00\x00\x00Z', 0x5) ioctl$EVIOCRMFF(r1, 0xc0085504, &(0x7f0000000000)=0x10) 0s ago: executing program 0 (id=7987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x70bd26, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2c}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x4, 0x2, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0xfff, 0x800}, {0x3}, 0x70bd2a, 0x3500, 0xa, 0x0, 0x0, 0x26}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r5 = getpid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r5}, &(0x7f00000001c0)) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r7 = syz_io_uring_setup(0x186, &(0x7f0000000240)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r6}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xe091}}) io_uring_enter(r7, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000814}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x120, 0x1170, 0x1398, 0x120, 0x1170, 0x240, 0x1398, 0x1398, 0x240, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x60}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@private0, @private0, [], [], '\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) kernel console output (not intermixed with test programs): inode failed [ 777.488602][T31827] EXT4-fs (loop3): mount failed [ 777.501217][T31833] tmpfs: Bad value for 'mpol' [ 777.790781][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 777.790801][ T28] audit: type=1400 audit(1772136726.207:2942): avc: denied { mount } for pid=31823 comm="syz.3.7266" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 777.878046][T31837] loop9: detected capacity change from 0 to 512 [ 777.931018][T31837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 777.943746][T31837] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.147021][T31845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7271'. [ 778.493038][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.517295][T31857] loop3: detected capacity change from 0 to 512 [ 778.564344][T31857] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7276: bg 0: block 4: invalid block bitmap [ 778.593980][T31863] loop9: detected capacity change from 0 to 1024 [ 778.614176][T31863] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 778.634826][T31857] loop3: lost filesystem error report for type 5 error -117 [ 778.635081][T31857] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 778.651489][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 778.651510][ C0] EXT4-fs (loop3): initial error at time 1772136727: ext4_validate_block_bitmap:432 [ 778.651544][ C0] EXT4-fs (loop3): last error at time 1772136727: ext4_validate_block_bitmap:432 [ 778.687043][ T28] audit: type=1326 audit(1772136727.047:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.710794][ T28] audit: type=1326 audit(1772136727.047:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.712217][T31857] loop3: lost filesystem error report for type 5 error -117 [ 778.734654][ T28] audit: type=1326 audit(1772136727.047:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.774126][T31863] EXT4-fs error (device loop9): ext4_map_blocks:818: inode #3: block 1: comm syz.9.7275: lblock 1 mapped to illegal pblock 1 (length 1) [ 778.785235][T31857] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7276: invalid indirect mapped block 1 (level 1) [ 778.802372][ T28] audit: type=1326 audit(1772136727.047:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.805763][T31863] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 778.828772][ T28] audit: type=1326 audit(1772136727.047:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.861614][ T28] audit: type=1326 audit(1772136727.047:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.870151][T31863] Quota error (device loop9): write_blk: dquota write failed [ 778.885214][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 778.885236][ C0] EXT4-fs (loop9): initial error at time 1772136727: ext4_map_blocks:818: inode 3: block 1 [ 778.885293][ C0] EXT4-fs (loop9): last error at time 1772136727: ext4_map_blocks:818: inode 3: block 1 [ 778.885350][ T28] audit: type=1326 audit(1772136727.047:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.885432][ T28] audit: type=1326 audit(1772136727.047:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31864 comm="syz.5.7278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7776b5c629 code=0x7ffc0000 [ 778.885584][T31857] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 778.893285][T24726] IPVS: ip_vs_send_async error -22 [ 778.984880][T31857] EXT4-fs (loop3): 1 truncate cleaned up [ 778.990876][T31863] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.7275: Failed to acquire dquot type 0 [ 779.002634][T31863] loop9: lost filesystem error report for type 5 error -117 [ 779.002954][T31863] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.7275: Freeing blocks not in datazone - block = 0, count = 4096 [ 779.005797][T31857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.035977][T31863] loop9: lost filesystem error report for type 5 error -117 [ 779.038710][T31863] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.7275: Invalid inode bitmap blk 0 in block_group 0 [ 779.059244][T31863] loop9: lost filesystem error report for type 5 error -117 [ 779.059370][T31863] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 779.064865][T16673] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:32: lblock 1 mapped to illegal pblock 1 (length 1) [ 779.066839][T31863] loop9: lost filesystem error report for type 5 error -117 [ 779.084838][T16673] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 779.091174][T31863] EXT4-fs (loop9): 1 orphan inode deleted [ 779.125980][T16673] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:32: Failed to release dquot type 0 [ 779.137820][T31857] xt_hashlimit: max too large, truncated to 1048576 [ 779.177424][T16673] loop9: lost filesystem error report for type 5 error -117 [ 779.179114][T31863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 779.217601][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.361688][T31884] net_ratelimit: 27 callbacks suppressed [ 779.361706][T31884] openvswitch: netlink: Key type 7430 is out of range max 32 [ 779.405611][T31880] netlink: 76 bytes leftover after parsing attributes in process `syz.9.7275'. [ 779.506744][T31889] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7287'. [ 779.517169][T31885] program syz.9.7275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 780.075794][T31896] tipc: Enabling of bearer rejected, failed to enable media [ 780.223878][T31918] loop5: detected capacity change from 0 to 128 [ 780.258623][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.271211][T31918] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.335133][T31918] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 780.417000][T31918] netlink: 200 bytes leftover after parsing attributes in process `syz.5.7297'. [ 780.468250][T31934] xt_hashlimit: size too large, truncated to 1048576 [ 780.496336][T30234] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 780.818310][T31949] lo speed is unknown, defaulting to 1000 [ 780.824946][T31949] xfrm0 speed is unknown, defaulting to 1000 [ 781.699008][T31959] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7307'. [ 782.444659][T31962] FAULT_INJECTION: forcing a failure. [ 782.444659][T31962] name failslab, interval 1, probability 0, space 0, times 0 [ 782.474480][T31962] CPU: 0 UID: 0 PID: 31962 Comm: syz.9.7308 Tainted: G W syzkaller #0 PREEMPT(full) [ 782.474521][T31962] Tainted: [W]=WARN [ 782.474528][T31962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 782.474542][T31962] Call Trace: [ 782.474550][T31962] [ 782.474561][T31962] __dump_stack+0x1d/0x30 [ 782.474613][T31962] dump_stack_lvl+0x95/0xd0 [ 782.474644][T31962] dump_stack+0x15/0x1b [ 782.474673][T31962] should_fail_ex+0x263/0x280 [ 782.474703][T31962] should_failslab+0x8c/0xb0 [ 782.474726][T31962] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 782.474815][T31962] ? __alloc_skb+0x2d6/0x690 [ 782.474842][T31962] ? __rtnl_unlock+0x95/0xb0 [ 782.474869][T31962] __alloc_skb+0x2d6/0x690 [ 782.475044][T31962] ? __alloc_skb+0x200/0x690 [ 782.475077][T31962] netlink_ack+0xfd/0x500 [ 782.475110][T31962] ? avc_has_perm_noaudit+0xab/0x130 [ 782.475153][T31962] netlink_rcv_skb+0x192/0x220 [ 782.475185][T31962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.475335][T31962] rtnetlink_rcv+0x1c/0x30 [ 782.475484][T31962] netlink_unicast+0x5c0/0x690 [ 782.475520][T31962] netlink_sendmsg+0x5c8/0x6f0 [ 782.475562][T31962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.475617][T31962] ____sys_sendmsg+0x5af/0x600 [ 782.475663][T31962] ___sys_sendmsg+0x195/0x1e0 [ 782.475715][T31962] ? path_openat+0x1b01/0x2050 [ 782.475840][T31962] __sys_sendmmsg+0x185/0x320 [ 782.475902][T31962] __x64_sys_sendmmsg+0x57/0x70 [ 782.475939][T31962] x64_sys_call+0x27aa/0x3020 [ 782.475966][T31962] do_syscall_64+0x12c/0x370 [ 782.476009][T31962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.476035][T31962] RIP: 0033:0x7fdad3a5c629 [ 782.476052][T31962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.476092][T31962] RSP: 002b:00007fdad24b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.476119][T31962] RAX: ffffffffffffffda RBX: 00007fdad3cd5fa0 RCX: 00007fdad3a5c629 [ 782.476215][T31962] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 782.476232][T31962] RBP: 00007fdad24b7090 R08: 0000000000000000 R09: 0000000000000000 [ 782.476248][T31962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.476264][T31962] R13: 00007fdad3cd6038 R14: 00007fdad3cd5fa0 R15: 00007ffc12742708 [ 782.476290][T31962] [ 782.476329][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7308'. [ 782.729479][T31962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7308'. [ 782.744438][T31962] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7308'. [ 782.753388][T31962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7308'. [ 782.936099][T31975] xt_hashlimit: size too large, truncated to 1048576 [ 782.962767][T31974] loop9: detected capacity change from 0 to 2048 [ 783.014891][T31974] EXT4-fs: Ignoring removed orlov option [ 783.020717][T31974] EXT4-fs: Ignoring removed oldalloc option [ 783.054896][T31974] EXT4-fs (loop9): filesystem too large to mount safely on this system [ 783.089881][T31974] 9p: Bad value for 'rfdno' [ 783.110194][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 783.160841][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 783.192346][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 783.233596][T31972] xt_hashlimit: size too large, truncated to 1048576 [ 783.370825][T31985] FAULT_INJECTION: forcing a failure. [ 783.370825][T31985] name failslab, interval 1, probability 0, space 0, times 0 [ 783.394444][T31985] CPU: 0 UID: 0 PID: 31985 Comm: syz.1.7315 Tainted: G W syzkaller #0 PREEMPT(full) [ 783.394485][T31985] Tainted: [W]=WARN [ 783.394492][T31985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.394507][T31985] Call Trace: [ 783.394515][T31985] [ 783.394525][T31985] __dump_stack+0x1d/0x30 [ 783.394621][T31985] dump_stack_lvl+0x95/0xd0 [ 783.394654][T31985] dump_stack+0x15/0x1b [ 783.394677][T31985] should_fail_ex+0x263/0x280 [ 783.394700][T31985] should_failslab+0x8c/0xb0 [ 783.394775][T31985] kmem_cache_alloc_node_noprof+0x6d/0x460 [ 783.394804][T31985] ? __alloc_skb+0x2d6/0x690 [ 783.394877][T31985] __alloc_skb+0x2d6/0x690 [ 783.394901][T31985] ? __alloc_skb+0x200/0x690 [ 783.394924][T31985] nf_tables_rule_notify+0xc1/0x320 [ 783.394957][T31985] ? nf_tables_commit+0x96c/0x5960 [ 783.395016][T31985] nf_tables_commit+0x1398/0x5960 [ 783.395067][T31985] ? _raw_spin_unlock+0x9/0x30 [ 783.395096][T31985] ? __free_frozen_pages+0x28e/0x530 [ 783.395133][T31985] ? nf_tables_newrule+0x16bd/0x16e0 [ 783.395172][T31985] ? skb_pull+0x93/0x110 [ 783.395210][T31985] nfnetlink_rcv+0x10c6/0x1720 [ 783.395278][T31985] netlink_unicast+0x5c0/0x690 [ 783.395309][T31985] netlink_sendmsg+0x5c8/0x6f0 [ 783.395349][T31985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.395387][T31985] ____sys_sendmsg+0x5af/0x600 [ 783.395457][T31985] ___sys_sendmsg+0x195/0x1e0 [ 783.395528][T31985] __x64_sys_sendmsg+0xd4/0x160 [ 783.395591][T31985] x64_sys_call+0x194c/0x3020 [ 783.395628][T31985] do_syscall_64+0x12c/0x370 [ 783.395673][T31985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.395701][T31985] RIP: 0033:0x7faca2f9c629 [ 783.395806][T31985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.395830][T31985] RSP: 002b:00007faca19ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.395857][T31985] RAX: ffffffffffffffda RBX: 00007faca3215fa0 RCX: 00007faca2f9c629 [ 783.395872][T31985] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 783.395889][T31985] RBP: 00007faca19ef090 R08: 0000000000000000 R09: 0000000000000000 [ 783.395906][T31985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 