last executing test programs: 8m4.409651261s ago: executing program 32 (id=143): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 7m54.270203624s ago: executing program 33 (id=373): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ff, 0xb}, 0x106200, 0x11004, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbd725020000000900010073797a3200000000140002"], 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010028bd70fefbdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) 7m49.60133117s ago: executing program 34 (id=482): setuid(0xee01) r0 = semget$private(0x0, 0x4, 0x29b) semop(r0, &(0x7f0000001940)=[{0x0, 0x203}, {}], 0x2) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000240)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x108, 0x6}, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1}) semctl$GETVAL(r0, 0x1, 0xc, 0x0) 7m37.139505903s ago: executing program 35 (id=835): unshare(0x8000000) r0 = semget(0x3, 0x1, 0x3c4) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x949, 0x3800}], 0x1, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x2]) unshare(0x60040000) 6m39.108600548s ago: executing program 36 (id=2335): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000bc0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 6m23.969314935s ago: executing program 37 (id=2333): getresuid(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000001240), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") setresuid(0xee00, 0xee00, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa00048, &(0x7f0000000140), 0x1, 0x7c8, &(0x7f0000001a80)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) 6m20.464502746s ago: executing program 38 (id=2381): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010100}], 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 5m51.513554946s ago: executing program 39 (id=3144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c0000000055c0f74a000000000000000400000000000000ffffffff0600380001"], 0x78) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000031) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 5m48.875880717s ago: executing program 40 (id=3171): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0xec0, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0xeac, 0x1, [@m_skbedit={0x48, 0xf, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1416}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe60, 0x10, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x8, 0x863b, 0x2, 0x1}, 0x7, 0x4}, [{0x9, 0x7ff, 0xfffffffc, 0x4, 0x2}, {0x6, 0x5, 0x3, 0xe, 0x0, 0x8}, {0x8, 0x1, 0x3, 0x0, 0x1ff, 0x5}, {0xf8, 0x0, 0xb, 0x0, 0xdf, 0xfffffff7}, {0xfffffffb, 0x8, 0x4, 0x526d9e9, 0x3, 0x80000000}, {0x4, 0x8, 0x9, 0x100, 0xd2b3, 0x1}, {0x278, 0xd, 0xbe, 0x2, 0x5, 0x10000}, {0x7bef2566, 0x0, 0x6, 0xfffffff7, 0xfffffff9, 0x200}, {0x3, 0x8, 0x0, 0x0, 0xffff, 0x4}, {0xea46, 0x7f, 0xfffff001, 0x34, 0x0, 0xd3}, {0x0, 0x2b0, 0x65, 0x9, 0x4, 0x1700}, {0xf, 0x9, 0x7, 0x9, 0x4c27, 0x2}, {0x9, 0x5, 0x4, 0x1, 0x9, 0x996}, {0xe, 0x9, 0x100, 0x7fffffff, 0x4, 0x9724}, {0x1, 0xed5, 0xe, 0x3f, 0xfff, 0xfffff000}, {0x6, 0x0, 0x10, 0xe0000000, 0x4229, 0xfff}, {0x4, 0x8, 0x10001, 0x3, 0x400, 0x7}, {0x5, 0x1ac062ea, 0x7, 0x7, 0x79, 0x80}, {0x9, 0x7, 0x10000, 0xfff, 0x5, 0x101}, {0x9, 0x10000000, 0x6, 0x8, 0x0, 0x9}, {0x1, 0x10, 0x10001, 0xb, 0xfffffff8, 0xe}, {0x7ff, 0x5, 0x5, 0x38c, 0x7, 0x1}, {0x0, 0x273, 0xfff, 0x6, 0x81}, {0x56, 0x1, 0x2f, 0xe, 0xfffffc01, 0x8}, {0x40000000, 0x1, 0x3ff, 0x5, 0x3, 0x7bf0}, {0x7, 0xffffff24, 0x12, 0x6, 0x5, 0x6}, {0xffff5f6d, 0x3cab, 0x4, 0xc73, 0x101, 0x4}, {0x2, 0x68, 0x1, 0x1, 0x1, 0x6}, {0xd, 0x20000, 0x4, 0x3, 0x5ffa995c, 0x6a8b}, {0x9, 0x9639, 0xfe, 0x3d3, 0x4, 0xc6}, {0x80000000, 0x8000, 0x3, 0x46, 0x80, 0x8}, {0x7f, 0x8, 0x3, 0xf, 0xfff00}, {0xffffffff, 0xef, 0x8000, 0x8, 0x317f, 0xb}, {0x4, 0x38a2, 0x4f1, 0x1eb, 0x80000000, 0xfffffffc}, {0x143, 0x0, 0x5, 0xfffffff9, 0x4, 0x9}, {0xdf0, 0xb, 0x30, 0x2, 0x6bfa, 0x1}, {0xa, 0xec6b, 0x6, 0x2aff, 0xc184, 0x5}, {0x0, 0x10001, 0xcd, 0x500, 0x7f, 0x10}, {0xfff, 0x5, 0x0, 0x4, 0xfffffff9, 0x7}, {0x1, 0x8, 0x8, 0x1c, 0x3ff, 0x200}, {0x6, 0x7ff, 0x8, 0xa, 0x3, 0x7}, {0x2, 0x6, 0x2, 0x3, 0x9, 0xc}, {0x4, 0x5230, 0x7, 0x8, 0x10, 0x9d}, {0x4, 0xfffffffe, 0x4, 0x101, 0x8}, {0xf2f, 0x0, 0x495f4d86, 0x0, 0x7, 0x9}, {0xfffffffd, 0x7, 0x9, 0x3, 0x9, 0x8}, {0x9, 0x81, 0x0, 0x8, 0x1, 0xe}, {0x8, 0x2, 0x8d, 0x5, 0x7, 0x1}, {0xfffffffc, 0x4, 0x6, 0x1, 0x2, 0x7}, {0x4, 0x2, 0x6, 0x3, 0x1000, 0x9}, {0x101, 0x1, 0x3, 0xc8e, 0x7, 0x7}, {0xa2, 0x1, 0x3, 0x929, 0x3ff, 0x5}, {0x80000001, 0x401, 0x694c, 0x6, 0x9, 0x1}, {0xb, 0x1, 0x1000, 0xf, 0xe72, 0x7fffffff}, {0xf503, 0x800, 0x0, 0x2, 0xeb7e, 0x6}, {0x0, 0x0, 0x9, 0xd, 0x3ff}, {0x7ff, 0x3, 0x6376, 0x4, 0x3, 0x1}, {0x10000, 0x0, 0x4, 0x9, 0x1, 0xfffeffff}, {0x3, 0x2, 0xffffffff, 0x1, 0xe64, 0xff}, {0x80, 0x93, 0x40, 0x2, 0x8, 0x2}, {0x0, 0x3, 0x4, 0x3, 0x9, 0x1}, {0x7, 0x0, 0x8, 0x3, 0x6, 0x8000}, {0x8, 0x8, 0x40, 0x7, 0x2, 0xe4}, {0xb, 0xffffff00, 0x9, 0xffffffff, 0x9, 0x2}, {0xec5, 0x4, 0x800, 0x6, 0x10000, 0x3}, {0x0, 0x5, 0x1, 0x1, 0x2, 0x80000001}, {0x7, 0x7, 0xe, 0x5, 0x2, 0xfffffff8}, {0x5, 0x5afe, 0x0, 0x7, 0x5, 0x9}, {0x101, 0x9, 0x1ff, 0xe5, 0xfffff000, 0x9}, {0x8fc, 0xf, 0x1, 0x70e, 0x0, 0x7}, {0x6, 0xffffffff, 0x4, 0x9, 0x7, 0x5}, {0x5, 0x1000, 0x9, 0x9, 0x5, 0x1}, {0x3, 0x9, 0x5, 0x1, 0xffffffff, 0x9}, {0x8, 0xff, 0x100, 0x6, 0x7f94, 0x3}, {0x80000000, 0xff, 0xcb6c, 0x8, 0x4, 0x1}, {0xfad6, 0x1000, 0x6, 0x2, 0xffffa683, 0x6}, {0xa, 0x9b, 0xff, 0x3, 0x5, 0xfffffff9}, {0x8a5, 0x1ff, 0x7, 0x6912, 0xf, 0xf}, {0x9, 0x80, 0x5, 0xffff8000, 0xffff000, 0xf286}, {0x635, 0x8, 0xf000000, 0x1, 0x2, 0x9a0}, {0x6, 0x5, 0x81, 0x2, 0xb1, 0x1}, {0x0, 0x9, 0x4, 0x4, 0xf7c, 0x1}, {0x5adc, 0x3, 0x7, 0x2, 0x9, 0xa5}, {0x8001, 0x8, 0x40, 0xf4b4, 0x4, 0xffffffff}, {0xeb, 0x3, 0x5, 0x10001, 0x5, 0x5}, {0x800, 0x5c5, 0xfffffffc, 0x9, 0x2, 0x5}, {0xe, 0x0, 0x8, 0x7, 0x3, 0x6}, {0x0, 0x9, 0x8000, 0x1, 0xfffffff6, 0x1}, {0x1, 0x8, 0x201, 0x6, 0x13a, 0xfffffff9}, {0xe, 0x4, 0x1, 0x8, 0xfffffff2, 0x4}, {0x5, 0x2, 0x7, 0x3, 0x3, 0x44}, {0x9, 0x7, 0x5, 0x6, 0x45, 0x6}, {0x1, 0x15, 0x0, 0x10001, 0x3ff, 0x6}, {0x6, 0x6, 0x5, 0xb1, 0x2, 0x8}, {0x9, 0x81, 0x401, 0x6, 0x3, 0x7}, {0x3ffc0, 0x6fee, 0xaa5, 0x7, 0x100, 0x7fffffff}, {0x7f, 0x2, 0x3, 0x1, 0x10001, 0xc0}, {0x10001, 0x6, 0x1, 0x43, 0x6, 0xa2c}, {0x3, 0x4, 0xffffb495, 0xc53b, 0x1, 0x8dcd}, {0x2, 0xb, 0xfff, 0x101, 0xffffffff, 0x8}, {0x4, 0x5, 0x3, 0x3945, 0xf, 0x5}, {0x8795, 0x5000000, 0xbf, 0x1, 0x7, 0xffffffff}, {0x9, 0x1, 0x1, 0x1, 0x1, 0x8001}, {0x1, 0xfffff303, 0x4, 0x3, 0xfffffff9, 0x7fff}, {0x1ff, 0x9, 0x401, 0x1ff, 0x1ff, 0x5}, {0x4, 0x80000000, 0x3, 0x7, 0x1, 0xd3}, {0x2, 0x1, 0x3, 0x8, 0xfffffffb, 0x7}, {0x8, 0x0, 0x6, 0x0, 0x401, 0x7}, {0x80000001, 0x1, 0xd8bb, 0x0, 0xdaca, 0x1}, {0x3400, 0x4, 0x4, 0x7fffffff, 0xfffffff7, 0x3}, {0x8, 0x2, 0xfffffffe, 0x2, 0x7, 0x6}, {0x9, 0x5, 0x5, 0x2, 0x3, 0x1b}, {0x7fff, 0x4, 0xc879, 0x3, 0x5, 0xb1}, {0x10, 0x46b426e9, 0x8, 0x0, 0x1, 0x3}, {0x2, 0x0, 0x6, 0x100, 0x1, 0x8}, {0x4dd2, 0x8, 0x0, 0x2, 0x1, 0x7fffffff}, {0x1, 0x6, 0x91ee, 0x70, 0x3, 0x80000000}, {0xffffce52, 0x400, 0x0, 0x4, 0x4, 0x7}, {0x8, 0xfffffff1, 0x1, 0x7, 0x2, 0x5}, {0x3, 0x264a, 0x401, 0x5, 0x1, 0x1}, {0x1, 0xfffffff7, 0xf, 0x8, 0x25, 0x38d}, {0xade6bc8, 0x3, 0x0, 0x7, 0xb, 0x10001}, {0x35, 0x7ff, 0x2bf, 0x0, 0x8}, {0x7f, 0xf, 0xb, 0x5, 0xf, 0xffffff7f}, {0x8000, 0x3, 0x8, 0x9, 0x3b, 0x9}, {0x3, 0x8, 0x80, 0x1b000000, 0x6, 0xc7}, {0x4, 0x1, 0x10001, 0x5, 0x89, 0x6}, {0x0, 0x4, 0x0, 0x6, 0x2, 0x4}], [{0x3}, {0x6, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x7}, {0x4}, {0x6}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2}, {0x2}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {0x5}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0xae668b2beb1d7d72, 0x1}, {}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x4}, {0x1, 0x1}, {}, {0xa}, {0x4}, {0x3}, {0x2}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xec0}}, 0x4000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m21.995829061s ago: executing program 41 (id=3755): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) r1 = socket(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000180), &(0x7f00000001c0)=@tcp=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x541b, r0) 5m17.253801613s ago: executing program 1 (id=3843): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@private0, 0x0, 0x4, 0x4e23, 0x10, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x7, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 5m17.162746346s ago: executing program 1 (id=3846): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@noquota}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m17.0260048s ago: executing program 1 (id=3847): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}}, 0x0) 5m16.956010198s ago: executing program 1 (id=3850): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000b40)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 5m16.910616349s ago: executing program 1 (id=3853): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000a, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x6000) 5m16.651105801s ago: executing program 1 (id=3863): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 5m16.600684662s ago: executing program 42 (id=3863): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 5m1.834409748s ago: executing program 8 (id=4301): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000180)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 5m1.676557499s ago: executing program 8 (id=4306): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r0}, &(0x7f0000000080), &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m1.564955648s ago: executing program 8 (id=4308): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x10001, 0xfffffffd, 0x3, 0xabca, 0x85, 0x100, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 5m0.941740802s ago: executing program 8 (id=4310): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xabca, 0x5, 0xa, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x3, 0x5, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf338674bd9bffbcafd468e306d7b4ef07ec3ad71e14dc00000000c2ab00c60e000000000000080000090100", "f28359738e229a4c66810000000000d300e6d6020000d2000000000000000001", [0x9, 0x40000000000000]}) 5m0.039608306s ago: executing program 8 (id=4322): r0 = socket$caif_stream(0x25, 0x1, 0x1) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x3, 0x1d}, &(0x7f00000000c0)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000002000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) 4m59.865430134s ago: executing program 8 (id=4325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x360}, {&(0x7f0000000b80)="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", 0x21e}, {&(0x7f0000000dc0)="30419d20437c98b91b9455046f57b5fc090000000000001a7838ddb9000067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589", 0x4a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40) 4m59.865180303s ago: executing program 43 (id=4325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="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", 0x360}, {&(0x7f0000000b80)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cfffffffffffffffff8955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f120790934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b23190800000081803a2119d9efd47b1abba3c1e6c563c1", 0x21e}, {&(0x7f0000000dc0)="30419d20437c98b91b9455046f57b5fc090000000000001a7838ddb9000067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589", 0x4a}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x40) 4m6.90984332s ago: executing program 4 (id=5469): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x17008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ftruncate(r0, 0x5) 4m6.326007264s ago: executing program 4 (id=5482): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x208010, &(0x7f00000005c0)=ANY=[@ANYBLOB="646f733178666c259b343fd685792c0081b970078cc79a45f710a205e736e7d5c6a83a342ca3a9e4573f6a2b226f296215dc2c1f3a05ff21e745e594cd9b6badb7564e315f633cbfd46029080e9b9bba2287e278bb20501b89b2cec93e6bc2a60858cc0b40a6df"], 0x0, 0x217, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) 4m6.203168441s ago: executing program 4 (id=5484): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmmsg(r2, &(0x7f0000006c80)=[{{0x0, 0x0, &(0x7f00000057c0)=[{&(0x7f0000004280)="7ba1", 0x2}], 0x1}}], 0x1, 0x4048005) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) recvmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000880)=""/145, 0xec2}], 0x1}, 0x2) 4m6.135577919s ago: executing program 4 (id=5488): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000f80)={[{@grpquota}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@noauto_da_alloc}]}, 0xfe, 0x54c, &(0x7f0000000400)="$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") chdir(&(0x7f0000000140)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae5c70f20ff8ee09e737ff0edf1139c2eb4b68c660e677df7019051caafa00afaaf755a314a10400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a323ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000522100000001", [0x8, 0x100]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 4m5.6475591s ago: executing program 4 (id=5506): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x146, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8000}) msgsnd(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="b15fbbf2a54c"], 0x8, 0x0) 4m5.497090753s ago: executing program 4 (id=5498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m5.48445988s ago: executing program 44 (id=5498): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m14.433473433s ago: executing program 5 (id=6467): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='-', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m14.237565187s ago: executing program 5 (id=6470): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4000054) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x80) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r1, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 3m14.110325594s ago: executing program 5 (id=6472): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m14.019935398s ago: executing program 5 (id=6474): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x4000003, 0x0, 0x0, 0x1e, 0x1, "ef35af413bb901527fe4d0ce5d29c3ee1e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b73267366de2008122fffff2ff38bd0560a0fb8d429b84c50c008000", [0x4, 0x100]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x84242, 0x1ff) 3m13.75727295s ago: executing program 5 (id=6481): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x4000064f) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000000), 0x560c89bb) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x12c) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) 3m13.211140591s ago: executing program 5 (id=6492): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu==-!|!') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x50000091, 0x0, 0x0, 0x0, 0x0, 0x0) 3m13.188646437s ago: executing program 45 (id=6492): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu==-!|!') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x50000091, 0x0, 0x0, 0x0, 0x0, 0x0) 3m8.844980746s ago: executing program 2 (id=6566): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10000, 0x800, 0x4, 0x5, 0x78d9, 0x3ff, 0x1, 0x4, 0x2}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x14c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x3}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x120, 0x2, [@TCA_U32_SEL={0x114, 0x5, {0xf, 0x5, 0x10, 0x1, 0x1, 0x644e, 0x7, 0x4, [{0xe, 0x7ff, 0x5f, 0x6}, {0x8, 0x101, 0x7d, 0xfffffffa}, {0x3, 0x0, 0x6e86, 0x4}, {0x6, 0x2230, 0x0, 0x8}, {0x7fff, 0x401, 0xffff, 0xff}, {0x1, 0x8, 0xff, 0x4}, {0x8, 0x0, 0x6, 0x8}, {0xf02, 0x7, 0x4, 0xffff}, {0x5, 0x81, 0x3, 0x2}, {0x9, 0x4, 0x216, 0x5}, {0x401, 0xdc6, 0xadb, 0x6}, {0x0, 0x8, 0xb62, 0x5}, {0x6, 0xa, 0x1, 0x2}, {0x2, 0x79ff, 0x4, 0x4}, {0x101, 0x10003, 0xfffffbff, 0x400}, {0x0, 0x0, 0x6, 0x3}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x14c}}, 0x4080) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m8.789197736s ago: executing program 2 (id=6568): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4000, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7, 0x1}, 0x0, 0x0, 0x8000000000000000, 0xee, 0x39, 0x4, 0x32, 0xadeb}}], 0x58}, 0x0) 3m8.720525493s ago: executing program 2 (id=6570): r0 = socket(0xa, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1109, &(0x7f0000000040)={0x0, 0x533c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m8.685187327s ago: executing program 2 (id=6571): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b145b, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 3m8.665425373s ago: executing program 2 (id=6572): socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0xe000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x436d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m8.011331234s ago: executing program 2 (id=6584): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) close_range(r4, r4, 0x0) 3m8.010972924s ago: executing program 46 (id=6584): r0 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x471b, 0xfffffffe, 0x20, 0x0, 0xffffffffffffff68) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) close_range(r4, r4, 0x0) 2.907226739s ago: executing program 3 (id=9680): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f0000001bc0)={0xa, 0x4e1d, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000000100)="54b444", 0x3}], 0x1}}], 0x1, 0x40) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) shutdown(r0, 0x1) syz_io_uring_submit(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 2.789408467s ago: executing program 7 (id=9684): rename(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x48) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x18a8408, &(0x7f00000006c0)={[{@nodots}, {@fat=@errors_continue}, {@fat=@nfs}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@nocase}, {@dots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}], [{@uid_lt}, {@flag='mand'}, {@hash}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r2 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) 2.685496088s ago: executing program 7 (id=9685): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000180)=ANY=[@ANYRES64=0x0], 0xfe, 0x122e, &(0x7f0000001280)="$eJzs3E1rXFUYB/DHSdrExLyotVpBerAb3VySLNwoSJAUpANK2witINyaiQ65zoTcITAiRldu3fgB3IpLd4K4001c+BncZePShXqlM+lL7GjQau8Qfr/NPMy5f3jO3OHAGebcg5c+fW9rs8w28140Hno5GtsRk7+lSNGIWz6K51/87vtnrly7fmm12Vy7nNLF1avLL6SU5s9/8+YHXz77bW/2ja/mv56K/cW3Dn5e+Wn/7P65g9+vvtsuU7tMnW4v5elGt9vLbxSttNEut7KUXi9aedlK7U7Z2jkyvll0t7f7Ke9szM1s77TKMuWdftpq9VOvm3o7/ZS/k7c7KcuyNDcT3I/1L36pqiqiqk7F6aiqqno4ZqIRj8RczMdCLMaj8Vg8HmfiiTgbT8ZTcW5wVd19AwAAAAAAAAAAAAAAAAAAwMky6vz/7D3n/z+LGHX+/3zNzQMAAAAAAAAAAAAAAAAAAMAJceXa9Uurzeba5ZSmI4pPdtd314evw/HVzWhHEa1YioX4NQan/4eG9elori2lgcX4uNg7zO/trk8czS8PHidwT/7iq8215WE+Hc1Pxczd+ZVYiDOj8yt/yl8Y5KfjuQt35bNYiB/fjm4UsRE3s3fyHy6n9Mprzdv5H/aHc9+o8b4AAADAfylLt43cv2fZX40P88f9PnBzf710Z38eixGH+cl4erLeuRNR9t/fyouitVN7cauj4Tt7ETEmjf3rohERY9DG3xSnjr1mtobGPp+NuI/4xJEv0lh8zmNeTI8aOm7lmPhf1yUejMObPlV3HwAAAAAAAAAAAPwzD+IPhnXPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mAHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXwUAAP//3m/GvA==") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) fallocate(r1, 0x0, 0x0, 0x8800000) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x8000) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1600, 0x0, 0x3) 2.595782442s ago: executing program 9 (id=9686): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7a, 0xd, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x2000, 0x32, 0xfffffbff, 0x7, 0x802, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) syz_usb_connect$printer(0x5, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 2.017832667s ago: executing program 0 (id=9688): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x3ad0, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x3aa4, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x18b4, 0x4, [@m_police={0xc8, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x90, 0x9, 0x0, 0x0, {{0xc}, {0x4}, {0x61, 0x6, "14337e58be45d60f659754ec12e5d9ab30fcb57981051924d37f4f0fd25a3ef87b4e232d3bfdc9c80e6ee7845cbdd8ea6467a6e4d8f14d4a03a927cf8cd13c4b64426d975ee16c7b9e3ea473e415c230d4a08725de6d4cf8fa0a2ee1d2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x10000000, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x1644, 0x12, 0x0, 0x0, {{0xb}, {0x15ec, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x1, 0x1, 0x3, {0x3, 0x0, 0x1, 0xfff7, 0x9, 0x7}, {0x3, 0x0, 0x6, 0xa8, 0x8, 0x3}, 0x4, 0x6, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x7, 0xd3b, 0x2, {0xf6, 0x1, 0x4, 0x200, 0x4597, 0x7fff}, {0x2, 0x2, 0x2, 0xbe, 0x9, 0x40}, 0x6, 0x10001, 0x2}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4ee5a755}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff4, 0x1, 0xcc, 0x6, 0x4e11, 0x7, 0x62d, 0x80000001, 0x3, 0x401, 0x5, 0x6, 0x1, 0x5, 0x7fff, 0x0, 0x97, 0x5, 0x3, 0x301ea6fc, 0x80000000, 0x200, 0x7, 0x10, 0x4, 0x3, 0x8, 0x9, 0x100, 0xc, 0x56, 0x8, 0x8, 0xa, 0x4eee6086, 0x1, 0x5, 0x2, 0x1, 0x4c, 0x2, 0x9, 0x122e, 0x4, 0x1000, 0x2, 0x80000000, 0x9, 0x8001, 0x10001, 0x200, 0x1b, 0x8, 0x7, 0xc000000, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fffffff, 0x2, 0x7, 0x101, 0x0, 0x10, 0x260, 0x0, 0x7, 0x2, 0x2, 0x3, 0x3, 0x6450, 0x1ff, 0xb2, 0x5, 0x0, 0x0, 0x380000, 0x8000, 0x0, 0x6, 0x80000001, 0x1, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0x7, 0x6, 0x40, 0x813, 0x1, 0x7ff, 0xb, 0x6, 0x9, 0x6, 0x8b, 0x6, 0x0, 0xa06, 0xc33, 0xfffffff9, 0x3, 0xb, 0x3, 0x6, 0x9, 0x0, 0x4, 0x25a, 0x3000000, 0x101, 0xfffffff8, 0x0, 0xfea, 0x20000000, 0x6, 0xd, 0x6, 0x8dd4, 0x7, 0xd, 0xffffffff, 0x163f856e, 0xd6, 0xbb68, 0x9, 0x101, 0x14000, 0x9, 0x7, 0x200, 0x5, 0x1, 0x3, 0x6, 0xdb, 0x71c, 0x7, 0x1000, 0x6, 0xb8, 0x54fa07ca, 0x5, 0x5, 0x4, 0xb, 0x8, 0x6, 0x9, 0x2, 0xa, 0x9f, 0x1000, 0x5, 0xba, 0x3b5, 0x1ff, 0x5, 0x7, 0xfffffffe, 0x5, 0x0, 0x5, 0xb479, 0xfffffffd, 0x8, 0x3, 0x2, 0x3, 0x1, 0x1, 0x3, 0x5, 0x101, 0x800, 0x2, 0x7fffffff, 0xbb5c, 0x4e, 0x6, 0x7, 0x3, 0x1, 0x3, 0x2, 0x5, 0x7f, 0x4, 0x3d6, 0x4, 0x4, 0x2, 0x7, 0x3, 0x60000000, 0x1, 0x40, 0xa6, 0x7, 0x6, 0x6, 0x803, 0x0, 0x8, 0x2000, 0x8, 0x90, 0x6, 0x0, 0x4, 0x3, 0x4, 0x0, 0x8, 0x9, 0xa4fb, 0x7f, 0x7f0, 0xffffff80, 0x9, 0xa, 0x40000000, 0x19, 0x6, 0x6428, 0x6, 0x7, 0x1, 0x6, 0x9, 0x5, 0xc2a, 0x80000001, 0x2, 0x0, 0x6, 0x6, 0x7, 0x200, 0x2, 0x400, 0x3, 0xf2, 0x0, 0x0, 0x0, 0x6, 0x373, 0x7f, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x0, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x4, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x0, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x5, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x1, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x1, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}]]}, {0x2d, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FW_ACT={0x21e8, 0x4, [@m_xt={0x170, 0x18, 0x0, 0x0, {{0x7}, {0xbc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x3d, 0x6, {0xd, 'security\x00', 0xff, 0x1b, "3901bae1b2c90dec01349be3ac5bab1aa98106"}}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0xb}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x8d, 0x6, "c62e9a687eed868051eb651c24304d274e8629de1b50d16051064435fc24ec70771d17f6fcdc9e9ee75e25d0f91438203e64eefedecde132008eeb0431ab391ca0bf5a7765d9d88867fb095fac2a9c7739fdc611b922111ed0c5abbfcc78d191c3703f0604da38e930080de9aa271e5f8e9da2c50a80ed7034f68c77939dbe86fb46c18e845a89f584"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xdc, 0x13, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x10001, 0x6}}]}, {0x95, 0x6, "7c0a1851060342436687049aaca83c87334c4d9cf996bff1b72efe3eb55f6b006dbd0e1c0bd78373b86981d3f1c87ebe53beca47c54b14ae9193d84be9fe799163951c5c233b691617e5508ea3f9b14b8a84941b72dac877ea437941f785a1c09929108fa47ec3420933e77185f8c50d8140dd015231cd6cece69214efe0b7030a9679081f8f3c0f55b91dcbb582cdf68d"}, {0xc, 0x7, {0xb07c3f3708729d04}}, {0xc, 0x8, {0x3}}}}, @m_pedit={0x1f98, 0x4, 0x0, 0x0, {{0xa}, {0x1f6c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1a0, 0x5, 0x0, 0x1, [{0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x337b561b573d7d9c}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_KEYS_EX={0x78, 0x5, 0x0, 0x1, [{0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x60e, 0x3, 0x10000000, 0x4, 0xdf7e}, 0x4, 0xa, [{0x40, 0x5, 0x1, 0x1, 0x7, 0xbf6105a}, {0xd, 0xffffffff, 0x2, 0x93, 0x9, 0x9}, {0xfffffffc, 0x1, 0x1, 0x63, 0x3, 0xc}, {0x4, 0x10000, 0x5, 0x1, 0x7, 0x80}, {0xffffff81, 0xb08, 0xf, 0x0, 0xe, 0x3}, {0x4, 0x4, 0x5, 0x6, 0x4, 0x1000}, {0xbb79, 0x8, 0x6, 0xb568bb60, 0x6, 0x7f}]}, [{0x7, 0x4, 0x392, 0x6, 0x1000, 0x5}, {0x7, 0xfffeffff, 0xf, 0x6a5b, 0xfffffffd, 0x1000}, {0x37a0, 0x5, 0xcd0, 0xfffffff7, 0x40, 0x6}, {0x6, 0xd2a3, 0x0, 0xfffffffc, 0xcf, 0x3}, {0xffff0001, 0x2, 0x8000000, 0x4, 0x2, 0x320}, {0x7, 0x695967f0, 0xffff, 0x0, 0x8, 0x33}, {0x7b9c60c0, 0x7, 0x5, 0x0, 0x7, 0x1}, {0x7fff, 0xd, 0xb, 0x0, 0x4, 0x9}, {0x800, 0x6, 0xaa, 0x1, 0xfa609cae, 0x8}, {0x7d, 0x3, 0x3, 0x6, 0x0, 0x20000}, {0xfffffff7, 0x200, 0x6, 0x1ff, 0x87, 0x4}, {0x9, 0x8, 0x5, 0x8, 0x80000000, 0x7ff}, {0x5, 0x6, 0x8, 0x2, 0x80, 0x10001}, {0x0, 0x8, 0x0, 0x7, 0xfffff4d2, 0x1000}, {0x3, 0x6, 0x2, 0x0, 0xc, 0xbb1f}, {0x8, 0x218, 0x10000, 0x3, 0x6, 0x10001}, {0x5, 0x9, 0xa, 0x13, 0x6ab32164, 0x400}, {0x7, 0x8, 0x4c94, 0x2, 0xc5, 0xcd}, {0xd133, 0xf244, 0xfffffff6, 0x9, 0x5}, {0xe9e, 0x0, 0xffffc170, 0x64d, 0xffffffff, 0x4}, {0x1800000, 0x1, 0x80000001, 0x3, 0x280, 0x3}, {0x9, 0xcc7, 0x6, 0xfffffff7, 0xb, 0xb}, {0x800, 0x9, 0x9, 0xfffffffe, 0x0, 0xc}, {0xfd, 0x6, 0x6, 0x3, 0x8, 0x3}, {0x32d2, 0x7, 0x5, 0x6, 0x10000, 0x4696}, {0x7f, 0xb9cf, 0x4, 0x2, 0x64f8, 0xfffffffa}, {0x4, 0x7, 0x0, 0x7, 0x0, 0x4e49}, {0x6, 0x1ff, 0x5, 0xfffffeff, 0x9b63}, {0x1, 0x4, 0x6, 0xffffffff, 0x7fff, 0xf}, {0x2, 0x7, 0x4, 0x8000, 0x0, 0x80000001}, {0x8000, 0xd613, 0x6, 0x7ff, 0x200, 0x6}, {0x6, 0x7f0b, 0x9, 0x1, 0x4, 0x4}, {0x80, 0x2, 0x7fffffff, 0x5fb, 0xffff, 0x2}, {0x10000, 0x8000, 0x101, 0x5, 0x6, 0x2}, {0x7, 0xdbff, 0x2, 0x1, 0x6, 0x4}, {0x1, 0x7dc1, 0xfffffeff, 0xf8, 0xfffffffb, 0x4}, {0x6, 0xa8, 0x9, 0xb, 0x2, 0x81}, {0x3, 0xc2, 0x3, 0x9, 0xf4, 0x10000}, {0x4, 0x6, 0xff, 0x6, 0x6f, 0x100}, {0x7, 0x7, 0x6, 0x66e, 0xffff8001, 0x8000}, {0x72, 0x9845, 0x4, 0x900, 0xffffffff, 0x1}, {0x101, 0x9, 0x3, 0x10001, 0x5}, {0x0, 0x2, 0xafc, 0x3, 0x4, 0x6}, {0x7, 0x8, 0x1, 0x0, 0x1, 0xdb}, {0xfffffffe, 0x40, 0x23a, 0x2}, {0x1, 0x7, 0x7, 0x0, 0xb, 0x7}, {0xfffffff7, 0xa, 0x4d, 0x2, 0x6, 0x9}, {0xee, 0x2, 0x3, 0xefe, 0x2, 0xd12}, {0x200, 0xe, 0x6, 0x9, 0x80000001, 0x4}, {0x400, 0x0, 0x4, 0x4, 0x200}, {0x9, 0x7, 0x5, 0x1, 0x3, 0x32a}, {0xc50d, 0x8, 0x5, 0x4f, 0x0, 0x8}, {0xfffffff0, 0x9, 0x7, 0x1, 0x8, 0x5}, {0x0, 0x7fffffff, 0x4, 0x3, 0x6, 0x6}, {0x18ed, 0x8, 0x7, 0x9, 0x5181441a}, {0x1, 0x6, 0x4, 0x5, 0x5, 0xc}, {0xffffffff, 0x1ff, 0xb, 0x3, 0x7, 0x3}, {0x9, 0x5, 0xfffffffd, 0x2, 0x3fe, 0x8}, {0xd4, 0x7, 0x7, 0x6, 0x7}, {0xd4fc572, 0x8, 0x1, 0xe, 0xc3, 0x10000}, {0x6b7, 0x8, 0x8000, 0x5fc, 0x4, 0xffff}, {0x4, 0x7, 0x2, 0x5, 0x400, 0x7}, {0x7, 0x8, 0x8ce5, 0x6, 0x32}, {0x8, 0x13, 0x8, 0x3ff, 0x3, 0x3}, {0x6, 0x80000000, 0x5, 0x9, 0x80000001, 0x2}, {0x6, 0xff34, 0x3, 0x5, 0x6, 0x4}, {0x7, 0x6, 0xa4e, 0x10, 0x2, 0x8ac}, {0x6, 0xffffff00, 0x5, 0x80000000, 0x8, 0x3}, {0xfffffffa, 0x94, 0x5452, 0x400, 0x401, 0x9}, {0x80000001, 0x4fbd, 0x80000000, 0x7, 0x0, 0x401}, {0x7, 0x1000, 0x1, 0x8, 0x4, 0xfffff0d4}, {0x7, 0x9, 0xe3, 0x2, 0x3, 0x8}, {0x5f7, 0x4, 0x7f, 0xc8cc, 0x6, 0x10000}, {0x1e, 0xffffffff, 0xb84, 0x7066, 0x9, 0xfff}, {0xb, 0x1, 0x0, 0xffff, 0x4, 0x5}, {0x6, 0x241, 0x7, 0xa8, 0xa445, 0x7f}, {0x2, 0x5, 0x8, 0x2, 0x3, 0xffff8000}, {0x10001, 0x2f, 0x5f87, 0x8b, 0x80000000, 0x2}, {0x6, 0xffffff00, 0x4af17099, 0x7, 0xd, 0xfa31}, {0x2, 0x7ff, 0x2, 0x3, 0x0, 0x40}, {0x9, 0x2, 0x4, 0x2, 0x9, 0x4}, {0x3, 0xd4, 0xf0, 0x0, 0x100, 0xff}, {0x100, 0x10001, 0x100, 0xa, 0x831d, 0x7fffffff}, {0x8, 0x238, 0x8, 0x9, 0x8, 0xfb}, {0x16, 0xd8, 0x400, 0x7, 0x100, 0x5}, {0x9, 0x1aa0, 0x2, 0xa8f, 0x3, 0x10000}, {0x44f, 0x7fff, 0xfeb, 0x7, 0x7, 0x80000001}, {0x8, 0x2d065fec, 0x8, 0x3ba, 0x6, 0x5fa3}, {0xfffffffb, 0xb34c, 0x8, 0xa, 0xffff, 0x1}, {0x4, 0x3, 0x0, 0x8, 0x4, 0x6}, {0x1, 0x80, 0x5, 0xfffffff8, 0x9, 0x9}, {0x9, 0x2, 0x80000000, 0xff, 0x81, 0xb}, {0x8, 0x7, 0x2, 0x0, 0x9, 0x4}, {0x1, 0x800, 0x0, 0x3, 0x5, 0x10000}, {0x2e1, 0x9, 0x7, 0x0, 0x9, 0x5b875ee4}, {0xff, 0x0, 0x7ea, 0x7b, 0x8, 0xfffffffc}, {0x2a, 0xffffffff, 0x80, 0x7fff, 0x2, 0x7}, {0x10, 0x6, 0x5, 0x4, 0x4, 0x33}, {0x3, 0xc, 0x6, 0x6, 0x9, 0x6}, {0x4, 0x5, 0x101, 0x4, 0x353e, 0x4}, {0x8, 0xc, 0x7fffffff, 0x2, 0x5, 0x7}, {0xfffffffa, 0x9, 0x7, 0x42baad39, 0x6, 0x6}, {0x7, 0xfffffff1, 0x1, 0xd, 0xb26e, 0x1}, {0x1, 0x94, 0x5, 0x5, 0x7, 0xfffffff9}, {0x9, 0xbfa3, 0x5, 0x7, 0x6, 0x3}, {0x10001, 0x0, 0x1, 0x7, 0x2, 0xb1}, {0x7fffffff, 0xfffff5be, 0x8, 0x3, 0x2c, 0x9}, {0xffd, 0x7f, 0x40, 0x0, 0x6, 0x3}, {0x2a9, 0x0, 0x6, 0x4, 0xb04, 0xd}, {0x957b, 0x0, 0x24a3, 0x7, 0x3, 0x1}, {0x4, 0x3, 0x7, 0x0, 0x91, 0x6}, {0x1, 0x3800000, 0x6, 0x8, 0x2, 0xffffffff}, {0x5, 0x8, 0x2, 0x10001, 0x5}, {0xb34, 0x6, 0x8, 0x7, 0x5, 0x4}, {0x1, 0x1, 0x42, 0x7fff, 0x8, 0x9}, {0x401, 0x9, 0x8, 0x1}, {0x2, 0x8, 0x6a, 0x0, 0x1, 0xffffffff}, {0x7fffffff, 0x7, 0x2, 0x10, 0x4, 0xf}, {0xfffffff2, 0x1, 0x9, 0xd, 0x3, 0x1}, {0x0, 0x1, 0xffffffff, 0xff, 0x2c4, 0x4}, {0x4, 0x86f6, 0x4, 0x3, 0x9, 0x6}, {0x7, 0x9, 0x3, 0x3, 0x7, 0x67cf108b}, {0x0, 0x2, 0x4, 0x7, 0x5, 0xffffffff}, {0x8, 0xd8, 0x3, 0x4, 0x3ff, 0x8}, {0x6, 0x7fff, 0x100, 0x4, 0x2, 0x8}, {0x8, 0xe041, 0x4, 0x8, 0x5, 0x5e1}, {0x6, 0x3, 0x8, 0x1000, 0x5, 0xcb31}, {0x1, 0xd223, 0x8, 0x0, 0x4, 0x5}], [{0x2, 0x1}, {0x5, 0x1}, {0x2}, {0xaa699aae85504618, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x3}, {0x2}, {0x2, 0x1}, {0x0, 0x43e94edb6b16b030}, {}, {0x5, 0x1}, {0x4}, {}, {0x3}, {0x1}, {0xc770d970940cffe5, 0x1}, {0x2, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1489d857e77e70bb}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5}, {0x6, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x5, 0xa11, 0x5, 0x0, 0x800}, 0x8, 0x77, [{0x101, 0x8001, 0x7fffffff, 0x9, 0x0, 0x2}, {0x40, 0x4, 0x2, 0x1, 0x638d, 0x2}, {0x3, 0x2, 0x3, 0x0, 0x6, 0xb}, {0x6, 0x3, 0x10df400, 0x7, 0x2}]}, [{0x8, 0x8a, 0x1, 0x0, 0x80c6000, 0x1}, {0x8000, 0x2, 0x10000, 0x1, 0x2, 0x8}, {0x2a6, 0x6, 0x850d, 0x888, 0x7f, 0x8}, {0x8, 0x2, 0x2, 0x8, 0x6, 0x1}, {0x100, 0xbb2d, 0x8, 0x2, 0x0, 0x9}, {0xd, 0x1, 0xc, 0xfffffffc, 0x1, 0x401}, {0x2, 0x6, 0x8f, 0x6, 0x47}, {0x8, 0x2, 0xffff, 0x6, 0x2, 0xf}, {0x7, 0x8, 0xb9f, 0xf, 0x3, 0xe}, {0xffff8001, 0x5, 0xf, 0x1ff, 0x5, 0x10000}, {0x86, 0x7, 0xd, 0x1, 0x0, 0x3}, {0x5, 0x1ff, 0x40, 0x5, 0xffffffa0}, {0x5, 0x4, 0xe3, 0xffff7224, 0x3, 0x800}, {0x101, 0xfffffff9, 0xe1f8, 0x4, 0x867, 0xd}, {0x6, 0x7, 0x35f, 0x9, 0x3, 0x39a}, {0x7, 0xb, 0x9, 0x7, 0x9, 0x6}, {0x8e, 0x401, 0x7fffffff, 0xffffffff, 0x2, 0x5}, {0xfffffff8, 0x5, 0x4e4e, 0xfffffff7}, {0x0, 0xd, 0xff, 0x1, 0x8, 0x7}, {0x3, 0xc2, 0xd, 0x7f, 0x8a08, 0x2}, {0x2, 0x6, 0x4, 0x0, 0x1, 0x80000001}, {0x2, 0xb, 0x5, 0x3, 0x8, 0x2}, {0x6, 0x2, 0x120, 0x9, 0x16cc7403, 0x3}, {0x1, 0x7, 0x6, 0x6a78, 0x8, 0xfffffbff}, {0x1, 0x0, 0x8, 0x1ff, 0x0, 0x46}, {0x0, 0x3, 0x27d98bac, 0xfff, 0x8, 0xd}, {0xe, 0xeb69, 0x2, 0xffff0375, 0x1000, 0x10000}, {0x101, 0x7f000, 0xa, 0x6, 0xa, 0xbeb}, {0x24000000, 0x0, 0x4, 0x400, 0x5, 0x2}, {0x8000, 0x100, 0x9, 0x0, 0x2, 0xffffffff}, {0x3f, 0x3, 0x4af, 0x7, 0xff, 0x5}, {0xffffff7f, 0xffff7fff, 0xb3f4, 0xb5, 0xe, 0xcbb7}, {0x7, 0xb, 0xfffffff7, 0x2, 0xf27, 0x4}, {0x1, 0x97, 0x480, 0x9a, 0x8000, 0x6}, {0x3, 0x7, 0x2, 0xffff, 0x115, 0x1}, {0x86e5, 0x8, 0x7, 0x4, 0x7e73, 0x8}, {0x9, 0x5bcf, 0x8, 0x80000000, 0xee, 0x2c1}, {0x3, 0x1800000, 0x2, 0x2, 0x2, 0x4}, {0x6, 0x81, 0xf, 0x4, 0x81, 0xffffffff}, {0x0, 0x9, 0x9, 0x1, 0xd9b, 0x1}, {0x8, 0xce, 0x5, 0x1, 0x7}, {0x4edf, 0xfd9f, 0x101, 0xf84, 0x81}, {0x10000, 0x80000000, 0x80, 0x1, 0x1000, 0x9}, {0x7, 0x8, 0xd24, 0x3f5, 0x2, 0x4427}, {0x1, 0x0, 0x20, 0xfffffff9, 0x6, 0x1}, {0xb5f, 0xf2c, 0xe6b, 0x9, 0x4, 0x80}, {0x3, 0x14, 0x6c, 0x80000001, 0x5, 0x4}, {0x1, 0x3, 0x101, 0xfffffffc, 0x8, 0xfffffff8}, {0x3, 0x4, 0x35, 0x8, 0x6, 0xfffffffb}, {0x1, 0x1, 0xfffffffa, 0x180, 0x7fffffff, 0x7}, {0x9, 0x2, 0xffffb29d, 0x0, 0xf, 0x100}, {0x8, 0x647, 0x1115b69e, 0x8, 0x7fffffff, 0xbb}, {0x488d, 0x9, 0x5, 0xff, 0x2, 0x2}, {0x2, 0xfffffff9, 0x8, 0xc5f, 0xb, 0x3}, {0x0, 0xd1, 0x0, 0x1, 0x1, 0x1}, {0x7fffffff, 0xc8b, 0x0, 0x6, 0x9, 0x3}, {0x9, 0xae4, 0x8, 0x7, 0x3, 0x7fff}, {0x5, 0x0, 0x7ff, 0x400, 0x9, 0x5}, {0x2, 0x5, 0x1, 0x0, 0x7fff, 0x9}, {0x2, 0x9, 0x2, 0x1a, 0x3, 0xfffffffe}, {0xfffffffd, 0x4, 0x4, 0x10000, 0x3, 0xe1}, {0x1, 0xb, 0x1, 0x8001, 0x2, 0x81}, {0x5, 0x10001, 0xd, 0x5, 0x8, 0x3}, {0x6, 0xffffff75, 0xc, 0xd, 0x5, 0x1}, {0xd24, 0x2, 0x9, 0x1, 0x3, 0x9}, {0x2, 0x4, 0x10000, 0x40, 0xfff, 0xc}, {0x9, 0x3, 0xbeb, 0x5, 0x2, 0x3}, {0xfffffffc, 0x15, 0xfffffffd, 0x80000001, 0x1, 0x20}, {0x800, 0xff, 0x400, 0xfffffff7, 0x6, 0x6}, {0x9, 0x8, 0x2069, 0x3, 0x6, 0x7}, {0x8, 0x1, 0x10000, 0x5, 0x5, 0x5}, {0x7, 0x8, 0x4, 0x8001, 0x2, 0xf}, {0x81, 0xfcd, 0x3, 0x3, 0x203b, 0x2}, {0x10000, 0x1, 0x6, 0x7, 0x101, 0x8}, {0x0, 0x5, 0xfffffffd, 0x2, 0x9, 0xfbf}, {0x4, 0x2, 0x9, 0x2, 0x80, 0x40}, {0x9, 0x7, 0x8000, 0x5, 0x8, 0x6}, {0x1, 0x80000000, 0xffff, 0x7fff, 0x0, 0x4}, {0xe, 0x7f, 0x6, 0xbed3, 0x63a, 0x1}, {0x4, 0x9, 0x90, 0x100, 0x4, 0xe82}, {0x80000001, 0x5, 0x1, 0x8, 0x78, 0x2}, {0x10, 0xe9, 0x6, 0x10000, 0x9, 0x7}, {0x2, 0x9, 0x1, 0x2f1, 0x6, 0x8}, {0xd63, 0x2, 0x8, 0xcaf, 0x85b5, 0x80000001}, {0x3, 0x401, 0x8, 0x10000, 0xcf}, {0x6, 0x7, 0xb, 0xfff, 0x4, 0x5}, {0xa6f, 0x3ff, 0x5, 0x911, 0x1, 0x1}, {0x1, 0x9, 0x9, 0xf1, 0x0, 0x10000}, {0x4, 0x4, 0x8, 0xff, 0x4}, {0x1, 0x4, 0x7, 0x80000000, 0x7, 0xb}, {0x1, 0x5, 0x4, 0x1ff, 0xa, 0x538a}, {0x7f, 0x7, 0x8, 0xaa, 0x2, 0x7}, {0xfff, 0xdc1, 0x5, 0xc, 0x7, 0x7}, {0x100, 0x3e, 0xd, 0x0, 0x6910c30c, 0x7}, {0x2, 0x2, 0xfffffffb, 0xfeb7, 0x579, 0x8}, {0x9, 0x9, 0x5, 0x6, 0x0, 0x7}, {0x10000, 0x10001, 0xffffffff, 0xd7b, 0x3, 0x5f3}, {0xff, 0x8886, 0x3, 0x5, 0x5, 0x3}, {0x6, 0x7f, 0x80000001, 0x7f0, 0xfff, 0x4bf}, {0x2, 0x5, 0x5, 0x4, 0x5, 0x3403}, {0xe3, 0xf7, 0x4, 0x7, 0x63b, 0xc}, {0x7, 0x6ec7e5d9, 0x3, 0x2, 0x3, 0x6}, {0x7, 0x7, 0x8, 0x4, 0xffffffff, 0x3b6}, {0x1, 0x9, 0xfffffffb, 0x7, 0x7f, 0x79}, {0x0, 0x4, 0x1, 0x9, 0x70, 0x7}, {0xaa, 0x6, 0x6091, 0x7f, 0x3, 0x3}, {0x8, 0x0, 0x3ff, 0x4, 0x0, 0x7e}, {0xc, 0x3, 0x9, 0x10, 0x3ff, 0x5}, {0x2, 0xffff, 0xd, 0x101, 0x9, 0x80000000}, {0x5c, 0x9, 0x40, 0xf, 0x6, 0x81}, {0x3309, 0xc6e9, 0x9, 0xfffffffa, 0x7, 0xbc}, {0xe, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x4, 0x8, 0x80000000, 0x6, 0x7, 0x7ff}, {0x5, 0x7, 0x4, 0xafb1, 0xc20d, 0x40}, {0x5, 0x94, 0x3, 0x400, 0x0, 0x5}, {0x56390, 0x1, 0x5, 0x38, 0x7, 0x7}, {0x8000, 0x6, 0x9, 0x4, 0x7, 0x80000001}, {0x7f, 0x8, 0xf8, 0x4dd6, 0x8, 0x5}, {0x2, 0x0, 0x3, 0x448ea325, 0x37c, 0xee}, {0x4b, 0x9, 0x5, 0x8001, 0x7, 0x80000001}, {0xffffff4e, 0x32, 0x7, 0x4, 0x3, 0x6}, {0x0, 0x75, 0x4, 0x4, 0x1ff, 0x10000000}, {0x3ca91c8a, 0xffffffff, 0x10000, 0x7fffffff, 0x4}, {0x7, 0x57, 0x5, 0x6, 0x7, 0xb33d}, {0x4, 0x101, 0xfff, 0x2, 0x4, 0x13}, {0x0, 0x8000, 0x0, 0x1ff, 0x4, 0x99}, {0x3, 0x9, 0xf61b, 0x7ff, 0x40, 0x4a89}, {0x1, 0x5, 0x9, 0xfff, 0xdb3, 0x93a6}], [{0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1}, {0x4}, {0x3}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x6}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x3}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {}, {0x2}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x1, 0x1}, {0x6f8f8a2ccadbcaf1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x9fa91f92013e47c9}, {0x3, 0x57dcad52c17df449}, {0x4}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x2}, {0x5}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x44aef0e82e38681e}, {0x4}, {0x3}, {0x4}, {}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x3ad0}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.994869052s ago: executing program 9 (id=9689): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffefffffff7ffffc]}, 0x8, 0x800) r1 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe150, 0x0, 0x1, 0x4000032f, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000400)=""/203, 0xcb}], 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8b19, &(0x7f0000000000)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) 1.98311632s ago: executing program 6 (id=9690): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10c093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1500, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000643200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007041af64090aac40d6600000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 1.957239836s ago: executing program 3 (id=9691): socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_reuseport, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.907012727s ago: executing program 0 (id=9692): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback=0x40000000}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0) 1.833102783s ago: executing program 3 (id=9693): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) 1.745598637s ago: executing program 3 (id=9694): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 1.70610952s ago: executing program 9 (id=9696): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.523501067s ago: executing program 0 (id=9697): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f00000020c0)=""/4130, &(0x7f0000000000)=0x1022) 1.505672184s ago: executing program 0 (id=9698): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) 1.37511046s ago: executing program 3 (id=9699): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x38800000, 0x4) sendmmsg(r2, &(0x7f0000001c00), 0x40000000000017a, 0x40840) 1.371854629s ago: executing program 6 (id=9709): socket$nl_route(0x10, 0x3, 0x0) socket(0x2d, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.327572101s ago: executing program 6 (id=9700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 1.128431835s ago: executing program 6 (id=9701): socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x25, 0x1, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.055418422s ago: executing program 6 (id=9702): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@grpjquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={0x0}, 0x0, 0x40a, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x25, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x43a, 0x0, 0x0, 0x0, 0x8}, [@btf_id={0x18, 0xe, 0x3, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @alu={0x4, 0x1, 0x4, 0x3, 0x2, 0xc, 0x16}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0x8, 0x0, 0x1, 0xfffffffffffffee7, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x30020000}, 0x94) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 936.17713ms ago: executing program 7 (id=9703): listen(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x780, &(0x7f0000000040)={0x0, 0xec5d, 0x1c881, 0x0, 0xd1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ad00000066"], 0x0, 0x8}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4af584f73552a348) io_uring_enter(r0, 0x0, 0x1000002, 0x37, 0x0, 0x0) 879.31656ms ago: executing program 7 (id=9704): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f00000001c0)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 810.207577ms ago: executing program 9 (id=9705): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r1, 0x402, 0x80000023) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) close_range(r0, 0xffffffffffffffff, 0x0) 744.299865ms ago: executing program 9 (id=9706): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@grpquota}, {@inlinecrypt}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, 0x0) lchown(0x0, 0xee01, 0xffffffffffffffff) 609.289191ms ago: executing program 7 (id=9707): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_dev$sg(0x0, 0x6f5e, 0x2d42) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000) bpf$MAP_CREATE(0x0, 0x0, 0x48) 575.387394ms ago: executing program 9 (id=9708): r0 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r0, 0x0, 0x30, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback=0x40000000}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0xfe44, 0x0) 574.739614ms ago: executing program 0 (id=9719): r0 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x20000000000032, 0x43a1bd75, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_clone(0x8001080, &(0x7f0000000800), 0x0, &(0x7f0000000900), &(0x7f0000000940), 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(0x0, 0x60842, 0x0) pwritev2(r1, 0x0, 0x0, 0x29b0cfbd, 0x41001, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x28254, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbffe, 0x1, @perf_bp={0x0}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c010000", @ANYRES16=0x0, @ANYBLOB="08002abd7000fedbdf25890000000c0099000e0000004c00000028011d80ec00007cdc000d80700000803d0002005003403d132b30514141094452094d3d35504538010a0924093d4e1c08361a4c2949290038243d501a254e51463f2f2a4a1b441f163f02574d0000000d000100180c3603480c0b0660000000190001001b18010903160c050b180b361b09160436480609300000004400018014000300ff89080000000000060006000600020014000300000002000800c1af03000001fcffa500050004000100000005000700020000000500040001000000200003800600010036060000140005000700ff03030080ff04000800c7f7d8a7040000800c0002"], 0x14c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 342.671172ms ago: executing program 7 (id=9710): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0xea) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f00000002c0)={[0x537e]}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 295.680543ms ago: executing program 0 (id=9711): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x8}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000040)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0xfffffffffffffc01, 0x0) tee(r1, r3, 0x1fc, 0x0) 255.562336ms ago: executing program 3 (id=9712): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000340)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 0s ago: executing program 6 (id=9713): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x80, 0x2, 0x240024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x1, 0x40}) io_uring_enter(r2, 0x628, 0xc88d, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): it: type=1326 audit(2000001245.488:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 420.956634][ T28] audit: type=1326 audit(2000001245.488:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.027976][ T28] audit: type=1326 audit(2000001245.488:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.082556][ T28] audit: type=1326 audit(2000001245.488:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.159798][ T28] audit: type=1326 audit(2000001245.488:3941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.201937][ T28] audit: type=1326 audit(2000001245.488:3942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.235352][ T28] audit: type=1326 audit(2000001245.488:3943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.261655][ T28] audit: type=1326 audit(2000001245.488:3944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.286201][ T28] audit: type=1326 audit(2000001245.488:3945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.311429][ T28] audit: type=1326 audit(2000001245.488:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27763 comm="syz.9.8217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 421.408462][T27783] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1628586470/1628586472 [ 421.418608][T27783] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1628586470/1628586472 [ 421.474442][T27787] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8227'. [ 421.596813][T27791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 421.718781][T27801] netlink: 11522 bytes leftover after parsing attributes in process `syz.3.8234'. [ 422.329920][T27821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8241'. [ 422.412324][T27821] vlan2: entered allmulticast mode [ 422.964377][T27851] loop3: detected capacity change from 0 to 256 [ 423.065413][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.082423][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.094067][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.106495][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.125409][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.144880][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.164913][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.178442][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.194944][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.206761][T27851] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 423.498566][T27868] loop9: detected capacity change from 0 to 1024 [ 423.549722][T27868] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 423.600650][T27868] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 423.681282][T27868] JBD2: no valid journal superblock found [ 423.713917][T27868] EXT4-fs (loop9): Could not load journal inode [ 423.929028][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8265'. [ 423.967384][T27879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8265'. [ 424.149492][T27898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8272'. [ 424.161850][T27898] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8272'. [ 424.497428][T27920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8281'. [ 424.603649][T27920] vlan2: entered allmulticast mode [ 424.623541][T27920] bridge_slave_0: entered allmulticast mode [ 424.768321][T27922] netlink: 199836 bytes leftover after parsing attributes in process `syz.9.8282'. [ 424.948016][T27935] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8286'. [ 425.506746][T28000] xt_hashlimit: size too large, truncated to 1048576 [ 425.806065][T28027] loop3: detected capacity change from 0 to 512 [ 425.900227][T28027] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 425.933445][T28042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.944331][T28027] EXT4-fs (loop3): 1 truncate cleaned up [ 425.985378][T28042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.998120][T28027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.196963][T28047] xt_hashlimit: size too large, truncated to 1048576 [ 426.281188][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.304571][ T4483] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 426.362822][ T4483] CPU: 1 UID: 0 PID: 4483 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 426.362859][ T4483] Tainted: [W]=WARN [ 426.362865][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 426.362876][ T4483] Call Trace: [ 426.362882][ T4483] [ 426.362934][ T4483] __dump_stack+0x1d/0x30 [ 426.362995][ T4483] dump_stack_lvl+0x95/0xd0 [ 426.363019][ T4483] dump_stack+0x15/0x1b [ 426.363041][ T4483] dump_header+0x80/0x240 [ 426.363092][ T4483] oom_kill_process+0x295/0x350 [ 426.363113][ T4483] out_of_memory+0x97d/0xb80 [ 426.363133][ T4483] try_charge_memcg+0x62e/0xa10 [ 426.363229][ T4483] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 426.363259][ T4483] __swap_cache_prepare_and_add+0x386/0x530 [ 426.363288][ T4483] swap_cache_alloc_folio+0xa2/0x120 [ 426.363312][ T4483] swap_cluster_readahead+0x26e/0x3d0 [ 426.363357][ T4483] swapin_readahead+0xde/0x840 [ 426.363384][ T4483] ? __rcu_read_unlock+0x4e/0x70 [ 426.363402][ T4483] ? swap_cache_get_folio+0x26f/0x280 [ 426.363488][ T4483] do_swap_page+0x30d/0x2220 [ 426.363559][ T4483] ? css_rstat_updated+0xbb/0x280 [ 426.363581][ T4483] ? __rcu_read_lock+0x36/0x50 [ 426.363601][ T4483] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 426.363625][ T4483] handle_mm_fault+0xb46/0x3020 [ 426.363689][ T4483] ? vma_start_read+0x1c7/0x2c0 [ 426.363770][ T4483] do_user_addr_fault+0x62f/0x1050 [ 426.363796][ T4483] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 426.363818][ T4483] ? trace_page_fault_user+0x1f/0xe0 [ 426.363873][ T4483] exc_page_fault+0x62/0xa0 [ 426.363903][ T4483] asm_exc_page_fault+0x26/0x30 [ 426.363922][ T4483] RIP: 0033:0x7fcb0fd7d2f8 [ 426.363962][ T4483] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 93 19 00 00 0f [ 426.363981][ T4483] RSP: 002b:00007fffa44e2bc0 EFLAGS: 00010206 [ 426.364015][ T4483] RAX: 0000000000000000 RBX: 0000000000000f82 RCX: 00007fcb0fd37917 [ 426.364029][ T4483] RDX: 12f255f27cc61400 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.364041][ T4483] RBP: 00007fffa44e2c2c R08: 0000000000000000 R09: 0000000000000000 [ 426.364053][ T4483] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 426.364064][ T4483] R13: 00000000000927c0 R14: 0000000000068027 R15: 00007fffa44e2c80 [ 426.364127][ T4483] [ 426.365280][ T4483] memory: usage 234324kB, limit 307200kB, failcnt 645 [ 426.768854][ T4483] memory+swap: usage 297968kB, limit 9007199254740988kB, failcnt 0 [ 426.858464][ T4483] kmem: usage 237196kB, limit 9007199254740988kB, failcnt 0 [ 426.892265][ T4483] Memory cgroup stats for /syz6: [ 426.892637][ T4483] cache 0 [ 426.907797][ T4483] rss 0 [ 426.910774][ T4483] shmem 0 [ 426.913834][ T4483] mapped_file 0 [ 426.926962][ T4483] dirty 0 [ 426.933564][ T4483] writeback 8192 [ 426.942010][ T4483] workingset_refault_anon 2220 [ 426.951840][ T4483] workingset_refault_file 2179 [ 426.979593][ T4483] swap 1617920 [ 426.986799][ T4483] swapcached 42586112 [ 427.006510][ T4483] pgpgin 556078 [ 427.027810][ T4483] pgpgout 556072 [ 427.042990][ T4483] pgfault 517291 [ 427.051866][ T4483] pgmajfault 370 [ 427.055559][ T4483] inactive_anon 8192 [ 427.077846][ T4483] active_anon 8192 [ 427.091122][ T4483] inactive_file 0 [ 427.101827][ T4483] active_file 8192 [ 427.110150][ T4483] unevictable 0 [ 427.117110][ T4483] hierarchical_memory_limit 314572800 [ 427.128805][ T4483] hierarchical_memsw_limit 9223372036854771712 [ 427.142120][ T4483] total_cache 0 [ 427.150297][ T4483] total_rss 0 [ 427.155208][ T4483] total_shmem 0 [ 427.159909][ T4483] total_mapped_file 0 [ 427.164316][ T4483] total_dirty 0 [ 427.168496][ T4483] total_writeback 8192 [ 427.172661][ T4483] total_workingset_refault_anon 2220 [ 427.178540][ T4483] total_workingset_refault_file 2179 [ 427.183973][ T4483] total_swap 1617920 [ 427.188959][ T4483] total_swapcached 42586112 [ 427.221736][ T4483] total_pgpgin 556078 [ 427.225855][T28085] __nla_validate_parse: 7 callbacks suppressed [ 427.225872][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8331'. [ 427.230685][ T4483] total_pgpgout 556072 [ 427.234159][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8331'. [ 427.263027][ T4483] total_pgfault 517291 [ 427.268287][ T4483] total_pgmajfault 370 [ 427.273219][ T4483] total_inactive_anon 8192 [ 427.278772][ T4483] total_active_anon 8192 [ 427.280927][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8331'. [ 427.283524][ T4483] total_inactive_file 0 [ 427.299209][ T4483] total_active_file 8192 [ 427.323589][ T4483] total_unevictable 0 [ 427.328055][ T4483] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.8303,pid=27997,uid=0 [ 427.344033][ T4483] Memory cgroup out of memory: OOM victim 27997 (syz.6.8303) is already exiting. Skip killing the task [ 427.385764][T28094] bond5: entered promiscuous mode [ 427.790864][T28101] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8337'. [ 427.960906][T28111] loop9: detected capacity change from 0 to 512 [ 428.012948][T28111] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 428.059255][T28111] EXT4-fs (loop9): 1 truncate cleaned up [ 428.080889][T28111] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.455717][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.777416][T28141] netlink: 'syz.9.8353': attribute type 22 has an invalid length. [ 428.785941][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8353'. [ 428.829391][T13092] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.829418][T28141] netlink: 'syz.9.8353': attribute type 22 has an invalid length. [ 428.829433][T28141] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8353'. [ 428.910197][T13092] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.956651][T13092] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.970799][T13092] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 429.011210][T28148] netlink: 'syz.9.8356': attribute type 1 has an invalid length. [ 429.026986][T28148] 8021q: adding VLAN 0 to HW filter on device bond5 [ 429.062176][T28153] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8358'. [ 429.075163][T28148] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 429.084117][T28148] bond5: (slave batadv1): making interface the new active one [ 429.093318][T28148] bond5: (slave batadv1): Enslaving as an active interface with an up link [ 429.104842][T28153] lo speed is unknown, defaulting to 1000 [ 429.111784][T28153] lo speed is unknown, defaulting to 1000 [ 429.118389][T28153] lo speed is unknown, defaulting to 1000 [ 429.125807][T28153] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 429.147918][T28153] lo speed is unknown, defaulting to 1000 [ 429.156312][T28153] lo speed is unknown, defaulting to 1000 [ 429.164192][T28153] lo speed is unknown, defaulting to 1000 [ 429.171354][T28153] lo speed is unknown, defaulting to 1000 [ 429.177648][T28153] lo speed is unknown, defaulting to 1000 [ 429.183956][T28153] lo speed is unknown, defaulting to 1000 [ 429.209297][T28153] lo speed is unknown, defaulting to 1000 [ 429.217428][T28153] lo speed is unknown, defaulting to 1000 [ 429.225539][T28153] lo speed is unknown, defaulting to 1000 [ 429.234206][T28155] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8359'. [ 429.792176][T28171] tipc: Enabling of bearer rejected, failed to enable media [ 431.228177][ T28] kauditd_printk_skb: 4674 callbacks suppressed [ 431.228246][ T28] audit: type=1326 audit(2000001255.838:8621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.269899][ T28] audit: type=1326 audit(2000001255.868:8622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.337836][ T28] audit: type=1326 audit(2000001255.868:8623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.384613][ T28] audit: type=1326 audit(2000001255.868:8624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.460759][ T28] audit: type=1326 audit(2000001255.868:8625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.531946][ T28] audit: type=1326 audit(2000001255.868:8626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.583184][T28251] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8397'. [ 431.596129][ T28] audit: type=1326 audit(2000001255.868:8627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.596157][ T28] audit: type=1326 audit(2000001255.868:8628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.596181][ T28] audit: type=1326 audit(2000001255.868:8629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 431.596244][ T28] audit: type=1326 audit(2000001255.868:8630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28233 comm="syz.6.8394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb0fd7c799 code=0x7ffc0000 [ 432.334817][T28251] vlan0: entered allmulticast mode [ 432.341645][T28251] bridge_slave_0: entered allmulticast mode [ 432.620081][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8414'. [ 432.653062][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8414'. [ 432.776350][T28286] loop3: detected capacity change from 0 to 512 [ 432.801856][T28286] EXT4-fs: Ignoring removed nobh option [ 432.841251][T28286] EXT4-fs (loop3): orphan cleanup on readonly fs [ 432.879724][T28286] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.8410: EA inode hash validation failed [ 432.927741][T28286] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 432.970738][T28286] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.8410: corrupted inode contents [ 432.987372][T28286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 432.987764][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 433.003879][ C0] EXT4-fs (loop3): initial error at time 2000001257: ext4_do_update_inode:5569: inode 15 [ 433.013958][ C0] EXT4-fs (loop3): last error at time 2000001257: ext4_do_update_inode:5569: inode 15 [ 433.036423][T28286] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.8410: mark_inode_dirty error [ 433.064966][T28286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 433.066238][T28286] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.8410: corrupted inode contents [ 433.099406][T28286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 433.117909][T28286] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.8410: mark_inode_dirty error [ 433.156860][T28307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8420'. [ 433.195229][T28286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 433.196175][T28286] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.8410: mark inode dirty (error -117) [ 433.265743][T28286] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 433.266838][T28286] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 433.306709][T28286] EXT4-fs (loop3): 1 orphan inode deleted [ 433.310691][T28307] vlan3: entered allmulticast mode [ 433.326113][T28286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 433.341584][T28307] bridge_slave_0: entered allmulticast mode [ 433.686043][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.803669][T28328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8439'. [ 434.016991][T28328] vlan3: entered allmulticast mode [ 434.252062][T28344] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8436'. [ 434.769838][T28373] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8448'. [ 434.873554][T28373] vlan3: entered allmulticast mode [ 434.985498][T28379] lo speed is unknown, defaulting to 1000 [ 435.773747][T28419] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 435.786199][T28423] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8468'. [ 435.892321][T28419] SELinux: failed to load policy [ 436.061377][T28432] loop9: detected capacity change from 0 to 256 [ 436.275453][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.314347][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.336704][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.366841][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.387497][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.409884][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.436871][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.459686][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.474672][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.497650][T28432] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 436.946948][T28483] bond6: entered promiscuous mode [ 436.983404][T28483] macvlan2: entered promiscuous mode [ 436.990035][T28483] macvlan2: entered allmulticast mode [ 437.001325][T28483] bond6: (slave macvlan2): Opening slave failed [ 437.095141][T28492] netlink: 168 bytes leftover after parsing attributes in process `syz.9.8484'. [ 437.121075][T28494] tipc: Failed to remove unknown binding: 66,1,1/0:3108782617/3108782619 [ 437.130683][T28494] tipc: Failed to remove unknown binding: 66,1,1/0:3108782617/3108782619 [ 437.239124][T28504] netlink: 'syz.7.8490': attribute type 2 has an invalid length. [ 437.263509][T28508] netlink: 40 bytes leftover after parsing attributes in process `syz.9.8492'. [ 437.274279][T28508] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8492'. [ 437.542374][T28533] ªªªªªª: renamed from vlan0 [ 437.734195][T28545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8506'. [ 437.906698][T28545] vlan0: entered allmulticast mode [ 438.081958][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 438.081973][ T28] audit: type=1400 audit(2000001262.688:8653): avc: denied { map } for pid=28557 comm="syz.0.8512" path="socket:[118055]" dev="sockfs" ino=118055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 440.187328][T28624] netlink: 'syz.9.8535': attribute type 4 has an invalid length. [ 440.208868][ T28] audit: type=1400 audit(2000001264.808:8654): avc: denied { setopt } for pid=28621 comm="syz.0.8534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 440.233431][T28624] netlink: 'syz.9.8535': attribute type 4 has an invalid length. [ 440.736126][T28636] lo speed is unknown, defaulting to 1000 [ 441.499243][T28669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8551'. [ 441.805909][T28683] loop9: detected capacity change from 0 to 512 [ 441.838781][T28683] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 441.852147][T28683] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 441.876795][T28683] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.8557: iget: bogus i_mode (2) [ 441.890259][T28683] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 441.890596][T28683] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8557: couldn't read orphan inode 15 (err -117) [ 441.900390][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 441.900409][ C0] EXT4-fs (loop9): initial error at time 2000001266: ext4_orphan_get:1391: inode 15 [ 441.900435][ C0] EXT4-fs (loop9): last error at time 2000001266: ext4_orphan_get:1391: inode 15 [ 441.941483][T28683] loop9: lost filesystem error report for type 5 error -117 [ 441.942463][T28683] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.966770][T28683] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 441.982650][T28683] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.8557: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 442.004619][T28683] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 3: comm syz.9.8557: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 442.059785][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.343782][T28704] netlink: 'syz.9.8564': attribute type 12 has an invalid length. [ 443.395324][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8585'. [ 443.408674][T28750] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8585'. [ 443.456921][T28757] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8587'. [ 445.097374][ T28] audit: type=1326 audit(2000001269.698:8655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.184241][ T28] audit: type=1326 audit(2000001269.698:8656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.224111][T28833] netlink: 'syz.9.8617': attribute type 13 has an invalid length. [ 445.235567][ T28] audit: type=1326 audit(2000001269.698:8657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.277254][ T28] audit: type=1326 audit(2000001269.698:8658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.302900][ T28] audit: type=1326 audit(2000001269.698:8659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.355869][ T28] audit: type=1326 audit(2000001269.698:8660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.388656][ T28] audit: type=1326 audit(2000001269.728:8661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.413959][ T28] audit: type=1326 audit(2000001269.728:8662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.439168][ T28] audit: type=1326 audit(2000001269.728:8663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.464228][ T28] audit: type=1326 audit(2000001269.728:8664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28825 comm="syz.9.8615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 445.789641][T28874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8642'. [ 445.897432][T28883] loop3: detected capacity change from 0 to 256 [ 445.909914][T28883] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 445.935499][T28883] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 446.280153][T28903] loop3: detected capacity change from 0 to 512 [ 446.303185][T28903] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 446.333414][T28903] System zones: 1-12 [ 446.358097][T28903] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.8645: corrupted in-inode xattr: e_value size too large [ 446.408859][T28903] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.416856][T28903] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.8645: couldn't read orphan inode 15 (err -117) [ 446.426687][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 446.426708][ C1] EXT4-fs (loop3): initial error at time 2000001271: ext4_iget_extra_inode:5025: inode 15 [ 446.426741][ C1] EXT4-fs (loop3): last error at time 2000001271: ext4_iget_extra_inode:5025: inode 15 [ 446.476354][T28903] loop3: lost filesystem error report for type 5 error -117 [ 446.506502][T28908] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8647'. [ 446.510771][T28903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.581987][T28903] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.8645: Unrecognised inode hash code 4 [ 446.609185][T28903] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.8645: Corrupt directory, running e2fsck is recommended [ 446.651381][T28903] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.8645: Unrecognised inode hash code 4 [ 446.683477][T28903] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.8645: Corrupt directory, running e2fsck is recommended [ 446.764820][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.069617][T28956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.089486][T28956] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 448.182780][T13092] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 448.308589][ T6761] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 448.326371][T28979] xt_hashlimit: size too large, truncated to 1048576 [ 448.747842][T29007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8682'. [ 448.832105][T28974] syz.0.8672 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 448.847150][T28974] CPU: 1 UID: 0 PID: 28974 Comm: syz.0.8672 Tainted: G W syzkaller #0 PREEMPT(full) [ 448.847180][T28974] Tainted: [W]=WARN [ 448.847186][T28974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.847232][T28974] Call Trace: [ 448.847240][T28974] [ 448.847249][T28974] __dump_stack+0x1d/0x30 [ 448.847278][T28974] dump_stack_lvl+0x95/0xd0 [ 448.847351][T28974] dump_stack+0x15/0x1b [ 448.847373][T28974] dump_header+0x80/0x240 [ 448.847397][T28974] oom_kill_process+0x295/0x350 [ 448.847417][T28974] out_of_memory+0x97d/0xb80 [ 448.847439][T28974] try_charge_memcg+0x62e/0xa10 [ 448.847475][T28974] obj_cgroup_charge_pages+0x23/0xc0 [ 448.847550][T28974] __memcg_kmem_charge_page+0x9e/0x170 [ 448.847578][T28974] __alloc_frozen_pages_noprof+0x18a/0x360 [ 448.847627][T28974] alloc_pages_mpol+0xb3/0x260 [ 448.847656][T28974] alloc_pages_noprof+0x8f/0x130 [ 448.847726][T28974] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 448.847765][T28974] __kvmalloc_node_noprof+0x3d4/0x650 [ 448.847849][T28974] ? futex_hash_allocate+0x190/0x9d0 [ 448.847933][T28974] ? futex_hash_allocate+0x190/0x9d0 [ 448.847962][T28974] futex_hash_allocate+0x190/0x9d0 [ 448.847991][T28974] ? cap_task_prctl+0x13f/0x6e0 [ 448.848053][T28974] futex_hash_prctl+0xd8/0xf0 [ 448.848081][T28974] __se_sys_prctl+0xa3d/0x13f0 [ 448.848115][T28974] __x64_sys_prctl+0x67/0x80 [ 448.848139][T28974] x64_sys_call+0x2533/0x3020 [ 448.848234][T28974] do_syscall_64+0x12c/0x370 [ 448.848257][T28974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.848328][T28974] RIP: 0033:0x7f2779dac799 [ 448.848345][T28974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.848377][T28974] RSP: 002b:00007f2778807028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 448.848441][T28974] RAX: ffffffffffffffda RBX: 00007f277a025fa0 RCX: 00007f2779dac799 [ 448.848454][T28974] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 448.848467][T28974] RBP: 00007f2779e42c99 R08: 0000000000000000 R09: 0000000000000000 [ 448.848478][T28974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.848491][T28974] R13: 00007f277a026038 R14: 00007f277a025fa0 R15: 00007fff26499dc8 [ 448.848536][T28974] [ 449.221590][T29015] ref_ctr_offset mismatch. inode: 0x5a2 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 449.248439][T28974] memory: usage 16100kB, limit 307200kB, failcnt 358 [ 449.340255][T28974] memory+swap: usage 17032kB, limit 9007199254740988kB, failcnt 0 [ 449.387060][T29026] netlink: 'syz.6.8690': attribute type 10 has an invalid length. [ 449.395603][T28974] kmem: usage 15776kB, limit 9007199254740988kB, failcnt 0 [ 449.415230][T29026] team0: Failed to send options change via netlink (err -105) [ 449.432113][T28974] Memory cgroup stats for /syz0: [ 449.432411][T28974] cache 524288 [ 449.444663][T29026] team0: Port device dummy0 added [ 449.453714][T28974] rss 24576 [ 449.462496][T29026] netlink: 'syz.6.8690': attribute type 10 has an invalid length. [ 449.471408][T28974] shmem 0 [ 449.477319][T28974] mapped_file 65536 [ 449.486811][T28974] dirty 0 [ 449.495085][T28974] writeback 0 [ 449.504202][T28974] workingset_refault_anon 6642 [ 449.514450][T28974] workingset_refault_file 3655 [ 449.525759][T29026] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 449.540792][T29026] team0: Failed to send options change via netlink (err -105) [ 449.552406][T28974] swap 430080 [ 449.578196][T29026] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 449.587410][T29026] team0: Port device dummy0 removed [ 449.591580][T28974] swapcached 23166976 [ 449.594586][T29026] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 449.598509][T28974] pgpgin 639004 [ 449.636988][T28974] pgpgout 638869 [ 449.651689][T28974] pgfault 496036 [ 449.665322][T28974] pgmajfault 906 [ 449.679183][T28974] inactive_anon 0 [ 449.689432][T28974] active_anon 24576 [ 449.713045][T28974] inactive_file 0 [ 449.717019][T28974] active_file 524288 [ 449.727672][T28974] unevictable 0 [ 449.731688][T28974] hierarchical_memory_limit 314572800 [ 449.737387][T28974] hierarchical_memsw_limit 9223372036854771712 [ 449.744630][T28974] total_cache 524288 [ 449.748850][T28974] total_rss 24576 [ 449.752541][T28974] total_shmem 0 [ 449.756902][T28974] total_mapped_file 65536 [ 449.761753][T28974] total_dirty 0 [ 449.765411][T28974] total_writeback 0 [ 449.842027][T28974] total_workingset_refault_anon 6642 [ 449.847434][T28974] total_workingset_refault_file 3655 [ 449.987979][T28974] total_swap 430080 [ 449.992034][T28974] total_swapcached 23166976 [ 449.996547][T28974] total_pgpgin 639004 [ 450.120688][T28974] total_pgpgout 638869 [ 450.125180][T28974] total_pgfault 496036 [ 450.160719][T28974] total_pgmajfault 906 [ 450.236640][T28974] total_inactive_anon 0 [ 450.243135][T28974] total_active_anon 24576 [ 450.256141][T28974] total_inactive_file 0 [ 450.262213][T28974] total_active_file 524288 [ 450.266703][T28974] total_unevictable 0 [ 450.281132][T28974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.8672,pid=28973,uid=0 [ 450.309152][T28974] Memory cgroup out of memory: Killed process 28974 (syz.0.8672) total-vm:96344kB, anon-rss:1340kB, file-rss:22272kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 450.346379][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 450.346394][ T28] audit: type=1326 audit(2000001274.948:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.387534][ T28] audit: type=1326 audit(2000001274.948:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.420176][ T28] audit: type=1326 audit(2000001274.948:8677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.458287][T29071] loop9: detected capacity change from 0 to 512 [ 450.475743][ T28] audit: type=1326 audit(2000001274.948:8678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.507708][ T28] audit: type=1326 audit(2000001275.028:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.562396][T29071] EXT4-fs (loop9): 1 truncate cleaned up [ 450.571372][T29071] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.588741][ T28] audit: type=1326 audit(2000001275.028:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.613864][ T28] audit: type=1326 audit(2000001275.028:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.639700][ T28] audit: type=1326 audit(2000001275.028:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.665828][ T28] audit: type=1326 audit(2000001275.028:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.691282][ T28] audit: type=1326 audit(2000001275.028:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29070 comm="syz.9.8709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 450.733866][T29091] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8726'. [ 450.744638][T29091] netlink: 76 bytes leftover after parsing attributes in process `syz.6.8726'. [ 450.755001][T29091] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8726'. [ 450.814909][T29087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8715'. [ 451.036194][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.067676][T29100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8720'. [ 451.224932][T29114] xt_hashlimit: size too large, truncated to 1048576 [ 451.398872][T29115] syz.6.8725 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=0 [ 451.417905][T29115] CPU: 0 UID: 0 PID: 29115 Comm: syz.6.8725 Tainted: G W syzkaller #0 PREEMPT(full) [ 451.417937][T29115] Tainted: [W]=WARN [ 451.417943][T29115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.417964][T29115] Call Trace: [ 451.417970][T29115] [ 451.417977][T29115] __dump_stack+0x1d/0x30 [ 451.418012][T29115] dump_stack_lvl+0x95/0xd0 [ 451.418034][T29115] dump_stack+0x15/0x1b [ 451.418053][T29115] dump_header+0x80/0x240 [ 451.418073][T29115] oom_kill_process+0x295/0x350 [ 451.418092][T29115] out_of_memory+0x97d/0xb80 [ 451.418138][T29115] try_charge_memcg+0x62e/0xa10 [ 451.418174][T29115] obj_cgroup_charge_pages+0x23/0xc0 [ 451.418202][T29115] __memcg_kmem_charge_page+0x9e/0x170 [ 451.418225][T29115] __alloc_frozen_pages_noprof+0x18a/0x360 [ 451.418298][T29115] alloc_pages_mpol+0xb3/0x260 [ 451.418406][T29115] alloc_pages_noprof+0x8f/0x130 [ 451.418478][T29115] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 451.418515][T29115] __kvmalloc_node_noprof+0x3d4/0x650 [ 451.418583][T29115] ? futex_hash_allocate+0x190/0x9d0 [ 451.418618][T29115] ? futex_hash_allocate+0x190/0x9d0 [ 451.418642][T29115] futex_hash_allocate+0x190/0x9d0 [ 451.418763][T29115] ? cap_task_prctl+0x13f/0x6e0 [ 451.418783][T29115] futex_hash_prctl+0xd8/0xf0 [ 451.418809][T29115] __se_sys_prctl+0xa3d/0x13f0 [ 451.418844][T29115] __x64_sys_prctl+0x67/0x80 [ 451.418870][T29115] x64_sys_call+0x2533/0x3020 [ 451.418910][T29115] do_syscall_64+0x12c/0x370 [ 451.418932][T29115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.418984][T29115] RIP: 0033:0x7fcb0fd7c799 [ 451.419001][T29115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.419031][T29115] RSP: 002b:00007fcb0e7d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 451.419061][T29115] RAX: ffffffffffffffda RBX: 00007fcb0fff5fa0 RCX: 00007fcb0fd7c799 [ 451.419073][T29115] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 451.419085][T29115] RBP: 00007fcb0fe12c99 R08: 0000000000000000 R09: 0000000000000000 [ 451.419099][T29115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.419113][T29115] R13: 00007fcb0fff6038 R14: 00007fcb0fff5fa0 R15: 00007fffa44e2888 [ 451.419133][T29115] [ 451.419165][T29115] memory: usage 305900kB, limit 307200kB, failcnt 756 [ 451.766198][T29122] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8728'. [ 451.817952][T29115] memory+swap: usage 46776kB, limit 9007199254740988kB, failcnt 0 [ 451.855005][T29115] kmem: usage 6376kB, limit 9007199254740988kB, failcnt 0 [ 451.886250][T29115] Memory cgroup stats for /syz6: [ 451.886511][T29115] cache 35966976 [ 451.940096][T29115] rss 192512 [ 451.947994][T29115] shmem 34656256 [ 451.970933][T29115] mapped_file 589824 [ 451.984317][T29115] dirty 0 [ 452.008335][T29115] writeback 0 [ 452.019635][T29115] workingset_refault_anon 2233 [ 452.058502][T29115] workingset_refault_file 2499 [ 452.063614][T29115] swap 1458176 [ 452.077226][T29115] swapcached 43618304 [ 452.105963][T29115] pgpgin 586225 [ 452.132837][T29127] tipc: Started in network mode [ 452.140916][T29115] pgpgout 577394 [ 452.141777][T29127] tipc: Node identity aed1e894df4a, cluster identity 4711 [ 452.144835][T29115] pgfault 533349 [ 452.166682][T29127] tipc: Enabled bearer , priority 0 [ 452.239934][T29127] syzkaller0: entered promiscuous mode [ 452.245793][T29127] syzkaller0: entered allmulticast mode [ 452.253827][T29127] tipc: Resetting bearer [ 452.277867][T29115] pgmajfault 378 [ 452.290621][T29115] inactive_anon 33304576 [ 452.293692][T29126] tipc: Resetting bearer [ 452.294898][T29115] active_anon 1499136 [ 452.294907][T29115] inactive_file 0 [ 452.294913][T29115] active_file 1318912 [ 452.294920][T29115] unevictable 0 [ 452.294926][T29115] hierarchical_memory_limit 314572800 [ 452.294933][T29115] hierarchical_memsw_limit 9223372036854771712 [ 452.294942][T29115] total_cache 35966976 [ 452.383608][T29115] total_rss 192512 [ 452.385970][T29126] tipc: Disabling bearer [ 452.387431][T29115] total_shmem 34656256 [ 452.387440][T29115] total_mapped_file 589824 [ 452.387448][T29115] total_dirty 0 [ 452.427843][T29115] total_writeback 0 [ 452.432022][T29115] total_workingset_refault_anon 2233 [ 452.444669][T29115] total_workingset_refault_file 2499 [ 452.452003][T29115] total_swap 1458176 [ 452.456037][T29115] total_swapcached 43618304 [ 452.460992][T29115] total_pgpgin 586225 [ 452.465358][T29115] total_pgpgout 577394 [ 452.543173][T29115] total_pgfault 533349 [ 452.548574][T29115] total_pgmajfault 378 [ 452.562962][T29115] total_inactive_anon 33304576 [ 452.587164][T29115] total_active_anon 1499136 [ 452.611251][T29115] total_inactive_file 0 [ 452.636401][T29115] total_active_file 1318912 [ 452.660978][T29115] total_unevictable 0 [ 452.665862][T29115] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.8703,pid=29056,uid=0 [ 452.682298][T29129] lo speed is unknown, defaulting to 1000 [ 452.682773][T29115] Memory cgroup out of memory: OOM victim 29056 (syz.6.8703) is already exiting. Skip killing the task [ 453.455221][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8749'. [ 453.492618][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8749'. [ 453.503180][T29176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8749'. [ 453.586969][T29185] netlink: 'syz.9.8753': attribute type 4 has an invalid length. [ 453.610315][T29185] netlink: 'syz.9.8753': attribute type 4 has an invalid length. [ 454.160259][T29214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8766'. [ 454.258328][T29220] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8769'. [ 454.680871][T29243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8775'. [ 455.230841][T29260] loop9: detected capacity change from 0 to 512 [ 455.253862][T29260] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 455.296607][T29260] EXT4-fs error (device loop9): __ext4_iget:5378: inode #11: block 2: comm syz.9.8782: invalid block [ 455.330988][T29260] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 455.337795][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 455.354609][ C0] EXT4-fs (loop9): initial error at time 2000001279: __ext4_iget:5378: inode 11: block 2 [ 455.365024][ C0] EXT4-fs (loop9): last error at time 2000001279: __ext4_iget:5378: inode 11: block 2 [ 455.377926][T29260] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8782: couldn't read orphan inode 11 (err -117) [ 455.423394][T29260] loop9: lost filesystem error report for type 5 error -117 [ 455.426567][T29260] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.454126][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 455.454140][ T28] audit: type=1326 audit(2000001280.058:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.491042][ T28] audit: type=1326 audit(2000001280.088:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.516983][ T28] audit: type=1326 audit(2000001280.088:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.548933][T29269] macvtap1: entered promiscuous mode [ 455.554587][T29269] team0: entered promiscuous mode [ 455.559891][T29269] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 455.567289][T29269] team0: Device macvtap1 is already an upper device of the team interface [ 455.593929][ T28] audit: type=1326 audit(2000001280.088:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.621482][ T28] audit: type=1326 audit(2000001280.088:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.659666][T29269] team0: left promiscuous mode [ 455.712945][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.722911][ T28] audit: type=1326 audit(2000001280.088:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.754107][ T28] audit: type=1326 audit(2000001280.088:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.785311][T29258] loop3: detected capacity change from 0 to 2048 [ 455.786712][ T28] audit: type=1326 audit(2000001280.088:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.869568][ T28] audit: type=1326 audit(2000001280.088:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 455.894593][ T28] audit: type=1326 audit(2000001280.088:8736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29259 comm="syz.9.8782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f518935c799 code=0x7ffc0000 [ 456.034370][T29258] Alternate GPT is invalid, using primary GPT. [ 456.049124][T29258] loop3: p2 p3 p7 [ 456.243968][T29292] netlink: 'syz.0.8795': attribute type 39 has an invalid length. [ 456.436191][T29312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8803'. [ 456.651375][T29325] tipc: Enabling of bearer rejected, failed to enable media [ 456.711522][T10190] udevd[10190]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 456.724067][T17195] udevd[17195]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 457.223229][T29356] loop3: detected capacity change from 0 to 128 [ 457.312523][T29362] loop9: detected capacity change from 0 to 2048 [ 457.470509][ T3000] Alternate GPT is invalid, using primary GPT. [ 457.507654][ T3000] loop9: p2 p3 p7 [ 457.672599][ T3000] Alternate GPT is invalid, using primary GPT. [ 457.679226][ T3000] loop9: p2 p3 p7 [ 457.699020][T29362] Alternate GPT is invalid, using primary GPT. [ 457.705422][T29362] loop9: p2 p3 p7 [ 457.964397][T29371] xt_hashlimit: size too large, truncated to 1048576 [ 458.212545][T29391] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8835'. [ 458.303333][T29399] netlink: 'syz.6.8839': attribute type 1 has an invalid length. [ 458.837438][T29417] loop9: detected capacity change from 0 to 128 [ 459.174530][T29425] lo speed is unknown, defaulting to 1000 [ 459.485479][T29429] netlink: 52 bytes leftover after parsing attributes in process `syz.7.8849'. [ 459.532662][T29431] tipc: Enabling of bearer rejected, failed to enable media [ 460.662876][T29466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8863'. [ 461.237390][T29505] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 461.296806][T29495] loop9: detected capacity change from 0 to 1024 [ 461.331371][T29495] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 461.519804][T29524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8889'. [ 461.614973][T29532] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿÿÿÿÿÿ [ 462.233841][T29568] macvtap1: entered promiscuous mode [ 462.241021][T29568] team0: entered promiscuous mode [ 462.247553][T29568] team_slave_0: entered promiscuous mode [ 462.269921][T29568] team_slave_1: entered promiscuous mode [ 462.289776][T29568] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 462.297417][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8907'. [ 462.309692][T29568] team0: Device macvtap1 is already an upper device of the team interface [ 462.363460][T29568] team0: left promiscuous mode [ 462.374579][T29568] team_slave_0: left promiscuous mode [ 462.400385][T29568] team_slave_1: left promiscuous mode [ 462.558937][T29581] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8909'. [ 462.577706][T29579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8908'. [ 462.608771][T29579] vlan0: entered promiscuous mode [ 462.614709][T29579] syz_tun: entered promiscuous mode [ 462.751475][T29588] lo: Caught tx_queue_len zero misconfig [ 463.101575][T29596] xt_hashlimit: size too large, truncated to 1048576 [ 463.814257][T29600] loop3: detected capacity change from 0 to 1024 [ 463.840101][T29600] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 464.716975][T29613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8919'. [ 464.743983][T29613] 8021q: adding VLAN 0 to HW filter on device team1 [ 464.901851][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8923'. [ 464.966559][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8923'. [ 465.092888][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 465.092903][ T28] audit: type=1326 audit(2000001289.688:8760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.152964][ T28] audit: type=1326 audit(2000001289.688:8761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.226590][ T28] audit: type=1326 audit(2000001289.688:8762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.283861][ T28] audit: type=1326 audit(2000001289.688:8763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.362203][ T28] audit: type=1326 audit(2000001289.688:8764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.392693][ T28] audit: type=1326 audit(2000001289.688:8765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.464443][T29645] loop9: detected capacity change from 0 to 4096 [ 465.490642][ T28] audit: type=1326 audit(2000001289.688:8766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.521705][ T28] audit: type=1326 audit(2000001289.688:8767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.545899][ T28] audit: type=1326 audit(2000001289.698:8768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.546605][T29645] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.570051][ T28] audit: type=1326 audit(2000001289.798:8769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29625 comm="syz.3.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 465.851574][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.979535][T29663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8939'. [ 466.485468][T29689] SELinux: failed to load policy [ 467.187710][T29700] netlink: 'syz.6.8956': attribute type 4 has an invalid length. [ 467.368974][T29700] netlink: 'syz.6.8956': attribute type 4 has an invalid length. [ 467.414781][ T3400] lo speed is unknown, defaulting to 1000 [ 467.420863][ T3400] syz2: Port: 1 Link ACTIVE [ 467.628364][T29711] macvtap0: entered promiscuous mode [ 467.634451][T29711] team0: entered promiscuous mode [ 467.646902][T29711] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 467.658330][T29711] team0: Device macvtap0 is already an upper device of the team interface [ 467.685225][T29711] team0: left promiscuous mode [ 467.700101][T29714] loop9: detected capacity change from 0 to 512 [ 467.758604][T29714] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.8962: inode has both inline data and extents flags [ 467.856687][T29714] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 467.857769][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 467.874431][ C1] EXT4-fs (loop9): initial error at time 2000001292: ext4_orphan_get:1391: inode 15 [ 467.885558][ C1] EXT4-fs (loop9): last error at time 2000001292: ext4_orphan_get:1391: inode 15 [ 467.887192][T29714] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.8962: couldn't read orphan inode 15 (err -117) [ 467.911805][T29714] loop9: lost filesystem error report for type 5 error -117 [ 467.921166][T29714] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 468.091176][T29722] IPv6: sit1: Disabled Multicast RS [ 468.179970][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.323516][T29738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8973'. [ 468.339495][T29738] bond6: entered promiscuous mode [ 468.459278][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8975'. [ 468.478575][T29746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8975'. [ 468.512701][T29746] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8975'. [ 468.515737][ T6779] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.540591][T29746] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8975'. [ 468.541101][ T6779] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.580383][ T6779] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.598728][ T6779] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.818860][T29757] lo speed is unknown, defaulting to 1000 [ 470.317255][T29803] lo speed is unknown, defaulting to 1000 [ 470.771060][T29816] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 470.979892][T29833] block device autoloading is deprecated and will be removed. [ 471.240187][T29851] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9017'. [ 471.279556][T29854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9018'. [ 471.290750][T29854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9018'. [ 471.479406][T29873] loop3: detected capacity change from 0 to 512 [ 471.488941][T29873] EXT4-fs: Ignoring removed bh option [ 471.494978][T29873] EXT4-fs: Ignoring removed oldalloc option [ 471.523342][T29873] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 471.545390][T29871] macvtap1: entered promiscuous mode [ 471.566969][T29871] team0: entered promiscuous mode [ 471.578385][T29873] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 471.598413][T29873] EXT4-fs (loop3): 1 truncate cleaned up [ 471.598934][T29871] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 471.605046][T29873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.617131][T29871] team0: Device macvtap1 is already an upper device of the team interface [ 471.646748][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.658802][T29871] team0: left promiscuous mode [ 471.709284][T29869] IPv6: sit2: Disabled Multicast RS [ 471.828750][T29894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9035'. [ 471.856429][T29894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9035'. [ 472.039896][T29907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9040'. [ 472.760482][T29917] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 472.784866][T29917] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 472.889788][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9046'. [ 472.899132][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9046'. [ 474.151928][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 474.151950][ T28] audit: type=1326 audit(2000001298.748:8792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.251489][T29954] netlink: 1472 bytes leftover after parsing attributes in process `syz.9.9056'. [ 474.281280][T29954] netlink: 1472 bytes leftover after parsing attributes in process `syz.9.9056'. [ 474.355050][ T28] audit: type=1326 audit(2000001298.748:8793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.431286][ T28] audit: type=1326 audit(2000001298.748:8794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.458388][ T28] audit: type=1326 audit(2000001298.748:8795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.484696][ T28] audit: type=1326 audit(2000001298.748:8796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.517482][ T28] audit: type=1326 audit(2000001298.748:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.543702][ T28] audit: type=1326 audit(2000001298.748:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.568466][ T28] audit: type=1326 audit(2000001298.748:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.593523][ T28] audit: type=1326 audit(2000001298.748:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 474.617674][ T28] audit: type=1326 audit(2000001298.758:8801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29942 comm="syz.3.9053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 475.183186][T30022] loop3: detected capacity change from 0 to 256 [ 475.211444][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.252709][T30022] FAT-fs (loop3): Filesystem has been set read-only [ 475.259875][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.287017][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.298519][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.330901][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.340242][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.350837][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.363584][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.372676][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.381921][T30022] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 475.670947][T30045] loop9: detected capacity change from 0 to 1024 [ 475.703240][T30045] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 476.345673][T30066] loop3: detected capacity change from 0 to 1024 [ 476.408769][T30066] EXT4-fs: inline encryption not supported [ 476.436317][T30066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.491381][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.626125][T30083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9107'. [ 476.676458][T30083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9107'. [ 477.466336][T30100] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9113'. [ 477.742326][T30111] loop3: detected capacity change from 0 to 1024 [ 477.785892][T30111] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 478.216006][T30126] netlink: 'syz.6.9125': attribute type 4 has an invalid length. [ 478.276041][T30127] netlink: 'syz.6.9125': attribute type 4 has an invalid length. [ 478.307791][ T10] lo speed is unknown, defaulting to 1000 [ 478.314795][ T10] lo speed is unknown, defaulting to 1000 [ 478.859016][T30145] lo speed is unknown, defaulting to 1000 [ 479.320913][T30171] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9145'. [ 479.746773][T30194] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9155'. [ 480.051689][T30205] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9159'. [ 480.796924][T30236] netlink: 'syz.9.9169': attribute type 13 has an invalid length. [ 481.152183][ T6779] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.168491][T30247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9172'. [ 481.187832][ T6779] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.220751][T30249] netlink: 'syz.0.9173': attribute type 3 has an invalid length. [ 481.229512][T30220] lo speed is unknown, defaulting to 1000 [ 481.236861][ T6779] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.293169][ T6779] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.920703][T30283] loop3: detected capacity change from 0 to 4096 [ 482.960939][T30283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.115385][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.236255][T30290] loop3: detected capacity change from 0 to 1024 [ 483.258223][T30290] EXT4-fs: Ignoring removed oldalloc option [ 483.273425][T30290] EXT4-fs: Ignoring removed bh option [ 483.300442][T30290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.671934][T30303] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9190'. [ 483.705979][T30305] netlink: 'syz.0.9191': attribute type 1 has an invalid length. [ 483.714519][T30305] netlink: 'syz.0.9191': attribute type 4 has an invalid length. [ 483.723515][T30305] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.9191'. [ 484.007437][T30295] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.9185: Allocating blocks 1-17 which overlap fs metadata [ 484.036557][T30290] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.9185: Allocating blocks 1-17 which overlap fs metadata [ 484.298178][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.427750][T30340] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9205'. [ 484.438636][T30338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9204'. [ 484.820017][T30363] lo speed is unknown, defaulting to 1000 [ 484.889623][T30371] bridge_slave_0: left promiscuous mode [ 484.898218][T30371] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.906644][T30371] bridge_slave_1: left allmulticast mode [ 484.916344][T30371] bridge_slave_1: left promiscuous mode [ 484.926590][T30371] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.950327][T30371] bond0: (slave bond_slave_0): Releasing backup interface [ 484.970571][T30371] bond0: (slave bond_slave_1): Releasing backup interface [ 484.999089][T30371] team0: Failed to send options change via netlink (err -105) [ 485.007026][T30371] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 485.020114][T30371] team0: Port device team_slave_0 removed [ 485.027023][T30371] team0: Failed to send options change via netlink (err -105) [ 485.040502][T30371] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 485.063287][T30371] team0: Port device team_slave_1 removed [ 485.075008][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 485.075020][ T28] audit: type=1400 audit(2000001565.681:8863): avc: denied { ioctl } for pid=30383 comm="syz.6.9223" path="socket:[126820]" dev="sockfs" ino=126820 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 485.075122][T30371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.125535][T30371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.166052][T30371] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 485.226116][T30376] team0: Failed to send options change via netlink (err -105) [ 485.241756][T30376] team0: Mode changed to "activebackup" [ 485.753227][ T28] audit: type=1326 audit(2000001566.041:8864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 485.897387][ T28] audit: type=1326 audit(2000001566.041:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 485.924814][ T28] audit: type=1326 audit(2000001566.191:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.007773][ T28] audit: type=1326 audit(2000001566.191:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.058578][ T28] audit: type=1326 audit(2000001566.191:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.098679][ T28] audit: type=1326 audit(2000001566.191:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.123961][T30413] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9231'. [ 486.152761][T30413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9231'. [ 486.157813][ T28] audit: type=1326 audit(2000001566.191:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.233275][ T28] audit: type=1326 audit(2000001566.191:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.266625][ T28] audit: type=1326 audit(2000001566.191:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30393 comm="syz.9.9226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f518935c799 code=0x7fc00000 [ 486.407946][T30427] bond7: entered promiscuous mode [ 486.421568][T30427] ip6gretap1: entered promiscuous mode [ 486.428868][T30427] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 486.530919][T30427] bond7 (unregistering): (slave ip6gretap1): Releasing backup interface [ 486.541941][T30427] ip6gretap1: left promiscuous mode [ 486.588645][T30427] bond7 (unregistering): Released all slaves [ 486.604916][T30438] tipc: Failed to remove unknown binding: 66,0,0/0:3417918078/3417918079 [ 486.615082][T30438] tipc: Failed to remove unknown binding: 66,0,0/0:3417918078/3417918079 [ 486.627886][T30440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9241'. [ 486.702724][T30450] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9246'. [ 486.726816][T30452] netlink: 'syz.0.9247': attribute type 1 has an invalid length. [ 486.772364][T30452] bond7: (slave veth15): Enslaving as an active interface with a down link [ 486.787523][T30460] loop9: detected capacity change from 0 to 512 [ 486.793955][T30452] bond7: (slave dummy0): making interface the new active one [ 486.803033][T30452] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 486.812927][T30452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9247'. [ 486.835412][T30452] bond7: (slave dummy0): Releasing active interface [ 486.877227][T30460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 486.942097][T30460] ext4 filesystem being mounted at /491/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 487.304736][T30460] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.9250: Failed to acquire dquot type 0 [ 487.980365][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 488.220331][T30506] lo speed is unknown, defaulting to 1000 [ 488.373494][T30517] netlink: 'syz.0.9270': attribute type 13 has an invalid length. [ 488.410199][T30517] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.9270'. [ 488.976690][T30534] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=30534 comm=syz.6.9279 [ 489.289991][T30545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9283'. [ 489.904420][T30565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9291'. [ 489.993313][T30568] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9292'. [ 490.004802][T30552] SELinux: failed to load policy [ 490.395320][T30577] loop9: detected capacity change from 0 to 128 [ 490.501029][T30579] netlink: 20 bytes leftover after parsing attributes in process `syz.9.9297'. [ 490.804367][T30579] ip6gre1: entered promiscuous mode [ 490.812842][T30579] ip6gre1: entered allmulticast mode [ 491.154254][T30597] uprobe: syz.0.9303:30597 failed to unregister, leaking uprobe [ 492.800103][T30655] vlan2: entered allmulticast mode [ 492.805278][T30655] bond0: entered allmulticast mode [ 492.815065][T30655] netlink: 14 bytes leftover after parsing attributes in process `syz.7.9324'. [ 492.827973][T30655] bond0 (unregistering): Released all slaves [ 492.995279][T30663] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: 1 [ 492.997251][T30658] syz.0.9326 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 493.010823][T30663] ref_ctr increment failed for inode: 0x10ba offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881040eaf40 [ 493.015740][T30658] CPU: 0 UID: 0 PID: 30658 Comm: syz.0.9326 Tainted: G W syzkaller #0 PREEMPT(full) [ 493.015785][T30658] Tainted: [W]=WARN [ 493.015792][T30658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 493.015804][T30658] Call Trace: [ 493.015812][T30658] [ 493.015820][T30658] __dump_stack+0x1d/0x30 [ 493.015954][T30658] dump_stack_lvl+0x95/0xd0 [ 493.015976][T30658] dump_stack+0x15/0x1b [ 493.016005][T30658] dump_header+0x80/0x240 [ 493.016027][T30658] oom_kill_process+0x295/0x350 [ 493.016117][T30658] out_of_memory+0x97d/0xb80 [ 493.016138][T30658] try_charge_memcg+0x62e/0xa10 [ 493.016173][T30658] __mem_cgroup_charge+0x65/0x150 [ 493.016332][T30658] filemap_add_folio+0x110/0x350 [ 493.016353][T30658] __filemap_get_folio_mpol+0x326/0x680 [ 493.016376][T30658] filemap_fault+0x486/0xb90 [ 493.016395][T30658] ? __rcu_read_lock+0x36/0x50 [ 493.016427][T30658] __do_fault+0xbc/0x200 [ 493.016441][T30658] handle_mm_fault+0xfab/0x3020 [ 493.016467][T30658] ? vma_start_read+0x1c7/0x2c0 [ 493.016512][T30658] do_user_addr_fault+0x62f/0x1050 [ 493.016568][T30658] ? trace_page_fault_user+0x1f/0xe0 [ 493.016595][T30658] exc_page_fault+0x62/0xa0 [ 493.016631][T30658] asm_exc_page_fault+0x26/0x30 [ 493.016651][T30658] RIP: 0033:0x7f2779c80fe6 [ 493.016746][T30658] Code: 89 4c 24 18 48 89 74 24 10 e8 c6 92 fe ff 49 8b 47 40 48 8b 74 24 10 48 8b 4c 24 18 41 01 77 30 48 29 f0 83 e1 06 49 89 47 40 00 00 b8 01 00 00 00 0f 84 ab fe ff ff 66 66 2e 0f 1f 84 00 00 [ 493.016764][T30658] RSP: 002b:00007fff26499e10 EFLAGS: 00010202 [ 493.016785][T30658] RAX: 0000001b32121e08 RBX: ffffffff8163f35a RCX: 0000000000000004 [ 493.016799][T30658] RDX: 0000001b31b24220 RSI: 0000000000000004 RDI: 00007f277ab55720 [ 493.016812][T30658] RBP: 0000000000000000 R08: 00007f277a010000 R09: 00007f277a012000 [ 493.016862][T30658] R10: 000000008163f35e R11: 0000000000000008 R12: 00007f277a026038 [ 493.016876][T30658] R13: 0000000000000000 R14: ffffffff8163fa30 R15: 00007f277ab55720 [ 493.016890][T30658] ? __x64_sys_bpf+0x10/0x50 [ 493.016919][T30658] ? bpf_link_get_from_fd+0xaa/0xc0 [ 493.017010][T30658] [ 493.017046][T30658] memory: usage 295240kB, limit 307200kB, failcnt 807 [ 493.066279][T30662] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -26127, delta: -1 [ 493.069217][T30658] memory+swap: usage 240348kB, limit 9007199254740988kB, failcnt 0 [ 493.069263][T30658] kmem: usage 239656kB, limit 9007199254740988kB, failcnt 0 [ 493.069274][T30658] Memory cgroup stats for /syz0: [ 493.069456][T30658] cache 8192 [ 493.069507][T30658] rss 204800 [ 493.069515][T30658] shmem 4096 [ 493.069522][T30658] mapped_file 4096 [ 493.069529][T30658] dirty 0 [ 493.069536][T30658] writeback 0 [ 493.069544][T30658] workingset_refault_anon 7571 [ 493.069552][T30658] workingset_refault_file 3912 [ 493.069559][T30658] swap 233472 [ 493.069567][T30658] swapcached 23019520 [ 493.069574][T30658] pgpgin 689199 [ 493.069582][T30658] pgpgout 689144 [ 493.069591][T30658] pgfault 536087 [ 493.069598][T30658] pgmajfault 1088 [ 493.069606][T30658] inactive_anon 0 [ 493.069614][T30658] active_anon 221184 [ 493.069622][T30658] inactive_file 0 [ 493.069629][T30658] active_file 0 [ 493.069636][T30658] unevictable 0 [ 493.069644][T30658] hierarchical_memory_limit 314572800 [ 493.069653][T30658] hierarchical_memsw_limit 9223372036854771712 [ 493.086263][T30662] ref_ctr decrement failed for inode: 0x10ba offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881040eaf40 [ 493.381978][T30658] total_cache 8192 [ 493.428427][T30662] uprobe: syz.7.9327:30662 failed to unregister, leaking uprobe [ 493.461745][T30658] total_rss 204800 [ 493.468703][T30658] total_shmem 4096 [ 493.473111][T30658] total_mapped_file 4096 [ 493.477559][T30658] total_dirty 0 [ 493.481407][T30658] total_writeback 0 [ 493.486098][T30658] total_workingset_refault_anon 7571 [ 493.493254][T30658] total_workingset_refault_file 3912 [ 493.499017][T30658] total_swap 233472 [ 493.503199][T30658] total_swapcached 23019520 [ 493.508048][T30658] total_pgpgin 689199 [ 493.512730][T30658] total_pgpgout 689144 [ 493.517651][T30658] total_pgfault 536087 [ 493.521918][T30658] total_pgmajfault 1088 [ 493.526250][T30658] total_inactive_anon 0 [ 493.531148][T30658] total_active_anon 221184 [ 493.536241][T30658] total_inactive_file 0 [ 493.541208][T30658] total_active_file 0 [ 493.545768][T30658] total_unevictable 0 [ 493.550126][T30658] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.9326,pid=30658,uid=0 [ 493.616501][T30658] Memory cgroup out of memory: Killed process 30658 (syz.0.9326) total-vm:96212kB, anon-rss:1408kB, file-rss:22212kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 493.723476][T30676] loop9: detected capacity change from 0 to 2048 [ 493.742084][T30680] lo speed is unknown, defaulting to 1000 [ 493.775308][T30676] EXT4-fs: Ignoring removed i_version option [ 493.835897][T30676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.876734][T30696] netlink: 52 bytes leftover after parsing attributes in process `syz.7.9340'. [ 494.228964][T13089] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 494.244978][T13089] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1302 with error 28 [ 494.267354][T13089] EXT4-fs (loop9): This should not happen!! Data will be lost [ 494.267354][T13089] [ 494.278327][T13089] EXT4-fs (loop9): Total free blocks count 0 [ 494.284937][T13089] EXT4-fs (loop9): Free/Dirty block details [ 494.292030][T13089] EXT4-fs (loop9): free_blocks=2415919504 [ 494.298002][T13089] EXT4-fs (loop9): dirty_blocks=2624 [ 494.303411][T13089] EXT4-fs (loop9): Block reservation details [ 494.309862][T13089] EXT4-fs (loop9): i_reserved_data_blocks=82 [ 494.324069][T30714] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.9346'. [ 494.336028][T13089] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1302 with error 28 [ 494.343459][T30714] netlink: 1472 bytes leftover after parsing attributes in process `syz.6.9346'. [ 494.359411][T30712] bond4: left allmulticast mode [ 494.364643][T30712] bond4: left promiscuous mode [ 494.397434][T30716] ------------[ cut here ]------------ [ 494.403145][T30716] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 494.415524][T30716] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#1: syz.9.9345/30716 [ 494.426373][T30716] Modules linked in: [ 494.430351][T30716] CPU: 1 UID: 0 PID: 30716 Comm: syz.9.9345 Tainted: G W syzkaller #0 PREEMPT(full) [ 494.441600][T30716] Tainted: [W]=WARN [ 494.445406][T30716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.456762][T30716] RIP: 0010:u32_change+0x1463/0x14d0 [ 494.462688][T30716] Code: 31 ed e9 96 fe ff ff e8 db 38 c2 fc 48 8d 3d 54 7d 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 f1 86 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 494.485047][T30716] RSP: 0018:ffffc900021235e0 EFLAGS: 00010287 [ 494.492326][T30716] RAX: ffffffff84971445 RBX: ffffc900021237f0 RCX: 0000000000000010 [ 494.501243][T30716] RDX: ffffffff867e86f1 RSI: 0000000000000020 RDI: ffffffff872091a0 [ 494.511164][T30716] RBP: ffffc900021236e8 R08: 000188810d154b87 R09: 0000000000000000 [ 494.519396][T30716] R10: ffff88810d154b00 R11: 0000000000000002 R12: ffff88811bf76600 [ 494.527678][T30716] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88811bf766c0 [ 494.535887][T30716] FS: 00007f5187db76c0(0000) GS:ffff8882ae9dc000(0000) knlGS:0000000000000000 [ 494.546061][T30716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.552787][T30716] CR2: 0000001b33421ff8 CR3: 0000000119d96000 CR4: 00000000003506f0 [ 494.561591][T30716] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.571270][T30716] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 494.579663][T30716] Call Trace: [ 494.582947][T30716] [ 494.585897][T30716] tc_new_tfilter+0xfc0/0x1200 [ 494.586760][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 494.586773][ T28] audit: type=1326 audit(2000001575.191:8931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.590731][T30716] ? ns_capable+0x7c/0xb0 [ 494.590757][T30716] ? __pfx_tc_new_tfilter+0x10/0x10 [ 494.617535][ T28] audit: type=1326 audit(2000001575.191:8932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.621937][T30716] rtnetlink_rcv_msg+0x64b/0x720 [ 494.636111][ T28] audit: type=1326 