783.395979][T31985] R13: 00007faca3216038 R14: 00007faca3215fa0 R15: 00007ffc18d94608 [ 783.396009][T31985] [ 783.795806][T31974] infiniband syz0: set down [ 783.800436][T26676] xfrm0 speed is unknown, defaulting to 1000 [ 783.809431][T31974] infiniband syz0: added xfrm0 [ 783.820437][T31974] RDS/IB: syz0: added [ 783.824853][T31974] smc: adding ib device syz0 with port count 1 [ 783.831205][T31974] smc: ib device syz0 port 1 has no pnetid [ 783.840020][T26676] xfrm0 speed is unknown, defaulting to 1000 [ 783.847780][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 783.901724][T31990] netlink: 'syz.0.7316': attribute type 1 has an invalid length. [ 783.948242][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.070931][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.303224][T32007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7320'. [ 784.346285][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.696453][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.751236][T32014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7322'. [ 784.764499][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.814729][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.891708][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 784.911680][T26699] hid-generic 0003:0004:FFFFFFFE.0035: unknown main item tag 0x0 [ 784.919554][T26699] hid-generic 0003:0004:FFFFFFFE.0035: unknown main item tag 0x0 [ 784.959282][T26699] hid-generic 0003:0004:FFFFFFFE.0035: unknown main item tag 0x0 [ 784.985235][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 785.074296][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 785.114935][T26699] hid-generic 0003:0004:FFFFFFFE.0035: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 785.297653][T31974] xfrm0 speed is unknown, defaulting to 1000 [ 785.642418][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 785.642449][ T28] audit: type=1326 audit(1772139313.057:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 785.781414][ T28] audit: type=1326 audit(1772139313.097:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 785.900739][ T28] audit: type=1326 audit(1772139313.097:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 785.947506][T32037] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7330'. [ 785.994781][T32048] netlink: 'syz.0.7335': attribute type 1 has an invalid length. [ 786.002929][ T28] audit: type=1326 audit(1772139313.097:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdad3a1cece code=0x7ffc0000 [ 786.075817][ T28] audit: type=1326 audit(1772139313.097:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 786.104611][ T28] audit: type=1326 audit(1772139313.097:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 786.129480][ T28] audit: type=1326 audit(1772139313.097:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 786.139555][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7336'. [ 786.154276][ T28] audit: type=1326 audit(1772139313.097:2966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 786.220674][T32056] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7332'. [ 786.599255][ T28] audit: type=1326 audit(1772139313.097:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 786.623228][ T28] audit: type=1326 audit(1772139313.097:2967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32032 comm="syz.9.7328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdad3a5c629 code=0x7ffc0000 [ 786.963497][T26699] hid-generic 0003:0004:FFFFFFFE.0036: unknown main item tag 0x0 [ 786.983959][T26699] hid-generic 0003:0004:FFFFFFFE.0036: unknown main item tag 0x0 [ 786.998388][T32090] netlink: 'syz.1.7347': attribute type 9 has an invalid length. [ 787.001316][T26699] hid-generic 0003:0004:FFFFFFFE.0036: unknown main item tag 0x0 [ 787.032783][T32093] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7348'. [ 787.042089][T32082] loop9: detected capacity change from 0 to 128 [ 787.049304][T26699] hid-generic 0003:0004:FFFFFFFE.0036: hidraw0: USB HID v4.00 Device [syz0] on syz1 [ 787.740099][T32115] 8021q: adding VLAN 0 to HW filter on device bond11 [ 787.810859][T32120] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7356'. [ 788.070187][T32132] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 788.082393][T32132] bond9 (unregistering): Released all slaves [ 788.172346][T32139] loop3: detected capacity change from 0 to 512 [ 788.191623][T32139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 788.227304][T32139] EXT4-fs (loop3): 1 truncate cleaned up [ 788.250111][T32139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.347448][T32148] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 788.366284][T32148] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 788.684063][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.744247][T32162] netlink: 'syz.1.7369': attribute type 10 has an invalid length. [ 788.799058][T32167] Option ' ' to dns_resolver key: bad/missing value [ 789.469206][T32188] loop9: detected capacity change from 0 to 512 [ 789.493220][T32188] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.547894][T32188] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.563147][T32188] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.880155][T32199] netlink: 'syz.1.7380': attribute type 10 has an invalid length. [ 789.987748][T32200] loop9: detected capacity change from 0 to 8192 [ 789.998067][T32207] loop3: detected capacity change from 0 to 128 [ 790.040146][T32207] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 790.062058][T32207] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 790.122944][ T7185] loop9: p1 p2 p3 p4 [ 790.128162][ T7185] loop9: p1 size 196608 extends beyond EOD, truncated [ 790.176409][T32214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7383'. [ 790.191315][T25679] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.204654][ T7185] loop9: p2 size 150994944 extends beyond EOD, truncated [ 790.215401][ T7185] loop9: p3 size 66846464 extends beyond EOD, truncated [ 790.225478][ T7185] loop9: p4 size 479744 extends beyond EOD, truncated [ 790.600722][T32200] loop9: p1 p2 p3 p4 [ 790.611958][T32200] loop9: p1 size 196608 extends beyond EOD, truncated [ 790.634188][T32200] loop9: p2 size 150994944 extends beyond EOD, truncated [ 790.636645][T32225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7384'. [ 790.651675][T32200] loop9: p3 size 66846464 extends beyond EOD, truncated [ 790.659631][T32200] loop9: p4 size 479744 extends beyond EOD, truncated [ 790.723092][ T7186] udevd[7186]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 790.725903][ T7185] udevd[7185]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 790.737832][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 790.754309][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 790.799092][ T7186] udevd[7186]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 790.828934][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 790.837296][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 790.842500][ T7185] udevd[7185]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 791.224435][T32255] loop3: detected capacity change from 0 to 512 [ 791.234175][T32255] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 791.267166][T32255] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7398: bg 0: block 288: padding at end of block bitmap is not set [ 791.293351][T32255] loop3: lost filesystem error report for type 5 error -117 [ 791.293604][T32255] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 791.309874][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 791.309898][ C0] EXT4-fs (loop3): initial error at time 1772139318: ext4_validate_block_bitmap:441 [ 791.309928][ C0] EXT4-fs (loop3): last error at time 1772139318: ext4_validate_block_bitmap:441 [ 791.404199][T32255] loop3: lost filesystem error report for type 5 error -117 [ 791.418925][T32255] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.7398: attempt to clear invalid blocks 1024 len 1 [ 791.440225][T32255] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 791.481665][T32255] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.7398: invalid indirect mapped block 1819239214 (level 0) [ 791.533159][T32263] netlink: 'syz.0.7401': attribute type 1 has an invalid length. [ 791.594656][T32255] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 791.595006][T32255] EXT4-fs (loop3): 1 truncate cleaned up [ 791.635133][T32264] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 791.687895][T32264] bond3: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 791.703822][T32255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.795714][T32264] bond3: (slave vxcan3): making interface the new active one [ 791.848319][T32264] bond3: (slave vxcan3): Enslaving as an active interface with an up link [ 791.897047][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 791.897067][ T28] audit: type=1326 audit(1772139319.318:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 791.930546][ T28] audit: type=1326 audit(1772139319.318:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 791.987418][ T28] audit: type=1326 audit(1772139319.318:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.012897][ T28] audit: type=1326 audit(1772139319.318:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.037042][ T28] audit: type=1326 audit(1772139319.318:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.132397][T32274] xt_hashlimit: max too large, truncated to 1048576 [ 792.394017][ T28] audit: type=1326 audit(1772139319.318:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.473231][ T28] audit: type=1326 audit(1772139319.318:2979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.530240][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.564162][T32278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7404'. [ 792.580742][T32278] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7404'. [ 792.591500][ T28] audit: type=1326 audit(1772139319.318:2980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.621720][T32276] macvtap0: entered promiscuous mode [ 792.627477][T32276] team0: entered promiscuous mode [ 792.632952][T32276] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 792.640773][ T28] audit: type=1326 audit(1772139319.328:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.670110][ T28] audit: type=1326 audit(1772139319.328:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32262 comm="syz.0.7401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 792.705840][T32282] Invalid ELF header magic: != ELF [ 792.718036][T32284] openvswitch: netlink: Key type 1798 is out of range max 32 [ 792.770967][T32288] netlink: 'syz.5.7409': attribute type 3 has an invalid length. [ 792.780395][T32288] netlink: 'syz.5.7409': attribute type 3 has an invalid length. [ 792.804592][T32282] loop3: detected capacity change from 0 to 2048 [ 792.811101][T32288] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7409'. [ 792.823836][T32282] EXT4-fs: Ignoring removed i_version option [ 792.841161][T32291] team0: Device vlan2 is already an upper device of the team interface [ 792.863703][T32282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.876917][T32295] netlink: 'syz.5.7411': attribute type 10 has an invalid length. [ 792.889505][T32295] syz_tun: entered promiscuous mode [ 792.915123][T32295] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 792.941112][T32295] loop5: detected capacity change from 0 to 128 [ 793.045073][T32305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7415'. [ 793.073152][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7415'. [ 793.106825][T32305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7415'. [ 793.106820][ T5228] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.137967][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7415'. [ 793.142627][ T5228] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.176281][T32311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7418'. [ 793.186202][T32311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7418'. [ 793.206414][T32311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7418'. [ 793.229996][ T5228] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.241306][ T5228] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 793.266358][T32313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7416'. [ 793.296085][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7419'. [ 793.375902][T32317] lo speed is unknown, defaulting to 1000 [ 793.382424][T32317] xfrm0 speed is unknown, defaulting to 1000 [ 793.417890][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7419'. [ 793.474402][T32317] xfrm0 speed is unknown, defaulting to 1000 [ 793.893549][ T5228] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 793.911376][ T5228] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 854 with error 28 [ 793.927766][ T5228] EXT4-fs (loop3): This should not happen!! Data will be lost [ 793.927766][ T5228] [ 793.937643][ T5228] EXT4-fs (loop3): Total free blocks count 0 [ 793.943891][ T5228] EXT4-fs (loop3): Free/Dirty block details [ 793.949886][ T5228] EXT4-fs (loop3): free_blocks=2415919504 [ 793.959148][ T5228] EXT4-fs (loop3): dirty_blocks=1728 [ 793.964597][ T5228] EXT4-fs (loop3): Block reservation details [ 793.970764][ T5228] EXT4-fs (loop3): i_reserved_data_blocks=54 [ 793.988098][ T5228] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 854 with error 28 [ 794.087249][T32327] loop3: detected capacity change from 0 to 4096 [ 794.106081][T32331] macvtap1: entered promiscuous mode [ 794.122495][T32327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.160448][T32331] macvtap1: entered allmulticast mode [ 794.182169][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.261558][T32335] loop5: detected capacity change from 0 to 2364 [ 794.510400][T32346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.571344][T32346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.951096][T32346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.975508][T32346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.028464][T32346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.045963][T32346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.080486][T32355] tmpfs: Bad value for 'mpol' [ 795.109007][T32346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.133090][T32346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.228091][ T7096] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.243038][ T7096] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.345261][ T7096] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.355799][ T7096] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.375611][ T7096] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.387931][ T7096] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.398493][T32373] netlink: 'syz.0.7438': attribute type 36 has an invalid length. [ 795.465804][T32373] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 795.475818][T32373] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 795.499529][ T7096] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.546790][ T7096] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.871006][T32388] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 795.881047][T32388] bond4 (unregistering): Released all slaves [ 795.915209][T32395] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 795.930631][T32395] bond4 (unregistering): Released all slaves [ 796.072509][T32405] SELinux: ebitmap: truncated map [ 796.077915][T32405] SELinux: failed to load policy [ 796.198312][T27700] hid-generic 0003:0004:FFFFFFFE.0037: unknown main item tag 0x0 [ 796.218253][T27700] hid-generic 0003:0004:FFFFFFFE.0037: unknown main item tag 0x0 [ 796.235072][T27700] hid-generic 0003:0004:FFFFFFFE.0037: unknown main item tag 0x0 [ 796.244902][T32418] lo speed is unknown, defaulting to 1000 [ 796.261318][T32418] xfrm0 speed is unknown, defaulting to 1000 [ 796.270153][T27700] hid-generic 0003:0004:FFFFFFFE.0037: hidraw1: USB HID v4.00 Device [syz0] on syz1 [ 796.353246][T32428] loop5: detected capacity change from 0 to 512 [ 796.360457][T32428] EXT4-fs: Ignoring removed bh option [ 796.385717][T32418] xfrm0 speed is unknown, defaulting to 1000 [ 796.409508][T32428] EXT4-fs: inline encryption not supported [ 796.424926][T32428] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 796.463709][T32428] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 796.494438][T32428] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7458: bg 0: block 248: padding at end of block bitmap is not set [ 796.509232][T32428] loop5: lost filesystem error report for type 5 error -117 [ 796.512690][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 796.526502][ C1] EXT4-fs (loop5): last error at time 1772139323: ext4_validate_block_bitmap:441 [ 796.536960][T32428] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.7458: Failed to acquire dquot type 1 [ 796.576494][T32428] loop5: lost filesystem error report for type 5 error -117 [ 796.577405][T32428] EXT4-fs (loop5): 1 truncate cleaned up [ 796.618564][T32428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 796.757141][T32425] lo speed is unknown, defaulting to 1000 [ 796.769157][T32425] xfrm0 speed is unknown, defaulting to 1000 [ 797.047188][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 797.239717][T16673] bridge_slave_1: left allmulticast mode [ 797.245590][T16673] bridge_slave_1: left promiscuous mode [ 797.258922][T16673] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.289148][T16673] bridge_slave_0: left allmulticast mode [ 797.295248][T16673] bridge_slave_0: left promiscuous mode [ 797.415163][T16673] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.736469][T16673] bond1 (unregistering): (slave macvlan2): Releasing active interface [ 797.757765][T16673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 797.855143][T16673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 797.881395][T16673] bond0 (unregistering): Released all slaves [ 797.899340][T16673] bond1 (unregistering): Released all slaves [ 797.935210][T16673] bond2 (unregistering): Released all slaves [ 797.972348][T16673] bond3 (unregistering): Released all slaves [ 798.026912][T16673] bond4 (unregistering): Released all slaves [ 798.036218][T16673] bond5 (unregistering): Released all slaves [ 798.045207][T32425] xfrm0 speed is unknown, defaulting to 1000 [ 798.053696][T32461] ip6gre1: entered promiscuous mode [ 798.062513][T32461] ip6gre1: entered allmulticast mode [ 798.075873][T32460] sit0: entered allmulticast mode [ 798.099993][T32473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 798.142817][T32477] loop5: detected capacity change from 0 to 128 [ 798.169905][T32473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 798.199523][T32477] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 798.247589][T32477] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.260233][T26708] hid-generic 0003:0004:FFFFFFFE.0038: unknown main item tag 0x0 [ 798.283509][ T1689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.291504][T26708] hid-generic 0003:0004:FFFFFFFE.0038: unknown main item tag 0x0 [ 798.300959][ T1689] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.319320][T30234] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 798.328596][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.338500][T26708] hid-generic 0003:0004:FFFFFFFE.0038: unknown main item tag 0x0 [ 798.346813][T16673] tipc: Disabling bearer [ 798.352110][T16673] tipc: Left network mode [ 798.387233][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 798.387251][ T28] audit: type=1326 audit(1772139325.808:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.392796][T26708] hid-generic 0003:0004:FFFFFFFE.0038: hidraw2: USB HID v4.00 Device [syz0] on syz1 [ 798.404438][T32488] __nla_validate_parse: 16 callbacks suppressed [ 798.404489][T32488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7478'. [ 798.441743][ T28] audit: type=1326 audit(1772139325.818:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.522534][T26708] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 798.621097][T16673] hsr_slave_0: left promiscuous mode [ 798.640698][ T28] audit: type=1326 audit(1772139325.818:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.667847][T16673] hsr_slave_1: left promiscuous mode [ 798.689057][ T28] audit: type=1326 audit(1772139325.818:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.716889][T32503] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7483'. [ 798.727471][ T28] audit: type=1326 audit(1772139325.818:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.756720][ T28] audit: type=1326 audit(1772139325.818:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.780782][ T28] audit: type=1326 audit(1772139325.818:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.805371][ T28] audit: type=1326 audit(1772139325.818:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.829847][ T28] audit: type=1326 audit(1772139325.818:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 798.892597][ T28] audit: type=1326 audit(1772139325.818:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.1.7478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faca2f9dec7 code=0x7ffc0000 [ 799.134570][T26708] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 799.349818][T32518] loop9: detected capacity change from 0 to 512 [ 799.528957][T32518] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.7488: bg 0: block 393: padding at end of block bitmap is not set [ 799.595483][T32518] loop9: lost filesystem error report for type 5 error -117 [ 799.602308][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 799.616309][ C0] EXT4-fs (loop9): initial error at time 1772139327: ext4_validate_block_bitmap:441 [ 799.625804][ C0] EXT4-fs (loop9): last error at time 1772139327: ext4_validate_block_bitmap:441 [ 799.638111][T32518] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 799.647096][T32518] loop9: lost filesystem error report for type 5 error -117 [ 799.647447][T32518] EXT4-fs (loop9): 2 truncates cleaned up [ 799.661162][T32518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.786762][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.790178][T16673] IPVS: stop unused estimator thread 0... [ 800.853640][T32571] tmpfs: Cannot disable swap on remount [ 800.870002][T32571] openvswitch: netlink: Missing key (keys=40, expected=80) [ 800.944839][T32574] netlink: 'syz.9.7505': attribute type 1 has an invalid length. [ 800.963664][T32574] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7505'. [ 801.004889][T32574] xfrm0 speed is unknown, defaulting to 1000 [ 801.064770][T32574] xfrm0 speed is unknown, defaulting to 1000 [ 801.500212][T23321] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 801.514643][T23321] CPU: 1 UID: 0 PID: 23321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 801.514679][T23321] Tainted: [W]=WARN [ 801.514688][T23321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 801.514705][T23321] Call Trace: [ 801.514730][T23321] [ 801.514740][T23321] __dump_stack+0x1d/0x30 [ 801.514776][T23321] dump_stack_lvl+0x95/0xd0 [ 801.514853][T23321] dump_stack+0x15/0x1b [ 801.514901][T23321] dump_header+0x80/0x240 [ 801.514927][T23321] oom_kill_process+0x295/0x350 [ 801.515025][T23321] out_of_memory+0x97d/0xb80 [ 801.515048][T23321] try_charge_memcg+0x62e/0xa10 [ 801.515167][T23321] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 801.515225][T23321] __swap_cache_prepare_and_add+0x386/0x530 [ 801.515271][T23321] swap_cache_alloc_folio+0xa2/0x120 [ 801.515308][T23321] swap_cluster_readahead+0x26e/0x3d0 [ 801.515385][T23321] swapin_readahead+0xde/0x840 [ 801.515466][T23321] ? __rcu_read_unlock+0x4e/0x70 [ 801.515492][T23321] ? __perf_event_task_sched_in+0xa65/0xad0 [ 801.515624][T23321] ? __list_add_valid_or_report+0x38/0xe0 [ 801.515667][T23321] ? __rcu_read_unlock+0x4e/0x70 [ 801.515689][T23321] ? swap_cache_get_folio+0x26f/0x280 [ 801.515724][T23321] do_swap_page+0x309/0x2210 [ 801.515763][T23321] ? __schedule+0x85a/0xd40 [ 801.515796][T23321] ? __rcu_read_lock+0x36/0x50 [ 801.515822][T23321] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 801.515935][T23321] handle_mm_fault+0xb40/0x3020 [ 801.515978][T23321] ? vma_start_read+0x1c7/0x2c0 [ 801.516018][T23321] do_user_addr_fault+0x62f/0x1050 [ 801.516056][T23321] ? trace_page_fault_user+0x1f/0xe0 [ 801.516183][T23321] exc_page_fault+0x62/0xa0 [ 801.516278][T23321] asm_exc_page_fault+0x26/0x30 [ 801.516369][T23321] RIP: 0033:0x7faca2f57817 [ 801.516386][T23321] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 801.516404][T23321] RSP: 002b:00007ffc18d94900 EFLAGS: 00010202 [ 801.516424][T23321] RAX: 0000000000000000 RBX: 0000555564308500 RCX: 00007faca2f57817 [ 801.516441][T23321] RDX: 00007ffc18d94940 RSI: 0000000000000000 RDI: 0000000000000000 [ 801.516454][T23321] RBP: 00007ffc18d949ac R08: 0000000000000000 R09: 0000000000000000 [ 801.516467][T23321] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 801.516489][T23321] R13: 00000000000927c0 R14: 00000000000c3959 R15: 00007ffc18d94a00 [ 801.516515][T23321] [ 801.516537][T23321] memory: usage 302260kB, limit 307200kB, failcnt 15617 [ 801.853056][T32588] loop3: detected capacity change from 0 to 512 [ 801.866852][T23321] memory+swap: usage 284332kB, limit 9007199254740988kB, failcnt 0 [ 801.939162][T23321] kmem: usage 235628kB, limit 9007199254740988kB, failcnt 0 [ 801.981254][T32588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.003135][T32588] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 802.065253][T23321] Memory cgroup stats for /syz1: [ 802.065520][T23321] cache 0 [ 802.098303][T23321] rss 110592 [ 802.101616][T23321] shmem 0 [ 802.104656][T23321] mapped_file 0 [ 802.108228][T23321] dirty 0 [ 802.111362][T23321] writeback 0 [ 802.112268][T32587] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 802.114939][T23321] workingset_refault_anon 201 [ 802.130171][T23321] workingset_refault_file 885 [ 802.135065][T23321] swap 409600 [ 802.138404][T23321] swapcached 66912256 [ 802.142643][T23321] pgpgin 467679 [ 802.146152][T23321] pgpgout 467643 [ 802.149763][T23321] pgfault 463541 [ 802.153775][T23321] pgmajfault 193 [ 802.157564][T23321] inactive_anon 0 [ 802.162177][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 802.175677][T23321] active_anon 139264 [ 802.179628][T23321] inactive_file 0 [ 802.190507][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.207037][T23321] active_file 0 [ 802.221891][T23321] unevictable 0 [ 802.228895][T23321] hierarchical_memory_limit 314572800 [ 802.237557][T23321] hierarchical_memsw_limit 9223372036854771712 [ 802.255912][T23321] total_cache 0 [ 802.259425][T23321] total_rss 110592 [ 802.271539][T23321] total_shmem 0 [ 802.277910][T23321] total_mapped_file 0 [ 802.283465][T32609] loop3: detected capacity change from 0 to 164 [ 802.291094][T23321] total_dirty 0 [ 802.294871][T23321] total_writeback 0 [ 802.298705][T23321] total_workingset_refault_anon 201 [ 802.331665][T23321] total_workingset_refault_file 885 [ 802.340377][T23321] total_swap 409600 [ 802.348695][T23321] total_swapcached 66912256 [ 802.434587][T32610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 802.441377][T23321] total_pgpgin 467679 [ 802.445448][T23321] total_pgpgout 467643 [ 802.449561][T23321] total_pgfault 463541 [ 802.462112][T23321] total_pgmajfault 193 [ 802.466244][T23321] total_inactive_anon 0 [ 802.470422][T23321] total_active_anon 139264 [ 802.479228][T32610] bond0: (slave bond2): Enslaving as an active interface with an up link [ 802.491303][T23321] total_inactive_file 0 [ 802.495781][T23321] total_active_file 0 [ 802.499922][T23321] total_unevictable 0 [ 802.504326][T23321] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.7506,pid=32576,uid=0 [ 802.519321][T23321] Memory cgroup out of memory: OOM victim 32576 (syz.1.7506) is already exiting. Skip killing the task [ 802.553821][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7520'. [ 802.773073][T32628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 802.789977][T32628] 9pnet_fd: p9_fd_create_unix (32628): problem connecting socket: ./file0: -2 [ 802.925854][T32638] loop9: detected capacity change from 0 to 2048 [ 802.964722][T32638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.990479][T32638] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 803.005698][T32638] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 803.018292][T32638] EXT4-fs (loop9): This should not happen!! Data will be lost [ 803.018292][T32638] [ 803.030542][T32638] EXT4-fs (loop9): Total free blocks count 0 [ 803.036777][T32638] EXT4-fs (loop9): Free/Dirty block details [ 803.043293][T32638] EXT4-fs (loop9): free_blocks=2415919504 [ 803.049133][T32638] EXT4-fs (loop9): dirty_blocks=48 [ 803.055098][T32638] EXT4-fs (loop9): Block reservation details [ 803.061245][T32638] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 803.068102][T32642] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 32 with error 28 [ 803.151293][T32644] loop5: detected capacity change from 0 to 1024 [ 803.176524][T32644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 803.188508][T32644] System zones: 0-1, 3-36 [ 803.203164][T32644] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7529: bad orphan inode 134217728 [ 803.221323][T32644] loop5: lost filesystem error report for type 5 error -117 [ 803.223418][T32644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.342221][T32644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7529'. [ 803.359253][T32644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7529'. [ 803.368729][T32644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7529'. [ 803.378004][T32644] netlink: 212 bytes leftover after parsing attributes in process `syz.5.7529'. [ 803.425951][T32660] openvswitch: netlink: ct_state flags ffffffff unsupported [ 803.469763][T32662] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7537'. [ 803.470763][T32664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7536'. [ 803.733769][T32680] netlink: 'syz.1.7543': attribute type 3 has an invalid length. [ 803.773615][T27700] hid-generic 0003:0004:FFFFFFFE.0039: unknown main item tag 0x0 [ 803.781527][T27700] hid-generic 0003:0004:FFFFFFFE.0039: unknown main item tag 0x0 [ 803.822146][T27700] hid-generic 0003:0004:FFFFFFFE.0039: unknown main item tag 0x0 [ 803.844829][T27700] hid-generic 0003:0004:FFFFFFFE.0039: hidraw3: USB HID v4.00 Device [syz0] on syz1 [ 803.953675][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.504995][T32695] vlan2: entered promiscuous mode [ 804.593127][T32699] openvswitch: netlink: Key type 2054 is out of range max 32 [ 804.672013][T32705] team0: Device vlan2 is already an upper device of the team interface [ 804.711119][T32709] loop3: detected capacity change from 0 to 128 [ 804.720071][T32709] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 804.735516][T32709] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 804.790474][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 804.790494][ T28] audit: type=1326 audit(1772139333.212:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 804.820569][ T28] audit: type=1326 audit(1772139333.212:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 804.875123][T27700] hid-generic 0003:0004:FFFFFFFE.003A: unknown main item tag 0x0 [ 804.884535][T25679] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 804.895622][T27700] hid-generic 0003:0004:FFFFFFFE.003A: unknown main item tag 0x0 [ 804.912797][T27700] hid-generic 0003:0004:FFFFFFFE.003A: unknown main item tag 0x0 [ 804.923343][T27700] hid-generic 0003:0004:FFFFFFFE.003A: hidraw4: USB HID v4.00 Device [syz0] on syz1 [ 804.927715][ T28] audit: type=1326 audit(1772139333.222:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 804.991001][ T28] audit: type=1326 audit(1772139333.222:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.022090][ T28] audit: type=1326 audit(1772139333.252:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.058512][ T28] audit: type=1326 audit(1772139333.272:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.095638][ T28] audit: type=1326 audit(1772139333.272:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.126657][ T28] audit: type=1326 audit(1772139333.272:3062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.151756][T32725] netlink: 'syz.5.7559': attribute type 12 has an invalid length. [ 805.170623][T32725] netlink: 'syz.5.7559': attribute type 29 has an invalid length. [ 805.191789][T32725] netlink: 148 bytes leftover after parsing attributes in process `syz.5.7559'. [ 805.203237][ T28] audit: type=1326 audit(1772139333.272:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.236203][T32725] netlink: 'syz.5.7559': attribute type 2 has an invalid length. [ 805.254380][T32725] netlink: 23 bytes leftover after parsing attributes in process `syz.5.7559'. [ 805.261073][ T28] audit: type=1326 audit(1772139333.272:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32715 comm="syz.0.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b69c629 code=0x7ffc0000 [ 805.377100][T26708] hid-generic 0003:0004:FFFFFFFE.003B: unknown main item tag 0x0 [ 805.387649][T26708] hid-generic 0003:0004:FFFFFFFE.003B: unknown main item tag 0x0 [ 805.400851][T32739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 805.527332][T32739] xfrm0 speed is unknown, defaulting to 1000 [ 805.610575][T32742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 805.627557][T26708] hid-generic 0003:0004:FFFFFFFE.003B: unknown main item tag 0x0 [ 805.670253][T26708] hid-generic 0003:0004:FFFFFFFE.003B: hidraw4: USB HID v4.00 Device [syz0] on syz1 [ 805.703258][T32739] xfrm0 speed is unknown, defaulting to 1000 [ 805.877647][T32757] loop9: detected capacity change from 0 to 128 [ 805.906303][T32757] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 805.941022][T32757] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.989730][T28916] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 806.120771][T32764] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7570'. [ 806.231068][ T302] loop5: detected capacity change from 0 to 1024 [ 806.259991][ T302] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 806.274963][ T302] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 806.284602][ T302] EXT4-fs (loop5): orphan cleanup on readonly fs [ 806.298345][ T302] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz.5.7573: Invalid inode table block 0 in block_group 0 [ 806.311490][ T302] loop5: lost filesystem error report for type 5 error -117 [ 806.311829][ T302] EXT4-fs (loop5): Remounting filesystem read-only [ 806.319184][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 806.319203][ C0] EXT4-fs (loop5): initial error at time 1772139334: __ext4_get_inode_loc:4782 [ 806.319224][ C0] EXT4-fs (loop5): last error at time 1772139334: __ext4_get_inode_loc:4782 [ 806.350861][ T302] EXT4-fs (loop5): 1 truncate cleaned up [ 806.357417][ T302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 806.392880][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.444078][ T312] bond0: (slave syz_tun): Releasing backup interface [ 806.477065][ T312] team0: Port device syz_tun added [ 806.498357][ T317] tipc: Enabling of bearer rejected, failed to enable media [ 806.515410][ T312] loop5: detected capacity change from 0 to 512 [ 806.570481][ T312] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.7577: inode has both inline data and extents flags [ 806.591097][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7582'. [ 806.600289][ T328] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7582'. [ 806.618004][ T328] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7582'. [ 806.619714][ T5228] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.632632][ T312] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 806.635224][ T312] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.7577: couldn't read orphan inode 15 (err -117) [ 806.644518][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 806.644536][ C1] EXT4-fs (loop5): initial error at time 1772139335: ext4_orphan_get:1391: inode 15 [ 806.644582][ C1] EXT4-fs (loop5): last error at time 1772139335: ext4_orphan_get:1391: inode 15 [ 806.692158][ T5228] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.700500][ T5228] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.722117][ T312] loop5: lost filesystem error report for type 5 error -117 [ 806.722706][ T312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 806.883171][ T7096] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.891626][ T312] lo: entered allmulticast mode [ 806.902622][ T312] tunl0: entered allmulticast mode [ 806.916779][ T312] gre0: entered allmulticast mode [ 806.931079][ T312] gretap0: entered allmulticast mode [ 806.948622][ T312] erspan0: entered allmulticast mode [ 806.966280][ T312] ip_vti0: entered allmulticast mode [ 806.982002][ T312] ip6_vti0: entered allmulticast mode [ 806.987339][ T341] SELinux: ebitmap: truncated map [ 806.993010][ T341] SELinux: failed to load policy [ 807.065185][ T312] ip6tnl0: entered allmulticast mode [ 807.073625][ T312] ip6gre0: entered allmulticast mode [ 807.081202][ T312] syz_tun: entered allmulticast mode [ 807.095717][ T312] team0: Port device syz_tun removed [ 807.102783][ T312] ip6gretap0: entered allmulticast mode [ 807.110151][ T312] bridge0: entered allmulticast mode [ 807.117368][ T312] vcan0: entered allmulticast mode [ 807.124405][ T312] bond0: entered allmulticast mode [ 807.129851][ T312] bond_slave_0: entered allmulticast mode [ 807.136167][ T312] bond_slave_1: entered allmulticast mode [ 807.142371][ T312] bond2: entered allmulticast mode [ 807.150473][ T312] team0: entered allmulticast mode [ 807.156226][ T312] team_slave_0: entered allmulticast mode [ 807.162022][ T312] team_slave_1: entered allmulticast mode [ 807.170581][ T312] dummy0: entered allmulticast mode [ 807.179345][ T312] nlmon0: entered allmulticast mode [ 807.186683][ T312] caif0: entered allmulticast mode [ 807.192025][ T312] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.209819][ T335] lo speed is unknown, defaulting to 1000 [ 807.216729][ T335] lo speed is unknown, defaulting to 1000 [ 807.223135][ T335] lo speed is unknown, defaulting to 1000 [ 807.229789][ T335] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 807.251959][ T335] lo speed is unknown, defaulting to 1000 [ 807.271245][ T335] lo speed is unknown, defaulting to 1000 [ 807.278385][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.283153][ T335] lo speed is unknown, defaulting to 1000 [ 807.309358][ T335] lo speed is unknown, defaulting to 