audit(2000001575.191:8933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.656005][T30716] ? avc_has_perm_noaudit+0xab/0x130 [ 494.656058][T30716] netlink_rcv_skb+0x123/0x220 [ 494.696274][T30716] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 494.701947][T30716] rtnetlink_rcv+0x1c/0x30 [ 494.702244][ T28] audit: type=1326 audit(2000001575.191:8934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.706636][T30716] netlink_unicast+0x5c0/0x690 [ 494.706688][T30716] netlink_sendmsg+0x5c8/0x6f0 [ 494.741642][T30716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.742119][ T28] audit: type=1326 audit(2000001575.191:8935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.747079][T30716] ____sys_sendmsg+0x563/0x5b0 [ 494.747109][T30716] ___sys_sendmsg+0x195/0x1e0 [ 494.773846][ T28] audit: type=1326 audit(2000001575.191:8936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.777570][T30716] __sys_sendmmsg+0x185/0x320 [ 494.783595][ T28] audit: type=1326 audit(2000001575.191:8937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.808335][T30716] __x64_sys_sendmmsg+0x57/0x70 [ 494.808374][T30716] x64_sys_call+0x27aa/0x3020 [ 494.848660][T30716] do_syscall_64+0x12c/0x370 [ 494.853446][T30716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.853724][ T28] audit: type=1326 audit(2000001575.191:8938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30721 comm="syz.0.9349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2779dac799 code=0x7ffc0000 [ 494.859613][T30716] RIP: 0033:0x7f518935c799 [ 494.889039][T30716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.909789][T30716] RSP: 002b:00007f5187db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.918981][T30716] RAX: ffffffffffffffda RBX: 00007f51895d5fa0 RCX: 00007f518935c799 [ 494.927340][T30716] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 494.935538][T30716] RBP: 00007f51893f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 494.944315][T30716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.952676][T30716] R13: 00007f51895d6038 R14: 00007f51895d5fa0 R15: 00007ffd6c76cb58 [ 494.961537][T30716] [ 494.964741][T30716] ---[ end trace 0000000000000000 ]--- [ 495.055519][T30727] lo speed is unknown, defaulting to 1000 [ 495.105669][T30734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.172077][ T291] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.188622][T30734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.213081][ T291] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.228585][T30744] vlan0: entered allmulticast mode [ 495.233906][T30744] bond0: entered allmulticast mode [ 495.240121][T30744] dummy0: entered allmulticast mode [ 495.282368][T30744] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9355'. [ 495.303725][T30746] loop3: detected capacity change from 0 to 2048 [ 495.348575][T30744] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 495.357448][T30746] EXT4-fs: Ignoring removed i_version option [ 495.366341][T30744] dummy0: left allmulticast mode [ 495.378530][T30744] bond0 (unregistering): Released all slaves [ 495.389064][ T291] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.399454][ T291] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.457835][T30746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.534462][ T291] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.557085][ T291] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.649308][ T291] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.659386][ T291] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.733376][ T291] bridge_slave_1: left allmulticast mode [ 495.744149][ T291] bridge_slave_1: left promiscuous mode [ 495.751580][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.758485][ T6779] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 495.774483][ T6779] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 698 with error 28 [ 495.787315][ T6779] EXT4-fs (loop3): This should not happen!! Data will be lost [ 495.787315][ T6779] [ 495.787487][ T291] bridge_slave_0: left allmulticast mode [ 495.798702][ T6779] EXT4-fs (loop3): Total free blocks count 0 [ 495.807761][ T291] bridge_slave_0: left promiscuous mode [ 495.810104][ T6779] EXT4-fs (loop3): Free/Dirty block details [ 495.821822][ T6779] EXT4-fs (loop3): free_blocks=2415919504 [ 495.821971][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.828596][ T6779] EXT4-fs (loop3): dirty_blocks=1408 [ 495.840863][ T6779] EXT4-fs (loop3): Block reservation details [ 495.847563][ T6779] EXT4-fs (loop3): i_reserved_data_blocks=44 [ 495.857274][ T6779] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 698 with error 28 [ 495.936001][ T291] erspan0 (unregistering): left allmulticast mode [ 496.080175][ T291] dummy0: left promiscuous mode [ 496.089784][ T291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.097513][ T291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.109785][ T291] veth1_macvtap: left promiscuous mode [ 496.115805][ T291] veth0_macvtap: left promiscuous mode [ 496.122410][ T291] veth1_vlan: left promiscuous mode [ 496.127893][ T291] veth0_vlan: left promiscuous mode [ 496.211838][ T291] team0 (unregistering): Port device team_slave_1 removed [ 496.222021][ T291] team0 (unregistering): Port device team_slave_0 removed [ 496.411376][ T291] IPVS: stop unused estimator thread 0... [ 496.474035][T30813] netlink: 164 bytes leftover after parsing attributes in process `syz.7.9367'. [ 496.535227][T30821] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9371'. [ 496.566466][T30821] netlink: 92 bytes leftover after parsing attributes in process `syz.6.9371'. [ 496.646099][T30830] vlan0: entered allmulticast mode [ 496.661040][ T28] audit: type=1400 audit(2000001577.261:8939): avc: denied { create } for pid=30836 comm="syz.7.9376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 496.669359][T30830] bond0: entered allmulticast mode [ 496.692868][T30841] loop3: detected capacity change from 0 to 128 [ 496.708726][T30834] netlink: 52 bytes leftover after parsing attributes in process `syz.6.9375'. [ 496.765479][T30830] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9374'. [ 497.003809][ T28] audit: type=1326 audit(2000001577.611:8940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30856 comm="syz.7.9379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53444ac799 code=0x7ffc0000 [ 497.045657][T30859] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9380'. [ 497.059334][T30830] bond0 (unregistering): Released all slaves [ 497.073139][T30859] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9380'. [ 497.236772][T30880] xt_hashlimit: size too large, truncated to 1048576 [ 497.692856][T30906] loop3: detected capacity change from 0 to 512 [ 497.699753][T30906] EXT4-fs: Ignoring removed bh option [ 497.705858][T30906] EXT4-fs: Ignoring removed oldalloc option [ 497.728217][T30906] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 497.743593][T30906] EXT4-fs (loop3): 1 truncate cleaned up [ 497.751146][T30906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.853494][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.869296][T30949] __nla_validate_parse: 1 callbacks suppressed [ 499.869345][T30949] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9411'. [ 500.250247][T30959] loop9: detected capacity change from 0 to 512 [ 500.328958][T30959] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 500.412470][T30959] EXT4-fs (loop9): orphan cleanup on readonly fs [ 500.426471][T30959] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 500.522905][T30959] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 500.552877][T30959] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #13: comm syz.9.9416: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 500.593647][T30959] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 500.594541][T30959] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.9416: couldn't read orphan inode 13 (err -117) [ 500.604562][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 500.604631][ C0] EXT4-fs (loop9): last error at time 2000001581: ext4_ext_check_inode:521: inode 13 [ 500.648115][T30959] loop9: lost filesystem error report for type 5 error -117 [ 500.652084][T30959] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 500.684559][T30959] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.006319][T30990] syzkaller0: entered allmulticast mode [ 501.025990][T30990] syzkaller0: entered promiscuous mode [ 501.102694][T30990] syzkaller0 (unregistering): left promiscuous mode [ 501.110732][T30990] syzkaller0 (unregistering): left allmulticast mode [ 501.711437][T30984] kexec: Could not allocate control_code_buffer [ 502.267591][T31012] loop3: detected capacity change from 0 to 512 [ 502.341890][T31012] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 502.368321][T31012] EXT4-fs (loop3): orphan cleanup on readonly fs [ 502.433407][T31012] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 502.490498][T31012] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 502.782738][T31012] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.9436: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 502.876879][T31012] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 502.877763][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 502.893629][ C1] EXT4-fs (loop3): last error at time 2000001583: ext4_ext_check_inode:521: inode 13 [ 502.904538][T31012] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.9436: couldn't read orphan inode 13 (err -117) [ 502.918530][T31012] loop3: lost filesystem error report for type 5 error -117 [ 502.922369][T31012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.964984][T31012] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.747954][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 503.747967][ T28] audit: type=1326 audit(2000001584.351:8984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 503.831669][ T28] audit: type=1326 audit(2000001584.361:8985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 503.895413][ T28] audit: type=1326 audit(2000001584.391:8986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 503.940806][ T28] audit: type=1326 audit(2000001584.391:8987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 504.011399][ T28] audit: type=1326 audit(2000001584.391:8988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 504.059656][ T28] audit: type=1326 audit(2000001584.401:8989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 504.134169][ T28] audit: type=1326 audit(2000001584.401:8990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 504.179957][T31072] lo speed is unknown, defaulting to 1000 [ 504.188649][ T28] audit: type=1326 audit(2000001584.401:8991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 504.220307][ T28] audit: type=1326 audit(2000001584.401:8992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f776423c799 code=0x7ffc0000 [ 504.247960][ T28] audit: type=1326 audit(2000001584.401:8993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31065 comm="syz.3.9457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f776423c502 code=0x7ffc0000 [ 504.781981][T31102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9470'. [ 505.193099][T31117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9486'. [ 505.212223][T31115] lo speed is unknown, defaulting to 1000 [ 505.426850][ T6777] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.499157][ T6777] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.572715][ T6777] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.630359][ T6777] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.071011][ T6777] bond1 (unregistering): (slave bridge1): Releasing active interface [ 506.192663][ T6777] bond0 (unregistering): Released all slaves [ 506.229260][ T6777] bond1 (unregistering): Released all slaves [ 506.269791][ T6777] bond2 (unregistering): Released all slaves [ 506.306385][ T6777] bond3 (unregistering): Released all slaves [ 506.460336][ T6777] tipc: Disabling bearer [ 506.482403][ T6777] tipc: Left network mode [ 506.645570][ T6777] hsr_slave_0: left promiscuous mode [ 506.698688][T31123] kexec: Could not allocate control_code_buffer [ 506.705302][ T6777] hsr_slave_1: left promiscuous mode [ 507.099395][T31181] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9489'. [ 507.382484][T31212] bond0: entered promiscuous mode [ 507.472025][T31212] ip6gretap1: entered promiscuous mode [ 507.509707][T31212] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 507.604982][T31212] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 507.678294][T31212] ip6gretap1: left promiscuous mode [ 507.686395][T31212] bond0 (unregistering): Released all slaves [ 508.410064][T31259] netlink: 'syz.6.9508': attribute type 4 has an invalid length. [ 508.471080][T31262] netlink: 'syz.6.9508': attribute type 4 has an invalid length. [ 508.504922][ T3400] lo speed is unknown, defaulting to 1000 [ 508.510686][T31268] netlink: 'syz.9.9510': attribute type 2 has an invalid length. [ 508.511787][T15831] lo speed is unknown, defaulting to 1000 [ 508.548343][T31268] netlink: 'syz.9.9510': attribute type 2 has an invalid length. [ 509.193264][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 509.193279][ T28] audit: type=1400 audit(2000001589.791:9008): avc: denied { lock } for pid=31329 comm="syz.0.9523" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=132358 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 510.194689][T31378] lo speed is unknown, defaulting to 1000 [ 510.849265][T31406] netlink: 'syz.3.9538': attribute type 2 has an invalid length. [ 510.908740][T31413] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 510.921816][T31406] netlink: 'syz.3.9538': attribute type 2 has an invalid length. [ 511.087156][T31419] veth0_vlan: entered allmulticast mode [ 511.109997][T31419] veth0_vlan: left promiscuous mode [ 511.133666][T31419] veth0_vlan: entered promiscuous mode [ 511.224544][T31421] netlink: 84 bytes leftover after parsing attributes in process `syz.9.9544'. [ 511.234154][T31421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 511.316462][T31426] loop9: detected capacity change from 0 to 512 [ 511.319871][T31428] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9547'. [ 511.366440][T31426] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 511.397365][T31426] EXT4-fs error (device loop9): ext4_orphan_get:1417: comm syz.9.9546: bad orphan inode 131083 [ 511.441401][T31426] loop9: lost filesystem error report for type 5 error -117 [ 511.442065][T31426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.486018][ T1034] kernel read not supported for file bpf-prog (pid: 1034 comm: kworker/0:2) [ 511.578242][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.642401][T31442] loop2: detected capacity change from 0 to 7 [ 512.186912][T31459] infiniband syz1: set down [ 512.205859][T31459] infiniband syz1: added syz_tun [ 512.240587][T31459] RDS/IB: syz1: added [ 512.301563][T31459] smc: adding ib device syz1 with port count 1 [ 512.498548][T31459] smc: ib device syz1 port 1 has no pnetid [ 513.510095][T31493] lo speed is unknown, defaulting to 1000 [ 514.053525][T31506] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9574'. [ 514.975740][T31543] veth0_vlan: entered allmulticast mode [ 514.985138][T31543] veth0_vlan: left promiscuous mode [ 514.992940][T31543] veth0_vlan: entered promiscuous mode [ 515.078864][T31545] netlink: 'syz.3.9591': attribute type 1 has an invalid length. [ 515.111207][T31545] bond2: entered promiscuous mode [ 515.122621][T31545] bond2: entered allmulticast mode [ 515.128386][T31545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 515.176298][T31545] bridge5: entered promiscuous mode [ 515.204373][T31545] bridge5: entered allmulticast mode [ 515.225344][T31545] bond2: (slave bridge5): Enslaving as a backup interface with an up link [ 515.234400][ T6777] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 515.412239][ T6779] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 515.591220][T31551] loop3: detected capacity change from 0 to 512 [ 515.622512][T31551] EXT4-fs: Ignoring removed nobh option [ 515.635567][T31551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 515.701093][T31551] EXT4-fs (loop3): 1 truncate cleaned up [ 515.734297][T31551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.756529][T31562] loop9: detected capacity change from 0 to 512 [ 515.773891][T31562] EXT4-fs: Ignoring removed bh option [ 515.810066][T31562] EXT4-fs: inline encryption not supported [ 515.832171][T31562] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 515.901854][T31562] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 515.936851][T31562] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9596: bg 0: block 248: padding at end of block bitmap is not set [ 515.954961][T31562] loop9: lost filesystem error report for type 5 error -117 [ 515.955200][T31562] Quota error (device loop9): write_blk: dquota write failed [ 515.962947][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 515.962966][ C0] EXT4-fs (loop9): last error at time 2000001596: ext4_validate_block_bitmap:441 [ 515.989023][T31562] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 516.005552][T31562] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.9596: Failed to acquire dquot type 1 [ 516.017547][T31562] loop9: lost filesystem error report for type 5 error -117 [ 516.022790][T31562] EXT4-fs (loop9): 1 truncate cleaned up [ 516.063437][T31562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 516.091654][T31562] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0008-000000000000. [ 516.152756][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 516.439164][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.831308][T31608] lo speed is unknown, defaulting to 1000 [ 517.105872][T31611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9611'. [ 517.157276][T31611] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 517.259624][T31611] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 517.306661][T31613] macvlan2: entered promiscuous mode [ 517.316846][T31613] macvlan2: entered allmulticast mode [ 517.341736][T31613] bond3: (slave macvlan2): Error -98 calling set_mac_address [ 517.771485][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9615'. [ 517.780436][T31628] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9615'. [ 