1000 [ 807.328761][ T335] lo speed is unknown, defaulting to 1000 [ 807.339694][ T335] lo speed is unknown, defaulting to 1000 [ 807.357761][ T335] lo speed is unknown, defaulting to 1000 [ 807.364486][ T335] lo speed is unknown, defaulting to 1000 [ 807.374613][ T346] loop9: detected capacity change from 0 to 512 [ 807.381400][ T346] EXT4-fs: Ignoring removed oldalloc option [ 807.393392][ T335] lo speed is unknown, defaulting to 1000 [ 807.402964][ T335] lo speed is unknown, defaulting to 1000 [ 807.421911][ T346] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.7589: Parent and EA inode have the same ino 15 [ 807.448264][ T346] loop9: lost filesystem error report for type 5 error -117 [ 807.452088][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 807.465978][ C0] EXT4-fs (loop9): initial error at time 1772139335: ext4_xattr_inode_iget:437 [ 807.475036][ C0] EXT4-fs (loop9): last error at time 1772139335: ext4_xattr_inode_iget:437 [ 807.490005][ T346] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: comm syz.9.7589: Parent and EA inode have the same ino 15 [ 807.527382][ T346] loop9: lost filesystem error report for type 5 error -117 [ 807.527839][ T346] EXT4-fs (loop9): 1 orphan inode deleted [ 807.562184][ T346] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 807.644632][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.770437][ T377] Ÿë: port 1(gretap0) entered blocking state [ 807.776831][ T377] Ÿë: port 1(gretap0) entered disabled state [ 807.793943][ T377] gretap0: entered promiscuous mode [ 807.825241][ T377] Ÿë: port 2(veth0_to_team) entered blocking state [ 807.831977][ T377] Ÿë: port 2(veth0_to_team) entered disabled state [ 807.869720][ T377] veth0_to_team: entered allmulticast mode [ 807.903534][ T377] veth0_to_team: entered promiscuous mode [ 808.055212][ T387] loop9: detected capacity change from 0 to 512 [ 808.314506][ T406] netlink: 'syz.1.7609': attribute type 10 has an invalid length. [ 808.570808][ T420] __nla_validate_parse: 5 callbacks suppressed [ 808.570827][ T420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7613'. [ 808.805036][ T428] loop5: detected capacity change from 0 to 512 [ 808.829362][ T428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 808.850507][ T428] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 808.907179][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.954864][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7619'. [ 808.992220][T27703] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.292196][T26699] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 809.470886][ T456] netlink: 'syz.1.7627': attribute type 3 has an invalid length. [ 809.485483][ T456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.673797][ T456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7627'. [ 810.002149][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 810.236055][ T28] kauditd_printk_skb: 92 callbacks suppressed [ 810.236071][ T28] audit: type=1326 audit(1772139338.662:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.270412][ T28] audit: type=1326 audit(1772139338.692:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.343100][ T28] audit: type=1326 audit(1772139338.692:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.411502][ T28] audit: type=1326 audit(1772139338.692:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.525937][ T28] audit: type=1326 audit(1772139338.692:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.590004][ T28] audit: type=1326 audit(1772139338.692:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.646648][ T28] audit: type=1326 audit(1772139338.692:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.690584][ T28] audit: type=1326 audit(1772139338.692:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.732420][ T28] audit: type=1326 audit(1772139338.692:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.776269][ T28] audit: type=1326 audit(1772139338.692:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=477 comm="syz.3.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 810.974870][ T501] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7642'. [ 810.992918][ T501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7642'. [ 811.210892][ T514] xfrm0 speed is unknown, defaulting to 1000 [ 811.314385][ T514] xfrm0 speed is unknown, defaulting to 1000 [ 811.399725][ T524] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 811.451846][ T524] bond9 (unregistering): Released all slaves [ 811.474612][ T514] lo speed is unknown, defaulting to 1000 [ 811.703568][ T535] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 811.887179][ T543] loop9: detected capacity change from 0 to 512 [ 811.904529][ T545] loop5: detected capacity change from 0 to 128 [ 811.922482][ T543] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 812.027636][ T543] EXT4-fs (loop9): 1 truncate cleaned up [ 812.043519][ T543] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.525068][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.640803][T27703] hid-generic 0003:0004:FFFFFFFE.003C: unknown main item tag 0x0 [ 812.651991][T27703] hid-generic 0003:0004:FFFFFFFE.003C: unknown main item tag 0x0 [ 812.672148][T27703] hid-generic 0003:0004:FFFFFFFE.003C: unknown main item tag 0x0 [ 812.681154][T27703] hid-generic 0003:0004:FFFFFFFE.003C: hidraw5: USB HID v4.00 Device [syz0] on syz1 [ 812.765297][ T595] 9pnet_fd: Insufficient options for proto=fd [ 812.984695][ T600] netlink: 'syz.3.7673': attribute type 10 has an invalid length. [ 813.020117][ T602] loop3: detected capacity change from 0 to 512 [ 813.036231][ T602] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 813.062415][ T602] EXT4-fs (loop3): orphan cleanup on readonly fs [ 813.078058][ T602] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 813.115006][ T602] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 813.136483][ T602] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.7674: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 813.169787][ T602] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 813.170116][ T602] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.7674: couldn't read orphan inode 13 (err -117) [ 813.179327][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 813.179358][ C0] EXT4-fs (loop3): last error at time 1772139597: ext4_ext_check_inode:521: inode 13 [ 813.238829][ T602] loop3: lost filesystem error report for type 5 error -117 [ 813.240077][ T602] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.272642][ T602] EXT4-fs (loop3): shut down requested (0) [ 813.278646][ T604] EXT4-fs error (device loop3): ext4_lookup:1789: inode #2: comm syz.3.7674: deleted inode referenced: 12 [ 813.302965][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.334235][ T606] FAULT_INJECTION: forcing a failure. [ 813.334235][ T606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.354020][ T606] CPU: 0 UID: 0 PID: 606 Comm: syz.3.7675 Tainted: G W syzkaller #0 PREEMPT(full) [ 813.354117][ T606] Tainted: [W]=WARN [ 813.354124][ T606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 813.354137][ T606] Call Trace: [ 813.354144][ T606] [ 813.354178][ T606] __dump_stack+0x1d/0x30 [ 813.354210][ T606] dump_stack_lvl+0x95/0xd0 [ 813.354242][ T606] dump_stack+0x15/0x1b [ 813.354270][ T606] should_fail_ex+0x263/0x280 [ 813.354293][ T606] should_fail+0xb/0x20 [ 813.354359][ T606] should_fail_usercopy+0x1a/0x20 [ 813.354454][ T606] _copy_from_user+0x1c/0xb0 [ 813.354544][ T606] ___sys_sendmsg+0xc1/0x1e0 [ 813.354597][ T606] __x64_sys_sendmsg+0xd4/0x160 [ 813.354647][ T606] x64_sys_call+0x194c/0x3020 [ 813.354691][ T606] do_syscall_64+0x12c/0x370 [ 813.354740][ T606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.354839][ T606] RIP: 0033:0x7f7379e1c629 [ 813.354859][ T606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.354884][ T606] RSP: 002b:00007f737886f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.354904][ T606] RAX: ffffffffffffffda RBX: 00007f737a095fa0 RCX: 00007f7379e1c629 [ 813.354918][ T606] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 813.355057][ T606] RBP: 00007f737886f090 R08: 0000000000000000 R09: 0000000000000000 [ 813.355070][ T606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.355082][ T606] R13: 00007f737a096038 R14: 00007f737a095fa0 R15: 00007fff18f8f708 [ 813.355179][ T606] [ 813.586945][ T611] loop5: detected capacity change from 0 to 1024 [ 813.603342][ T612] netlink: 'syz.0.7676': attribute type 10 has an invalid length. [ 813.622797][ T611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 813.630944][ T611] System zones: 0-1, 3-36 [ 813.656542][ T611] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7678: bad orphan inode 134217728 [ 813.672404][ T611] loop5: lost filesystem error report for type 5 error -117 [ 813.673134][ T611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.740131][ T615] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7679'. [ 813.750752][ T609] loop3: detected capacity change from 0 to 32768 [ 813.818770][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.004293][ T633] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7686'. [ 814.022652][ T632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7687'. [ 814.091626][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7689'. [ 814.194060][ T648] netlink: 'syz.3.7692': attribute type 3 has an invalid length. [ 814.255378][ T657] loop5: detected capacity change from 0 to 136 [ 814.375050][ T654] loop3: detected capacity change from 0 to 128 [ 814.624858][ T668] loop3: detected capacity change from 0 to 136 [ 814.726581][ T674] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 814.732808][ T674] syzkaller1: linktype set to 818 [ 814.994564][ T697] loop9: detected capacity change from 0 to 1024 [ 815.040181][ T697] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.7708: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 815.085185][ T706] netlink: 'syz.0.7712': attribute type 3 has an invalid length. [ 815.119357][ T711] loop3: detected capacity change from 0 to 1764 [ 815.129499][ T706] netlink: 'syz.0.7712': attribute type 3 has an invalid length. [ 815.137726][ T697] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 815.137890][ T697] EXT4-fs error (device loop9): ext4_quota_enable:7195: comm syz.9.7708: Bad quota inode: 4, type: 1 [ 815.146995][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 815.147023][ C0] EXT4-fs (loop9): initial error at time 1772139599: ext4_ext_check_inode:521: inode 4 [ 815.147063][ C0] EXT4-fs (loop9): last error at time 1772139599: ext4_ext_check_inode:521: inode 4 [ 815.190157][ T697] loop9: lost filesystem error report for type 5 error -117 [ 815.197712][ T697] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 815.222173][ T697] EXT4-fs (loop9): mount failed [ 815.315029][ T697] EXT4-fs: dax option not supported [ 815.572993][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 815.573013][ T28] audit: type=1326 audit(1772139600.004:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 815.615711][ T737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 815.693400][ T28] audit: type=1326 audit(1772139600.004:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 815.738182][ T737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 815.756225][ T28] audit: type=1326 audit(1772139600.004:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 815.771103][ T734] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 815.784781][ T28] audit: type=1326 audit(1772139600.004:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 815.818867][ T28] audit: type=1326 audit(1772139600.004:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 815.862271][ T28] audit: type=1326 audit(1772139600.004:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 816.836391][ T28] audit: type=1326 audit(1772139600.004:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 816.861473][ T28] audit: type=1326 audit(1772139600.004:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 816.915563][ T28] audit: type=1326 audit(1772139600.004:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 816.939675][ T28] audit: type=1326 audit(1772139600.004:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=731 comm="syz.1.7721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7faca2f9c629 code=0x7ffc0000 [ 816.976176][ T734] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7722'. [ 817.011353][ T734] netlink: 27 bytes leftover after parsing attributes in process `syz.5.7722'. [ 817.122347][ T752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7726'. [ 817.149313][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.792477][ T760] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7727'. [ 817.948373][ T765] netlink: 'syz.3.7728': attribute type 3 has an invalid length. [ 818.146386][ T765] raw_sendmsg: syz.3.7728 forgot to set AF_INET. Fix it! [ 818.619935][ T797] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7744'. [ 818.629488][ T799] tipc: Started in network mode [ 818.635310][ T799] tipc: Node identity 2d000000000000000000000000000001, cluster identity 4711 [ 818.644794][ T799] tipc: Enabling of bearer rejected, failed to enable media [ 819.150788][ T811] netlink: 176 bytes leftover after parsing attributes in process `syz.9.7749'. [ 819.174865][ T809] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 819.208114][ T811] set_capacity_and_notify: 2 callbacks suppressed [ 819.208129][ T811] loop9: detected capacity change from 0 to 1024 [ 819.222190][ T809] SELinux: failed to load policy [ 819.250588][ T811] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 819.293010][ T811] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 819.368701][ T811] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 819.418319][ T821] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 483 with error 28 [ 819.485034][ T811] EXT4-fs (loop9): This should not happen!! Data will be lost [ 819.485034][ T811] [ 819.557383][ T821] EXT4-fs (loop9): This should not happen!! Data will be lost [ 819.557383][ T821] [ 819.567508][ T830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7754'. [ 819.572457][ T821] EXT4-fs (loop9): Total free blocks count 0 [ 819.594597][ T811] EXT4-fs (loop9): Total free blocks count 0 [ 819.608027][ T821] EXT4-fs (loop9): Free/Dirty block details [ 819.624329][ T811] EXT4-fs (loop9): Free/Dirty block details [ 819.647169][ T835] xt_TCPMSS: Only works on TCP SYN packets [ 819.651968][ T821] EXT4-fs (loop9): free_blocks=20480 [ 819.862492][ T849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7759'. [ 820.092848][ T865] syzkaller0: entered promiscuous mode [ 820.106807][ T865] syzkaller0: entered allmulticast mode [ 820.124524][ T865] tipc: Enabled bearer , priority 0 [ 820.143641][ T864] tipc: Resetting bearer [ 820.197673][ T864] tipc: Disabling bearer [ 820.283345][ T878] netlink: 176 bytes leftover after parsing attributes in process `syz.3.7773'. [ 820.307906][ T878] loop3: detected capacity change from 0 to 1024 [ 820.327208][ T876] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7772'. [ 820.336303][ T876] netlink: 23 bytes leftover after parsing attributes in process `syz.1.7772'. [ 820.357004][ T876] netlink: 23 bytes leftover after parsing attributes in process `syz.1.7772'. [ 820.373621][ T878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 820.394935][ T878] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 820.411605][ T878] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 820.424407][ T878] EXT4-fs (loop3): This should not happen!! Data will be lost [ 820.424407][ T878] [ 820.434210][ T878] EXT4-fs (loop3): Total free blocks count 0 [ 820.440531][ T878] EXT4-fs (loop3): Free/Dirty block details [ 820.446930][ T878] EXT4-fs (loop3): free_blocks=20480 [ 820.450195][ T890] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 60 with error 28 [ 820.452436][ T878] EXT4-fs (loop3): dirty_blocks=80 [ 820.469712][ T878] EXT4-fs (loop3): Block reservation details [ 820.475782][ T878] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 820.519576][ T894] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7777'. [ 820.531691][ T894] ip6gre1: entered allmulticast mode [ 820.560203][ T896] syzkaller0: entered promiscuous mode [ 820.565972][ T896] syzkaller0: entered allmulticast mode [ 820.573989][ T896] tipc: Enabled bearer , priority 0 [ 820.602833][ T895] tipc: Resetting bearer [ 820.621762][ T895] tipc: Disabling bearer [ 820.821032][ T911] loop9: detected capacity change from 0 to 1756 [ 821.015414][ T924] Invalid ELF header magic: != ELF [ 822.203868][ T930] xfrm0 speed is unknown, defaulting to 1000 [ 822.672541][ T948] FAULT_INJECTION: forcing a failure. [ 822.672541][ T948] name failslab, interval 1, probability 0, space 0, times 0 [ 822.695567][ T948] CPU: 0 UID: 0 PID: 948 Comm: syz.9.7799 Tainted: G W syzkaller #0 PREEMPT(full) [ 822.695609][ T948] Tainted: [W]=WARN [ 822.695617][ T948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.695633][ T948] Call Trace: [ 822.695662][ T948] [ 822.695672][ T948] __dump_stack+0x1d/0x30 [ 822.695708][ T948] dump_stack_lvl+0x95/0xd0 [ 822.695741][ T948] dump_stack+0x15/0x1b [ 822.695768][ T948] should_fail_ex+0x263/0x280 [ 822.695792][ T948] should_failslab+0x8c/0xb0 [ 822.695861][ T948] kmem_cache_alloc_lru_noprof+0x6c/0x410 [ 822.695890][ T948] ? __d_alloc+0x37/0x340 [ 822.696012][ T948] __d_alloc+0x37/0x340 [ 822.696040][ T948] ? default_pointer+0xf2/0x5e0 [ 822.696078][ T948] d_alloc+0x2e/0x100 [ 822.696115][ T948] lookup_one_qstr_excl+0x99/0x250 [ 822.696179][ T948] start_dirop+0x3e/0x70 [ 822.696208][ T948] simple_start_creating+0xa2/0xd0 [ 822.696328][ T948] debugfs_start_creating+0xda/0x150 [ 822.696372][ T948] __debugfs_create_file+0x70/0x2b0 [ 822.696401][ T948] debugfs_create_file_full+0x3f/0x60 [ 822.696434][ T948] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 822.696567][ T948] ref_tracker_dir_debugfs+0x10e/0x220 [ 822.696619][ T948] alloc_netdev_mqs+0x1a7/0xa40 [ 822.696658][ T948] ieee802154_if_add+0x8e/0x7f0 [ 822.696680][ T948] ? __nlmsg_put+0xa0/0xc0 [ 822.696712][ T948] ? genlmsg_put+0x116/0x150 [ 822.696761][ T948] ieee802154_add_iface_deprecated+0x43/0x70 [ 822.696800][ T948] ieee802154_add_iface+0x296/0x480 [ 822.696835][ T948] ? __nla_parse+0x40/0x60 [ 822.696889][ T948] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 822.696918][ T948] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 822.696945][ T948] genl_family_rcv_msg_doit+0x187/0x1f0 [ 822.697029][ T948] genl_rcv_msg+0x432/0x470 [ 822.697075][ T948] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 822.697106][ T948] netlink_rcv_skb+0x123/0x220 [ 822.697205][ T948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.697260][ T948] genl_rcv+0x28/0x40 [ 822.697363][ T948] netlink_unicast+0x5c0/0x690 [ 822.697391][ T948] netlink_sendmsg+0x5c8/0x6f0 [ 822.697433][ T948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.697472][ T948] ____sys_sendmsg+0x5af/0x600 [ 822.697512][ T948] ___sys_sendmsg+0x195/0x1e0 [ 822.697569][ T948] __x64_sys_sendmsg+0xd4/0x160 [ 822.697615][ T948] x64_sys_call+0x194c/0x3020 [ 822.697706][ T948] do_syscall_64+0x12c/0x370 [ 822.697811][ T948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.697840][ T948] RIP: 0033:0x7fdad3a5c629 [ 822.697858][ T948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.697877][ T948] RSP: 002b:00007fdad24b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.697898][ T948] RAX: ffffffffffffffda RBX: 00007fdad3cd5fa0 RCX: 00007fdad3a5c629 [ 822.697918][ T948] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000005 [ 822.697936][ T948] RBP: 00007fdad24b7090 R08: 0000000000000000 R09: 0000000000000000 [ 822.697954][ T948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.697971][ T948] R13: 00007fdad3cd6038 R14: 00007fdad3cd5fa0 R15: 00007ffc12742708 [ 822.697998][ T948] [ 822.698380][ T930] xfrm0 speed is unknown, defaulting to 1000 [ 822.848175][ T950] loop9: detected capacity change from 0 to 128 [ 823.232013][ T930] lo speed is unknown, defaulting to 1000 [ 823.593352][ T950] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 823.639816][ T950] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.179488][T28916] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.239793][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 824.239813][ T28] audit: type=1400 audit(1772139608.664:3317): avc: denied { name_connect } for pid=977 comm="syz.9.7808" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 824.244141][ T979] netlink: 'syz.3.7810': attribute type 10 has an invalid length. [ 824.759707][ T1021] loop3: detected capacity change from 0 to 512 [ 824.834997][ T1021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.847874][ T1021] ext4 filesystem being mounted at /461/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.317301][ T1028] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7830'. [ 825.489196][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.546016][ T1038] netlink: 'syz.9.7833': attribute type 10 has an invalid length. [ 825.614977][ T1026] xfrm0 speed is unknown, defaulting to 1000 [ 825.701033][ T1026] xfrm0 speed is unknown, defaulting to 1000 [ 825.784256][ T1026] lo speed is unknown, defaulting to 1000 [ 825.903488][ T1054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7837'. [ 825.953848][ T1026] chnl_net:caif_netlink_parms(): no params data found [ 826.002129][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 826.086008][ T28] audit: type=1326 audit(1772139610.494:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.145249][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.159147][ T28] audit: type=1326 audit(1772139610.514:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.183245][ T28] audit: type=1326 audit(1772139610.514:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.185678][ T1026] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.206897][ T28] audit: type=1326 audit(1772139610.514:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.226782][ T1063] loop3: detected capacity change from 0 to 1024 [ 826.237396][ T28] audit: type=1326 audit(1772139610.514:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.273416][ T1063] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 826.283915][ T1063] System zones: 0-1, 3-36 [ 826.300983][ T28] audit: type=1326 audit(1772139610.544:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.308922][ T1026] bridge_slave_0: entered allmulticast mode [ 826.324903][ T28] audit: type=1326 audit(1772139610.544:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.337247][ T1063] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.7839: bad orphan inode 134217728 [ 826.354324][ T28] audit: type=1326 audit(1772139610.544:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.388565][ T28] audit: type=1326 audit(1772139610.544:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1056 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 826.404045][ T1026] bridge_slave_0: entered promiscuous mode [ 826.414029][ T1063] loop3: lost filesystem error report for type 5 error -117 [ 826.422064][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 826.436207][ C0] EXT4-fs (loop3): initial error at time 1772139610: ext4_orphan_get:1417 [ 826.444784][ C0] EXT4-fs (loop3): last error at time 1772139610: ext4_orphan_get:1417 [ 826.448845][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.454425][ T1063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.482269][ T1026] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.489595][ T1026] bridge_slave_1: entered allmulticast mode [ 826.496683][ T1026] bridge_slave_1: entered promiscuous mode [ 826.517401][ T1026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.530975][ T1026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.555649][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.565992][ T1069] netlink: 'syz.0.7841': attribute type 21 has an invalid length. [ 826.584494][ T1069] netlink: 'syz.0.7841': attribute type 1 has an invalid length. [ 826.593066][ T1069] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7841'. [ 826.631376][ T1026] team0: Port device team_slave_0 added [ 826.638501][ T1026] team0: Port device team_slave_1 added [ 826.656319][ T1026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 826.663561][ T1026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.700230][ T1026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 826.727766][ T1026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.735089][ T1026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.762398][ T1026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.781054][ T1079] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7844'. [ 826.811781][ T1026] hsr_slave_0: entered promiscuous mode [ 826.821438][ T1026] hsr_slave_1: entered promiscuous mode [ 826.827616][ T1026] debugfs: 'hsr0' already exists in 'hsr' [ 826.833688][ T1026] Cannot create hsr debugfs directory [ 826.888753][ T1084] loop3: detected capacity change from 0 to 512 [ 827.035483][ T1084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.048433][ T1084] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.336804][ T1075] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7844'. [ 827.435121][ T1079] xfrm0 speed is unknown, defaulting to 1000 [ 827.450622][ T1026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.592410][ T1079] xfrm0 speed is unknown, defaulting to 1000 [ 827.599596][ T1026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.611496][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.681964][ T1088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7846'. [ 827.744632][ T1026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 827.769026][ T1079] lo speed is