517.973759][T31649] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9626'. [ 518.112940][T31649] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 518.125202][T31649] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 518.162393][T31660] macvlan2: entered promiscuous mode [ 518.168048][T31660] macvlan2: entered allmulticast mode [ 518.177226][T31660] bond7: (slave macvlan2): Error -98 calling set_mac_address [ 518.307208][T31667] loop9: detected capacity change from 0 to 1024 [ 518.326731][T31667] EXT4-fs: Ignoring removed oldalloc option [ 518.334949][T31667] EXT4-fs: Ignoring removed bh option [ 518.373578][T31667] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 518.870286][T31681] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9636'. [ 518.949033][T31683] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9637'. [ 519.321812][T23011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.372406][T31692] netlink: 128 bytes leftover after parsing attributes in process `syz.9.9638'. [ 519.388446][T31692] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 519.424254][T31688] netlink: 'syz.0.9640': attribute type 4 has an invalid length. [ 519.517514][ T3400] IPVS: starting estimator thread 0... [ 519.619234][T31701] IPVS: using max 2544 ests per chain, 127200 per kthread [ 519.698991][T31708] syzkaller1: entered promiscuous mode [ 519.704794][T31708] syzkaller1: entered allmulticast mode [ 519.854068][T31713] lo speed is unknown, defaulting to 1000 [ 520.090675][T31719] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9646'. [ 520.116021][T31719] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 520.133471][T31719] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 520.169538][T31727] macvlan2: entered promiscuous mode [ 520.185067][T31727] macvlan2: entered allmulticast mode [ 520.200186][T31727] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 520.311917][T31741] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9649'. [ 520.402878][T31748] lo speed is unknown, defaulting to 1000 [ 520.438310][ T3368] IPVS: starting estimator thread 0... [ 520.527791][T31755] IPVS: using max 2880 ests per chain, 144000 per kthread [ 521.581245][T31838] loop9: detected capacity change from 0 to 8192 [ 521.787149][T31835] syz.9.9659 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 521.812316][T31864] loop3: detected capacity change from 0 to 128 [ 521.828235][T31866] netlink: 'syz.0.9662': attribute type 1 has an invalid length. [ 521.886962][T31835] CPU: 0 UID: 0 PID: 31835 Comm: syz.9.9659 Tainted: G W syzkaller #0 PREEMPT(full) [ 521.887055][T31835] Tainted: [W]=WARN [ 521.887061][T31835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.887072][T31835] Call Trace: [ 521.887078][T31835] [ 521.887086][T31835] __dump_stack+0x1d/0x30 [ 521.887110][T31835] dump_stack_lvl+0x95/0xd0 [ 521.887154][T31835] dump_stack+0x15/0x1b [ 521.887194][T31835] dump_header+0x80/0x240 [ 521.887214][T31835] oom_kill_process+0x295/0x350 [ 521.887234][T31835] out_of_memory+0x97d/0xb80 [ 521.887254][T31835] try_charge_memcg+0x62e/0xa10 [ 521.887341][T31835] obj_cgroup_charge_pages+0x23/0xc0 [ 521.887399][T31835] __memcg_kmem_charge_page+0x9e/0x170 [ 521.887423][T31835] __alloc_frozen_pages_noprof+0x18a/0x360 [ 521.887449][T31835] alloc_pages_mpol+0xb3/0x260 [ 521.887490][T31835] alloc_pages_noprof+0x8f/0x130 [ 521.887519][T31835] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 521.887563][T31835] __kvmalloc_node_noprof+0x3d4/0x650 [ 521.887589][T31835] ? ip_set_alloc+0x24/0x30 [ 521.887636][T31835] ? ip_set_alloc+0x24/0x30 [ 521.887694][T31835] ? __kmalloc_cache_noprof+0x18a/0x410 [ 521.887722][T31835] ip_set_alloc+0x24/0x30 [ 521.887820][T31835] hash_netiface_create+0x282/0x740 [ 521.887844][T31835] ? __pfx_hash_netiface_create+0x10/0x10 [ 521.887865][T31835] ip_set_create+0x3cf/0x970 [ 521.887895][T31835] ? __nla_parse+0x40/0x60 [ 521.887971][T31835] nfnetlink_rcv_msg+0x509/0x5d0 [ 521.888007][T31835] netlink_rcv_skb+0x123/0x220 [ 521.888035][T31835] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 521.888128][T31835] nfnetlink_rcv+0x167/0x1720 [ 521.888153][T31835] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 521.888184][T31835] ? inode_to_bdi+0x47/0xa0 [ 521.888203][T31835] ? inode_to_bdi+0x4e/0xa0 [ 521.888284][T31835] ? inode_to_bdi+0x47/0xa0 [ 521.888364][T31835] ? vma_wants_writenotify+0x148/0x1a0 [ 521.888396][T31835] ? vma_set_page_prot+0xc3/0xf0 [ 521.888423][T31835] ? __mmap_complete+0x1f2/0x220 [ 521.888445][T31835] ? mmap_region+0x1d1b/0x2050 [ 521.888463][T31835] ? _raw_spin_lock_bh+0x56/0xb0 [ 521.888494][T31835] ? _raw_spin_unlock_bh+0x18/0x20 [ 521.888518][T31835] ? selinux_nlmsg_lookup+0x99/0x890 [ 521.888620][T31835] ? __rcu_read_unlock+0x33/0x70 [ 521.888678][T31835] ? __netlink_lookup+0x276/0x2b0 [ 521.888712][T31835] netlink_unicast+0x5c0/0x690 [ 521.888740][T31835] netlink_sendmsg+0x5c8/0x6f0 [ 521.888795][T31835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.888888][T31835] ____sys_sendmsg+0x563/0x5b0 [ 521.888919][T31835] ___sys_sendmsg+0x195/0x1e0 [ 521.888958][T31835] __x64_sys_sendmsg+0xd4/0x160 [ 521.889004][T31835] x64_sys_call+0x194c/0x3020 [ 521.889037][T31835] do_syscall_64+0x12c/0x370 [ 521.889069][T31835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.889089][T31835] RIP: 0033:0x7f518935c799 [ 521.889219][T31835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.889235][T31835] RSP: 002b:00007f5187db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.889256][T31835] RAX: ffffffffffffffda RBX: 00007f51895d5fa0 RCX: 00007f518935c799 [ 521.889272][T31835] RDX: 0000000000000880 RSI: 0000200000000040 RDI: 0000000000000003 [ 521.889285][T31835] RBP: 00007f51893f2c99 R08: 0000000000000000 R09: 0000000000000000 [ 521.889299][T31835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.889313][T31835] R13: 00007f51895d6038 R14: 00007f51895d5fa0 R15: 00007ffd6c76cb58 [ 521.889370][T31835] [ 522.255795][T31874] syz.3.9663: attempt to access beyond end of device [ 522.255795][T31874] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 522.270825][T31835] memory: usage 307200kB, limit 307200kB, failcnt 294 [ 522.277593][T31835] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 522.287236][T31872] bond0: entered promiscuous mode [ 522.310145][T31872] bond0: entered allmulticast mode [ 522.327034][T31835] kmem: usage 232904kB, limit 9007199254740988kB, failcnt 0 [ 522.345603][T31874] syz.3.9663: attempt to access beyond end of device [ 522.345603][T31874] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 522.368695][T31872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.375832][T31835] Memory cgroup stats for /syz9: [ 522.376114][T31835] cache 75771904 [ 522.385447][T31835] rss 303104 [ 522.386844][T31874] syz.3.9663: attempt to access beyond end of device [ 522.386844][T31874] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 522.395024][T31835] shmem 75747328 [ 522.407666][T31835] mapped_file 12288 [ 522.411847][T31835] dirty 0 [ 522.414984][T31835] writeback 0 [ 522.419010][T31835] workingset_refault_anon 686 [ 522.423756][T31835] workingset_refault_file 15 [ 522.427351][T31866] bridge8: entered promiscuous mode [ 522.428756][T31835] swap 0 [ 522.438426][T31835] swapcached 66174976 [ 522.442635][T31835] pgpgin 248025 [ 522.446537][T31835] pgpgout 229451 [ 522.447813][T31874] syz.3.9663: attempt to access beyond end of device [ 522.447813][T31874] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 522.450722][T31835] pgfault 236334 [ 522.468202][T31835] pgmajfault 249 [ 522.471848][T31835] inactive_anon 8417280 [ 522.476109][T31835] active_anon 67637248 [ 522.481886][T31835] inactive_file 0 [ 522.486215][T31835] active_file 24576 [ 522.500648][T31835] unevictable 0 [ 522.504533][T31835] hierarchical_memory_limit 314572800 [ 522.510968][T31835] hierarchical_memsw_limit 9223372036854771712 [ 522.516178][ T6765] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 522.517780][T31835] total_cache 75771904 [ 522.535970][T31866] bridge8: entered allmulticast mode [ 522.542838][T31879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9665'. [ 522.546425][T31835] total_rss 303104 [ 522.556380][T31874] syz.3.9663: attempt to access beyond end of device [ 522.556380][T31874] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 522.556466][T31835] total_shmem 75747328 [ 522.575705][T31835] total_mapped_file 12288 [ 522.580140][T31835] total_dirty 0 [ 522.583119][T31866] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 522.583700][T31835] total_writeback 0 [ 522.583709][T31835] total_workingset_refault_anon 686 [ 522.603026][T31835] total_workingset_refault_file 15 [ 522.626396][T31874] syz.3.9663: attempt to access beyond end of device [ 522.626396][T31874] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 522.651541][T31874] syz.3.9663: attempt to access beyond end of device [ 522.651541][T31874] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 522.669251][ T36] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 522.678044][T31874] syz.3.9663: attempt to access beyond end of device [ 522.678044][T31874] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 522.694195][T31835] total_swap 0 [ 522.707833][T31835] total_swapcached 66174976 [ 522.712636][T31835] total_pgpgin 248025 [ 522.716757][T31835] total_pgpgout 229451 [ 522.728410][T31835] total_pgfault 236334 [ 522.732593][T31835] total_pgmajfault 249 [ 522.736752][T31835] total_inactive_anon 8417280 [ 522.743836][T31874] syz.3.9663: attempt to access beyond end of device [ 522.743836][T31874] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 522.769175][T31835] total_active_anon 67637248 [ 522.773781][T31835] total_inactive_file 0 [ 522.778252][T31874] syz.3.9663: attempt to access beyond end of device [ 522.778252][T31874] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 522.797845][T31835] total_active_file 24576 [ 522.805343][T31835] total_unevictable 0 [ 522.812008][T31835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9659,pid=31833,uid=0 [ 522.868586][T31835] Memory cgroup out of memory: Killed process 31835 (syz.9.9659) total-vm:96344kB, anon-rss:1420kB, file-rss:22524kB, shmem-rss:12kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 524.283728][T31949] syz.7.9685 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 524.307856][T31949] CPU: 0 UID: 0 PID: 31949 Comm: syz.7.9685 Tainted: G W syzkaller #0 PREEMPT(full) [ 524.307887][T31949] Tainted: [W]=WARN [ 524.307895][T31949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 524.307909][T31949] Call Trace: [ 524.307915][T31949] [ 524.307922][T31949] __dump_stack+0x1d/0x30 [ 524.307946][T31949] dump_stack_lvl+0x95/0xd0 [ 524.308030][T31949] dump_stack+0x15/0x1b [ 524.308052][T31949] dump_header+0x80/0x240 [ 524.308074][T31949] oom_kill_process+0x295/0x350 [ 524.308097][T31949] out_of_memory+0x97d/0xb80 [ 524.308121][T31949] try_charge_memcg+0x62e/0xa10 [ 524.308200][T31949] __mem_cgroup_charge+0x65/0x150 [ 524.308231][T31949] shmem_get_folio_gfp+0x47b/0xd60 [ 524.308303][T31949] shmem_fallocate+0x628/0x920 [ 524.308348][T31949] vfs_fallocate+0x3b6/0x450 [ 524.308371][T31949] __x64_sys_fallocate+0x7a/0xd0 [ 524.308393][T31949] x64_sys_call+0x298e/0x3020 [ 524.308421][T31949] do_syscall_64+0x12c/0x370 [ 524.308501][T31949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.308524][T31949] RIP: 0033:0x7f53444ac799 [ 524.308542][T31949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.308560][T31949] RSP: 002b:00007f5342ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 524.308635][T31949] RAX: ffffffffffffffda RBX: 00007f5344726090 RCX: 00007f53444ac799 [ 524.308651][T31949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 524.308665][T31949] RBP: 00007f5344542c99 R08: 0000000000000000 R09: 0000000000000000 [ 524.308679][T31949] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 524.308693][T31949] R13: 00007f5344726128 R14: 00007f5344726090 R15: 00007ffea5273828 [ 524.308796][T31949] [ 524.308802][T31949] memory: usage 307200kB, limit 307200kB, failcnt 1067 [ 524.526164][T31949] memory+swap: usage 368696kB, limit 9007199254740988kB, failcnt 0 [ 524.654482][T31949] kmem: usage 264916kB, limit 9007199254740988kB, failcnt 0 [ 524.702838][T31949] Memory cgroup stats for /syz7: [ 524.703140][T31949] cache 30617600 [ 524.720694][T31949] rss 491520 [ 524.867815][T31949] shmem 30093312 [ 524.888416][T31949] mapped_file 77824 [ 524.892531][T31949] dirty 0 [ 524.895724][T31949] writeback 0 [ 525.000664][T31949] workingset_refault_anon 3898 [ 525.039609][T31949] workingset_refault_file 2417 [ 525.099932][T31949] swap 63131648 [ 525.103474][T31949] swapcached 89436160 [ 525.117969][T31949] pgpgin 634593 [ 525.137761][T31949] pgpgout 626773 [ 525.141852][T31949] pgfault 464963 [ 525.166016][T31949] pgmajfault 514 [ 525.169983][T31949] inactive_anon 29548544 [ 525.174312][T31949] active_anon 1957888 [ 525.218527][T31949] inactive_file 0 [ 525.232780][T31949] active_file 524288 [ 525.247860][T31949] unevictable 0 [ 525.251511][T31949] hierarchical_memory_limit 314572800 [ 525.270063][T31949] hierarchical_memsw_limit 9223372036854771712 [ 525.276331][T31949] total_cache 30617600 [ 525.351329][T31949] total_rss 491520 [ 525.355196][T31949] total_shmem 30093312 [ 525.415568][T31949] total_mapped_file 77824 [ 525.430699][T31949] total_dirty 0 [ 525.434337][T31949] total_writeback 0 [ 525.458647][T31949] total_workingset_refault_anon 3898 [ 525.464308][T31949] total_workingset_refault_file 2417 [ 525.518408][T31949] total_swap 63131648 [ 525.540135][ T28] audit: type=1400 audit(2000001605.981:9009): avc: denied { setopt } for pid=31985 comm="syz.6.9709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 525.584204][T31949] total_swapcached 89436160 [ 525.614457][T31949] total_pgpgin 634593 [ 525.618833][T31949] total_pgpgout 626773 [ 525.623244][T31949] total_pgfault 464963 [ 525.628988][T31949] total_pgmajfault 514 [ 525.633069][T31949] total_inactive_anon 29548544 [ 525.664926][T31949] total_active_anon 1957888 [ 525.672796][T31949] total_inactive_file 0 [ 525.677176][T31949] total_active_file 524288 [ 525.682031][T31949] total_unevictable 0 [ 525.686216][T31949] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.5624,pid=20655,uid=0 [ 525.706128][T31949] Memory cgroup out of memory: Killed process 20655 (syz.7.5624) total-vm:96068kB, anon-rss:1232kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 525.991975][T32005] loop9: detected capacity change from 0 to 512 [ 526.006415][T32005] EXT4-fs: inline encryption not supported [ 526.112494][T32005] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 526.260645][T32010] netlink: 'syz.0.9719': attribute type 2 has an invalid length. [ 526.285583][T32010] netlink: 199792 bytes leftover after parsing attributes in process `syz.0.9719'. [ 526.525920][T32024] loop3: detected capacity change from 0 to 1024 [ 526.554014][T32024] EXT4-fs: Ignoring removed oldalloc option [ 526.563497][T32024] EXT4-fs: Ignoring removed bh option [ 526.639158][T32024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.067893][T32029] ================================================================== [ 527.076203][T32029] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 527.084301][T32029] [ 527.086754][T32029] write to 0xffff88811bb2fb6c of 4 bytes by task 32024 on cpu 1: [ 527.094635][T32029] xas_set_mark+0x12b/0x140 [ 527.099347][T32029] __folio_start_writeback+0x17b/0x370 [ 527.104989][T32029] ext4_bio_write_folio+0x5ad/0x9f0 [ 527.110475][T32029] mpage_process_page_bufs+0x4a1/0x620 [ 527.116464][T32029] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 527.122369][T32029] ext4_do_writepages+0xa07/0x2840 [ 527.127680][T32029] ext4_writepages+0x18f/0x320 [ 527.132802][T32029] do_writepages+0x1c6/0x310 [ 527.137489][T32029] file_write_and_wait_range+0x178/0x2f0 [ 527.143601][T32029] generic_buffers_fsync_noflush+0x45/0x130 [ 527.149678][T32029] ext4_sync_file+0x1aa/0x6b0 [ 527.154889][T32029] vfs_fsync_range+0xc5/0xe0 [ 527.159754][T32029] ext4_buffered_write_iter+0x34f/0x3c0 [ 527.165305][T32029] ext4_file_write_iter+0x380/0xfa0 [ 527.170593][T32029] iter_file_splice_write+0x6c4/0xa80 [ 527.176086][T32029] direct_splice_actor+0x156/0x2a0 [ 527.181296][T32029] splice_direct_to_actor+0x311/0x670 [ 527.187075][T32029] do_splice_direct+0x119/0x1a0 [ 527.192131][T32029] do_sendfile+0x382/0x650 [ 527.196850][T32029] __x64_sys_sendfile64+0x105/0x150 [ 527.202499][T32029] x64_sys_call+0x2dc4/0x3020 [ 527.208152][T32029] do_syscall_64+0x12c/0x370 [ 527.212759][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.219353][T32029] [ 527.221679][T32029] read to 0xffff88811bb2fb6c of 4 bytes by task 32029 on cpu 0: [ 527.230174][T32029] __writeback_single_inode+0x26b/0x860 [ 527.235912][T32029] writeback_single_inode+0x16d/0x3f0 [ 527.241596][T32029] sync_inode_metadata+0x6e/0xa0 [ 527.246554][T32029] generic_buffers_fsync_noflush+0xee/0x130 [ 527.252634][T32029] ext4_sync_file+0x1aa/0x6b0 [ 527.258050][T32029] vfs_fsync_range+0xc5/0xe0 [ 527.263323][T32029] ext4_buffered_write_iter+0x34f/0x3c0 [ 527.269618][T32029] ext4_file_write_iter+0x380/0xfa0 [ 527.275029][T32029] iter_file_splice_write+0x6c4/0xa80 [ 527.281551][T32029] direct_splice_actor+0x156/0x2a0 [ 527.287208][T32029] splice_direct_to_actor+0x311/0x670 [ 527.293230][T32029] do_splice_direct+0x119/0x1a0 [ 527.298962][T32029] do_sendfile+0x382/0x650 [ 527.303562][T32029] __x64_sys_sendfile64+0x105/0x150 [ 527.308942][T32029] x64_sys_call+0x2dc4/0x3020 [ 527.313965][T32029] do_syscall_64+0x12c/0x370 [ 527.319275][T32029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.325360][T32029] [ 527.327839][T32029] value changed: 0x0a000021 -> 0x04000021 [ 527.333638][T32029] [ 527.335951][T32029] Reported by Kernel Concurrency Sanitizer on: [ 527.342272][T32029] CPU: 0 UID: 0 PID: 32029 Comm: syz.3.9712 Tainted: G W syzkaller #0 PREEMPT(full) [ 527.353721][T32029] Tainted: [W]=WARN [ 527.357706][T32029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.368122][T32029] ================================================================== [ 527.731666][T32024] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.9712: Allocating blocks 1-17 which overlap fs metadata [ 527.760864][T24444] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.915766][T32012] Set syz1 is full, maxelem 65536 reached