unknown, defaulting to 1000 [ 827.775721][ T1102] xt_TCPMSS: Only works on TCP SYN packets [ 827.810855][ T1026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.043820][ T1026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 828.053437][ T1026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 828.062835][ T1026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 828.071956][ T1026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 828.792303][ T1026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 828.817986][ T1026] 8021q: adding VLAN 0 to HW filter on device team0 [ 828.836152][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.843349][ T7705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 828.943985][ T1136] gretap0: entered promiscuous mode [ 828.961729][ T1689] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.968881][ T1689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 829.013369][ T1139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1139 comm=syz.0.7857 [ 829.158348][ T1026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.172732][ T1151] openvswitch: netlink: Missing key (keys=40, expected=80) [ 829.239296][ T1155] loop9: detected capacity change from 0 to 512 [ 829.262226][ T1155] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 829.324943][ T1026] veth0_vlan: entered promiscuous mode [ 829.330972][ T1155] EXT4-fs (loop9): group descriptors corrupted! [ 829.352001][ T1026] veth1_vlan: entered promiscuous mode [ 829.366557][ T1155] loop9: detected capacity change from 0 to 512 [ 829.388803][ T1155] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 829.406166][ T1155] EXT4-fs (loop9): group descriptors corrupted! [ 829.416142][ T1026] veth0_macvtap: entered promiscuous mode [ 829.434404][ T1026] veth1_macvtap: entered promiscuous mode [ 829.449311][ T1155] netlink: 32 bytes leftover after parsing attributes in process `syz.9.7861'. [ 829.464288][ T1026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 829.488221][ T1026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 829.510853][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.530449][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.558664][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.573118][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.782172][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 829.782192][ T28] audit: type=1326 audit(1772139614.204:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713f9c629 code=0x50000 [ 829.844540][ T1182] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 829.854952][ T28] audit: type=1326 audit(1772139614.204:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713f9c629 code=0x50000 [ 829.875532][ T1182] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7867'. [ 829.879846][ T28] audit: type=1326 audit(1772139614.204:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713f9c629 code=0x50000 [ 829.931082][ T28] audit: type=1326 audit(1772139614.204:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713f9c629 code=0x50000 [ 829.961918][ T1184] loop5: detected capacity change from 0 to 512 [ 830.876919][ T1193] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7870'. [ 831.024090][ T1184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.036894][ T1184] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.048615][ T28] audit: type=1326 audit(1772139614.204:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713f9c629 code=0x50000 [ 831.072947][ T28] audit: type=1326 audit(1772139614.204:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe713f9c629 code=0x50000 [ 831.097618][ T28] audit: type=1326 audit(1772139614.254:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fe713f58aec code=0x50000 [ 831.121414][ T28] audit: type=1326 audit(1772139614.254:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe713f58b4e code=0x50000 [ 831.145069][ T28] audit: type=1326 audit(1772139614.254:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe713f9c2bb code=0x50000 [ 831.168947][ T28] audit: type=1326 audit(1772139614.254:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.1.7868" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe713f5cece code=0x50000 [ 831.237335][ T1195] loop9: detected capacity change from 0 to 512 [ 831.253840][ T1195] EXT4-fs: inline encryption not supported [ 831.279788][ T1195] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.331552][ T1195] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.436979][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.494817][ T1213] loop5: detected capacity change from 0 to 128 [ 831.542381][ T1213] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 831.582272][ T1213] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 831.641227][ T1213] FAULT_INJECTION: forcing a failure. [ 831.641227][ T1213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.685299][ T1213] CPU: 0 UID: 0 PID: 1213 Comm: syz.5.7877 Tainted: G W syzkaller #0 PREEMPT(full) [ 831.685353][ T1213] Tainted: [W]=WARN [ 831.685360][ T1213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 831.685374][ T1213] Call Trace: [ 831.685380][ T1213] [ 831.685390][ T1213] __dump_stack+0x1d/0x30 [ 831.685422][ T1213] dump_stack_lvl+0x95/0xd0 [ 831.685523][ T1213] dump_stack+0x15/0x1b [ 831.685546][ T1213] should_fail_ex+0x263/0x280 [ 831.685639][ T1213] should_fail+0xb/0x20 [ 831.685665][ T1213] should_fail_usercopy+0x1a/0x20 [ 831.685697][ T1213] strncpy_from_user+0x27/0x250 [ 831.685729][ T1213] ? kmem_cache_alloc_noprof+0x18c/0x400 [ 831.685776][ T1213] do_getname+0x59/0x1c0 [ 831.685807][ T1213] __se_sys_renameat2+0x29/0x1c0 [ 831.685840][ T1213] __x64_sys_renameat2+0x67/0x80 [ 831.685866][ T1213] x64_sys_call+0x2a12/0x3020 [ 831.685976][ T1213] do_syscall_64+0x12c/0x370 [ 831.686016][ T1213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.686074][ T1213] RIP: 0033:0x7f7776b5c629 [ 831.686094][ T1213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.686119][ T1213] RSP: 002b:00007f77755af028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 831.686146][ T1213] RAX: ffffffffffffffda RBX: 00007f7776dd5fa0 RCX: 00007f7776b5c629 [ 831.686165][ T1213] RDX: ffffffffffffff9c RSI: 0000200000000400 RDI: ffffffffffffff9c [ 831.686224][ T1213] RBP: 00007f77755af090 R08: 0000000000000000 R09: 0000000000000000 [ 831.686242][ T1213] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 831.686260][ T1213] R13: 00007f7776dd6038 R14: 00007f7776dd5fa0 R15: 00007ffde7a4dfb8 [ 831.686288][ T1213] [ 831.902826][T30234] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 831.932293][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.945398][ T1223] loop5: detected capacity change from 0 to 512 [ 832.018069][ T1223] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.7880: bad orphan inode 15 [ 832.052265][ T1223] loop5: lost filesystem error report for type 5 error -117 [ 832.062070][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 832.069621][ T1223] ext4_test_bit(bit=14, block=5) = 0 [ 832.075946][ C1] EXT4-fs (loop5): initial error at time 1772139616: ext4_orphan_get:1417 [ 832.075973][ C1] EXT4-fs (loop5): last error at time 1772139616: ext4_orphan_get:1417 [ 832.143694][ T1231] syzkaller0: entered promiscuous mode [ 832.150190][ T1223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 832.182162][ T1231] syzkaller0: entered allmulticast mode [ 832.202782][ T1231] tipc: Enabled bearer , priority 0 [ 832.242425][ T1230] tipc: Resetting bearer [ 832.254192][ T1230] tipc: Disabling bearer [ 832.273964][ T1223] xfrm0 speed is unknown, defaulting to 1000 [ 832.371630][ T1223] xfrm0 speed is unknown, defaulting to 1000 [ 832.403687][ T1246] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7880'. [ 832.442151][ T1249] netlink: 'syz.9.7885': attribute type 10 has an invalid length. [ 832.544819][ T1256] Invalid ELF header magic: != ELF [ 832.571436][ T1223] lo speed is unknown, defaulting to 1000 [ 832.604450][ T1256] loop9: detected capacity change from 0 to 2048 [ 832.644290][ T1256] EXT4-fs: Ignoring removed i_version option [ 832.720825][ T1256] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.921179][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.038486][ T1328] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 833.060069][T26676] lo speed is unknown, defaulting to 1000 [ 833.144668][ T1328] 9pnet_fd: p9_fd_create_unix (1328): problem connecting socket: ./file0: -2 [ 833.208722][ T1335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7893'. [ 833.243162][T26676] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 833.261491][ T1337] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7888'. [ 833.272763][ T1337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.295237][ T1337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 833.320956][ T1337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.329494][ T1337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.523141][ T1345] loop3: detected capacity change from 0 to 512 [ 833.568813][ T1345] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.570178][ T121] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 833.597383][ T121] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 592 with error 28 [ 833.609996][ T121] EXT4-fs (loop9): This should not happen!! Data will be lost [ 833.609996][ T121] [ 833.612583][ T1345] ext4 filesystem being mounted at /470/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 833.621863][ T121] EXT4-fs (loop9): Total free blocks count 0 [ 833.636577][ T121] EXT4-fs (loop9): Free/Dirty block details [ 833.642694][ T121] EXT4-fs (loop9): free_blocks=2415919504 [ 833.648458][ T121] EXT4-fs (loop9): dirty_blocks=608 [ 833.653966][ T121] EXT4-fs (loop9): Block reservation details [ 833.660065][ T121] EXT4-fs (loop9): i_reserved_data_blocks=38 [ 833.674917][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.830884][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.929760][T26676] hid-generic 0003:0004:FFFFFFFE.003D: unknown main item tag 0x0 [ 833.966762][T26676] hid-generic 0003:0004:FFFFFFFE.003D: unknown main item tag 0x0 [ 834.051739][T26676] hid-generic 0003:0004:FFFFFFFE.003D: unknown main item tag 0x0 [ 834.087589][T26708] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 834.206984][T26676] hid-generic 0003:0004:FFFFFFFE.003D: hidraw6: USB HID v4.00 Device [syz0] on syz1 [ 834.334134][ T1373] sctp: [Deprecated]: syz.0.7905 (pid 1373) Use of int in max_burst socket option deprecated. [ 834.334134][ T1373] Use struct sctp_assoc_value instead [ 834.406162][ T1373] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7905'. [ 834.506209][ T1381] Invalid ELF header magic: != ELF [ 834.520690][ T1379] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7907'. [ 834.531770][ T1381] loop5: detected capacity change from 0 to 2048 [ 834.539544][ T1381] EXT4-fs: Ignoring removed i_version option [ 834.556899][ T1381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.867471][ T1396] FAULT_INJECTION: forcing a failure. [ 834.867471][ T1396] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 834.882337][ T1396] CPU: 0 UID: 0 PID: 1396 Comm: syz.9.7913 Tainted: G W syzkaller #0 PREEMPT(full) [ 834.882379][ T1396] Tainted: [W]=WARN [ 834.882447][ T1396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 834.882463][ T1396] Call Trace: [ 834.882472][ T1396] [ 834.882483][ T1396] __dump_stack+0x1d/0x30 [ 834.882517][ T1396] dump_stack_lvl+0x95/0xd0 [ 834.882550][ T1396] dump_stack+0x15/0x1b [ 834.882614][ T1396] should_fail_ex+0x263/0x280 [ 834.882641][ T1396] should_fail_alloc_page+0xf2/0x100 [ 834.882671][ T1396] __alloc_frozen_pages_noprof+0x108/0x360 [ 834.882711][ T1396] alloc_pages_mpol+0xb3/0x260 [ 834.882802][ T1396] alloc_pages_noprof+0x8f/0x130 [ 834.882839][ T1396] get_free_pages_noprof+0xc/0x40 [ 834.882874][ T1396] selinux_genfs_get_sid+0x33/0x180 [ 834.882967][ T1396] inode_doinit_with_dentry+0x5fd/0x7a0 [ 834.883008][ T1396] selinux_d_instantiate+0x27/0x40 [ 834.883043][ T1396] security_d_instantiate+0x76/0x90 [ 834.883102][ T1396] d_make_persistent+0x4f/0x110 [ 834.883144][ T1396] __debugfs_create_file+0x14e/0x2b0 [ 834.883188][ T1396] debugfs_create_file_full+0x3f/0x60 [ 834.883220][ T1396] ? __pfx_ieee802154_if_setup+0x10/0x10 [ 834.883274][ T1396] ref_tracker_dir_debugfs+0x10e/0x220 [ 834.883319][ T1396] alloc_netdev_mqs+0x1a7/0xa40 [ 834.883417][ T1396] ieee802154_if_add+0x8e/0x7f0 [ 834.883450][ T1396] ? __nlmsg_put+0xa0/0xc0 [ 834.883485][ T1396] ? genlmsg_put+0x116/0x150 [ 834.883518][ T1396] ieee802154_add_iface_deprecated+0x43/0x70 [ 834.883554][ T1396] ieee802154_add_iface+0x296/0x480 [ 834.883660][ T1396] ? __nla_parse+0x40/0x60 [ 834.883686][ T1396] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 834.883775][ T1396] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 834.883808][ T1396] genl_family_rcv_msg_doit+0x187/0x1f0 [ 834.883845][ T1396] genl_rcv_msg+0x432/0x470 [ 834.883891][ T1396] ? __pfx_ieee802154_add_iface+0x10/0x10 [ 834.883971][ T1396] netlink_rcv_skb+0x123/0x220 [ 834.884006][ T1396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 834.884087][ T1396] genl_rcv+0x28/0x40 [ 834.884128][ T1396] netlink_unicast+0x5c0/0x690 [ 834.884165][ T1396] netlink_sendmsg+0x5c8/0x6f0 [ 834.884292][ T1396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.884326][ T1396] ____sys_sendmsg+0x5af/0x600 [ 834.884401][ T1396] ___sys_sendmsg+0x195/0x1e0 [ 834.884447][ T1396] __x64_sys_sendmsg+0xd4/0x160 [ 834.884481][ T1396] x64_sys_call+0x194c/0x3020 [ 834.884518][ T1396] do_syscall_64+0x12c/0x370 [ 834.884587][ T1396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.884617][ T1396] RIP: 0033:0x7fdad3a5c629 [ 834.884638][ T1396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.884734][ T1396] RSP: 002b:00007fdad24b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.884755][ T1396] RAX: ffffffffffffffda RBX: 00007fdad3cd5fa0 RCX: 00007fdad3a5c629 [ 834.884769][ T1396] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000005 [ 834.884787][ T1396] RBP: 00007fdad24b7090 R08: 0000000000000000 R09: 0000000000000000 [ 834.884804][ T1396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.884821][ T1396] R13: 00007fdad3cd6038 R14: 00007fdad3cd5fa0 R15: 00007ffc12742708 [ 834.884847][ T1396] [ 835.245971][ T1398] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7914'. [ 835.418532][ T1414] netlink: 68 bytes leftover after parsing attributes in process `syz.9.7918'. [ 835.553273][ T1689] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 835.582285][ T1689] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1464 with error 28 [ 835.606569][ T1689] EXT4-fs (loop5): This should not happen!! Data will be lost [ 835.606569][ T1689] [ 835.616426][ T1689] EXT4-fs (loop5): Total free blocks count 0 [ 835.632627][ T1689] EXT4-fs (loop5): Free/Dirty block details [ 835.653775][ T1689] EXT4-fs (loop5): free_blocks=2415919504 [ 835.666270][ T1689] EXT4-fs (loop5): dirty_blocks=1472 [ 835.687957][ T1689] EXT4-fs (loop5): Block reservation details [ 835.697293][ T1689] EXT4-fs (loop5): i_reserved_data_blocks=92 [ 835.741618][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.782937][ T1448] netlink: 'syz.5.7925': attribute type 41 has an invalid length. [ 835.832256][ T1452] Invalid ELF header magic: != ELF [ 835.865601][ T1450] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 835.885501][ T1452] loop5: detected capacity change from 0 to 2048 [ 835.904871][ T1452] EXT4-fs: Ignoring removed i_version option [ 835.955874][ T1452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.017944][ T1469] xfrm0 speed is unknown, defaulting to 1000 [ 836.067168][ T1474] FAULT_INJECTION: forcing a failure. [ 836.067168][ T1474] name failslab, interval 1, probability 0, space 0, times 0 [ 836.096027][ T1432] loop3: detected capacity change from 0 to 512 [ 836.112153][ T1474] CPU: 1 UID: 0 PID: 1474 Comm: syz.1.7943 Tainted: G W syzkaller #0 PREEMPT(full) [ 836.112211][ T1474] Tainted: [W]=WARN [ 836.112219][ T1474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.112230][ T1474] Call Trace: [ 836.112237][ T1474] [ 836.112244][ T1474] __dump_stack+0x1d/0x30 [ 836.112270][ T1474] dump_stack_lvl+0x95/0xd0 [ 836.112349][ T1474] dump_stack+0x15/0x1b [ 836.112369][ T1474] should_fail_ex+0x263/0x280 [ 836.112436][ T1474] ? io_drain_req+0x67/0x360 [ 836.112500][ T1474] should_failslab+0x8c/0xb0 [ 836.112518][ T1474] __kmalloc_cache_noprof+0x5f/0x410 [ 836.112541][ T1474] io_drain_req+0x67/0x360 [ 836.112577][ T1474] ? io_queue_sqe_fallback+0x12a/0x140 [ 836.112609][ T1474] io_queue_sqe_fallback+0x132/0x140 [ 836.112642][ T1474] io_submit_sqes+0xe14/0x1270 [ 836.112754][ T1474] __se_sys_io_uring_enter+0x1c9/0xf50 [ 836.112782][ T1474] ? __fget_files+0x184/0x1c0 [ 836.112805][ T1474] ? mutex_unlock+0x4e/0x90 [ 836.112910][ T1474] ? fput+0x8f/0xc0 [ 836.112936][ T1474] __x64_sys_io_uring_enter+0x78/0x90 [ 836.112965][ T1474] x64_sys_call+0x1e16/0x3020 [ 836.113097][ T1474] do_syscall_64+0x12c/0x370 [ 836.113131][ T1474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.113234][ T1474] RIP: 0033:0x7fe713f9c629 [ 836.113249][ T1474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.113266][ T1474] RSP: 002b:00007fe7129f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 836.113284][ T1474] RAX: ffffffffffffffda RBX: 00007fe714215fa0 RCX: 00007fe713f9c629 [ 836.113297][ T1474] RDX: 0000000000006933 RSI: 00000000000008ae RDI: 0000000000000000 [ 836.113342][ T1474] RBP: 00007fe7129f7090 R08: 0000000000000000 R09: 000000000000effd [ 836.113354][ T1474] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000001 [ 836.113365][ T1474] R13: 00007fe714216038 R14: 00007fe714215fa0 R15: 00007ffe745321b8 [ 836.113385][ T1474] [ 836.304871][ T1432] EXT4-fs: Ignoring removed nobh option [ 836.375935][ T1469] xfrm0 speed is unknown, defaulting to 1000 [ 836.384992][ T1479] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 836.416089][ T1432] EXT4-fs (loop3): orphan cleanup on readonly fs [ 836.434850][ T1469] lo speed is unknown, defaulting to 1000 [ 836.440457][ T1432] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.7928: EA inode hash validation failed [ 836.456132][ T1432] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 836.473405][ T1432] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.7928: corrupted inode contents [ 836.492722][ T1432] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 836.496532][ T1432] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.7928: mark_inode_dirty error [ 836.507222][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 836.507283][ C1] EXT4-fs (loop3): initial error at time 1772139621: ext4_do_update_inode:5569: inode 15 [ 836.507663][ C1] EXT4-fs (loop3): last error at time 1772139621: ext4_do_update_inode:5569: inode 15 [ 836.551788][ T1432] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 836.590720][ T1432] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.7928: corrupted inode contents [ 836.633240][ T1432] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 836.636698][ T1432] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.7928: mark_inode_dirty error [ 836.669785][ T1432] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 836.682348][ T1498] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 836.693885][ T1432] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.7928: mark inode dirty (error -117) [ 836.714980][ T1432] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 836.716989][ T1432] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 836.763864][ T1432] EXT4-fs (loop3): 1 orphan inode deleted [ 836.821624][ T1198] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 836.881936][ T1432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 836.905207][ T7707] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1330 with error 28 [ 836.919849][ T7707] EXT4-fs (loop5): This should not happen!! Data will be lost [ 836.919849][ T7707] [ 836.932286][ T7707] EXT4-fs (loop5): Total free blocks count 0 [ 836.938391][ T7707] EXT4-fs (loop5): Free/Dirty block details [ 836.944666][ T7707] EXT4-fs (loop5): free_blocks=2415919504 [ 836.950463][ T7707] EXT4-fs (loop5): dirty_blocks=1344 [ 836.956183][ T7707] EXT4-fs (loop5): Block reservation details [ 836.964914][ T7707] EXT4-fs (loop5): i_reserved_data_blocks=84 [ 836.986898][T30234] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.041345][T25679] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.054107][ T1512] loop5: detected capacity change from 0 to 764 [ 837.060666][ T1512] iso9660: Unknown parameter '' [ 837.134215][ T1512] loop5: detected capacity change from 0 to 8192 [ 837.141000][ T1512] vfat: Unknown parameter '' [ 837.330459][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 837.330475][ T28] audit: type=1400 audit(1772139622.752:3527): avc: denied { accept } for pid=1526 comm="syz.3.7960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 837.394867][ T1529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7961'. [ 837.412895][ T1529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.479813][ T1529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.505658][ T28] audit: type=1326 audit(1772139622.932:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.529583][ T1539] netlink: 3260 bytes leftover after parsing attributes in process `syz.9.7965'. [ 837.529609][ T28] audit: type=1326 audit(1772139622.932:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.625304][ T1541] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7966'. [ 837.634607][ T1549] loop5: detected capacity change from 0 to 2048 [ 837.643252][ T28] audit: type=1326 audit(1772139622.932:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.686101][ T28] audit: type=1326 audit(1772139622.932:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.712309][ T28] audit: type=1326 audit(1772139622.932:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.749403][ T28] audit: type=1326 audit(1772139622.942:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.792280][ T1564] netlink: 'syz.0.7973': attribute type 3 has an invalid length. [ 837.826550][ T1564] netlink: 'syz.0.7973': attribute type 3 has an invalid length. [ 837.848204][ T1566] loop9: detected capacity change from 0 to 1024 [ 837.858154][ T28] audit: type=1326 audit(1772139622.942:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.886011][ T28] audit: type=1326 audit(1772139622.942:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 837.927866][ T1566] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 837.973814][ T1566] System zones: 0-1, 3-36 [ 837.987476][ T1566] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.7972: bad orphan inode 134217728 [ 838.004316][ T28] audit: type=1326 audit(1772139622.942:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1532 comm="syz.3.7963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7379e1c629 code=0x7ffc0000 [ 838.053309][ T1566] loop9: lost filesystem error report for type 5 error -117 [ 838.059315][ T1566] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.196232][ T1588] bond3: (slave veth3): Enslaving as an active interface with a down link [ 838.244836][T28916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.257148][ T1589] bond3: (slave veth5): Enslaving as an active interface with a down link [ 838.464398][ T1593] loop9: detected capacity change from 0 to 512 [ 838.572874][ C1] ================================================================== [ 838.581308][ C1] BUG: KCSAN: data-race in __perf_event_overflow / __perf_event_set_bpf_prog [ 838.590137][ C1] [ 838.592478][ C1] write to 0xffff8881215155d8 of 8 bytes by task 1604 on cpu 0: [ 838.600130][ C1] __perf_event_set_bpf_prog+0x419/0x470 [ 838.605808][ C1] perf_ioctl+0x92e/0x15d0 [ 838.610294][ C1] __se_sys_ioctl+0xce/0x140 [ 838.614932][ C1] __x64_sys_ioctl+0x43/0x50 [ 838.619556][ C1] x64_sys_call+0x1563/0x3020 [ 838.624266][ C1] do_syscall_64+0x12c/0x370 [ 838.628988][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.634993][ C1] [ 838.637350][ C1] read to 0xffff8881215155d8 of 8 bytes by interrupt on cpu 1: [ 838.644918][ C1] __perf_event_overflow+0x252/0x920 [ 838.650333][ C1] perf_swevent_hrtimer+0x28d/0x310 [ 838.655563][ C1] __hrtimer_run_queues+0x218/0x4f0 [ 838.660802][ C1] hrtimer_interrupt+0x269/0x810 [ 838.665780][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 838.671806][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 838.677491][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.683592][ C1] kcsan_enable_current_nowarn+0x2c/0x80 [ 838.689366][ C1] __memcg_slab_post_alloc_hook+0x2f4/0x540 [ 838.695647][ C1] kmem_cache_alloc_bulk_noprof+0x46a/0x4c0 [ 838.701574][ C1] __io_alloc_req_refill+0x65/0x1e0 [ 838.706828][ C1] io_submit_sqes+0xa65/0x1270 [ 838.711665][ C1] __se_sys_io_uring_enter+0x1c9/0xf50 [ 838.717163][ C1] __x64_sys_io_uring_enter+0x78/0x90 [ 838.722743][ C1] x64_sys_call+0x1e16/0x3020 [ 838.727446][ C1] do_syscall_64+0x12c/0x370 [ 838.732070][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.737999][ C1] [ 838.740337][ C1] value changed: 0x0000000000000000 -> 0xffffc90001905000 [ 838.747471][ C1] [ 838.749887][ C1] Reported by Kernel Concurrency Sanitizer on: [ 838.756092][ C1] CPU: 1 UID: 0 PID: 1593 Comm: syz.9.7982 Tainted: G W syzkaller #0 PREEMPT(full) [ 838.767021][ C1] Tainted: [W]=WARN [ 838.770840][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.781025][ C1] ================================================================== [ 838.818917][ T1606] netlink: 'syz.0.7987': attribute type 10 has an invalid length. [ 838.827104][ T1606] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7987'. [ 840.482401][T24726] IPVS: ip_vs_send_async error -22 [ 841.362426][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!