last executing test programs: 1m59.168288505s ago: executing program 0 (id=758): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x0, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m59.013152014s ago: executing program 0 (id=759): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$eJzs3V9v29YZx/EfXbt2NSAbtiEIAic9TTbAGVyVkhsHWq846khmK5ECSbfxVRE0cmFE7op4AxbfbLnJNmB7Eb3d/W6H3e92b6NYr4bdaSAp2XL0r0mcyAm+HyE51OHDcx7Kgh7Qlo4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADk+HXXrThqBeHuXTOdX4+j9ni3lqViY+DWmWbGvJKT/dPamq4UXVd+err7cvbfDa0X99a1ljVrOv7B5R999JPlpeHxMxJ+JY4eHT+41+t1Hy46kQVp2jBIoqDtNa0JksjU3pG000hMI2jZZC9Jbdv4sfXSKDYb/i1TqdW2jC3vRbths+617LDzzvtV1902H5c71ouTKPzg43Li7wStVhA285hsdxZzJ3sifhKkJrVe25j9g153a16SWVDl+wRV5wVV3Wq1UqlWK9u3a7fvuO7yWId7ypHruhqLWPyTFot1zq/gwPNbGtR/tRQsDzvNhJuvumJFak/cO1b/f/6BnTnvaP3Pq3xf61dOd19VXv+vF/euT6v/U3KZcVuZdn7PdHt7OMaRHulYD3RPPfXU1cPTmM1zmemC35qyChUoUaRAbXl5jxn0GNW0rW25+lw7aiiRUUOBWrJKtKdEqWz+jPIVa1WeUkWKZbQhX7dkVFF/taYtGVmVtadIuwrVVF1ePsq+DvLHfWtGjlnQahZUmRH02fCZV50R9Ez1Pzd6yL+o/6D+4yLpD+v/095aRDYAAAAAAOBlcPLfvmfX/yu6Jq04agQt6y46LQAAAAAAcI7yv/yvZ03+zrhrcrj+BwAAAADgTePkn7FzJJX0brE1/EzV4JcA/R8uOkcAAAAAAPBi8r//X8+aUrb1rpynr/8BAAAAAMDr7k/T1tj/p9QfLAu46vzjP4rjFedx5+7PnEMv6/MOBwsEjq0TmDauOpcGg+TN9vLgnm/XncHqlyeLYH47aPbnrfXvnEMC+oveK2Leu1+094d7illKjaBly37U+qgiz7u0lNq76W+/Ovid8tP/c9i+5Hy3f9Drlr/4de9+nsvjbJTHh4NHamwdxRm5/EbXiphrk894Jf8gxmDekqNsXnf0/JeKw5emzik9PecT3ShibpSKtnT2/NeyOSvlaWdfZLEq6YXO/IluFjE3N24WzYQsqnOy6FZHH/+5j8VzZrE1K4vVg1536wWzAIBF2Z9dhXJvna27z/Eq92qq+xNtFDEbV/MX1uWrE17R3Xl1xZ1Q19dOpl8eZtH//ZQs/jb2HUjTamw2719P5q3k836THfDN1KqatKqO1r7+b79/+LUuHz06fv/g8N6X3S+7X1WrW9vuh657u6qV/DQGDbUHADDB/O/YmRvhfDjnqvrHJ28pKOsL6X/9/n1t5p82yN9xMHHUUn7Md/nbEDbnXLWWTsavaHPOVd1pbPUZYrdewU8CAIBX58acOjy9/jvDb/FzNudcd5dG3lK4OXp1/LbGro5HazkAAHg5bPytU0r/6MRx0Pm8UqtVvHTHmjjyPzFxUG9aE4Spjf0dL2xa04mjNPKjVrbxaVC3iUl2O50oTk0jik0nSoK7+Te/m8FXvye27YVp4CedlvUSa/woTD0/NfUg8U1n91etINmxcX5w0rF+0Ah8Lw2i0CTRbuzbsjGJtSOBQd2GadAIss3QdOKg7cV75tOotdu2pm4TPw46aVQMOJwrCBtR3M6HLS/6wQYA4II4enT84F6v1314pCWp1+s6yyc957Wx6HMEAABnUaUBAAAAAAAAAAAAAAAAAAAAALj4zu1Dfm/UxurLGPkzvdg4v/jlpF3vSJp9+L9L0mhPv/99J126CD+LMxvDRadnxPx9wi5Jf1h88q/XxqRXi7H1qAG8xv4fAAD//5RrUOQ=") r0 = socket$inet6(0xa, 0x80802, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}], 0x10) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x820}, 0x24004881) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendto$packet(r2, 0x0, 0x0, 0x4080, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r1, 0x8982, &(0x7f0000000180)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x2}, 0x1, 0x0, 0x0, 0x5, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 1m58.608930327s ago: executing program 0 (id=765): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m58.523724693s ago: executing program 0 (id=768): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @void}, 0x10) pipe2$watch_queue(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r0, r1}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@orlov}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@grpjquota}]}, 0x1, 0x5b8, &(0x7f0000000580)="$eJzs3U9oG9kZAPBvRlbsJE6dQgttySG0hRRC5D9J2rQn51oaCORQ6KU1smKCZSvYchsbQ517KM2htCWX9NYeemzpoYfSyx73upf9c14IG7MLcQ67WiSNHMeRsrJjSRvr94Ox3psZzfc9jd7zzDCDAhha5+t/0ojvRsTNJGJiz7KRyBaeb663s71ZfL69WUyiVrv1SRJJRDzb3iy21k+y19MRsRUR34mI/+cjLqa7mzzRfBnNquXSSlaarC7dnVxd37h0Z2luobRQWr78k59evXbl6vTM9N50n9f21vIHa+uDDx7+4cG7P3/88B//PLdV/NNcErMxni3b246j1PxM8jG7b/6VXgQboGTQCXAouayf17vSt2Miclmvb6e2d3AY7Ut6QA/VRiNqu/YUgSGQvEGnbw0iwNuodRxQP/9tTf08/nhyvXkCUo+7s71Z/H204o80r03EWOPc5NSnyUtnJvXzzbP9TJRjaet+REyNjLz6/U+y79/hTR1FgvTU/643d9Sr+z/dHX+izfgz3rp2+oZa499ONv7ttImf6zD+3ewyxue/+uivHePfH43vtY2f7MZP2sRPI+I3XcZ/9Mv/XOu0rPa3iAvRPn5L8vrrw5O375RLU82/bWP898K5n3Vuf8SpDvGb12zHGonsbf+JLKe000bHXq7++51/fX/rNfF/9IPX7/92n//JiPhjp/j7fPPZ33/RadmT+8nT+lHAQfd/Evl43GX8H8+efz8rumoIAAAAAAAAAABHKG3cy5akhd1ymhYKzWd4vxWn0nJltXrxdmVteb55z9vZyKetO60mmvWkXp/O7sdt1Wf21S/nsoC5k416oVgpzw+47QAAAAAAAAAAAAAAAAAAAPB1cXrf8/+f5RrP/89GzJwZdG5AH3T+yW/guNP/YXi93P+TgeUB9J///zC0avo/DC/9H4aX/g/DS/+H4dW2/5/sfx5A/73S/8cGkwfQf47/AQAAAAAAAAAAAAAAAAAAAAAAAACgJ27euFGfas+3N4v1+vzI+tpi5beX5kuri4WltWKhWFm5W1ioVBbKpUKxsvRV20sqlbtTsbx2b7JaWq1Orq5v/Hqpsrbc+k3RUr7nLQIAAAAAAAAAAAAAAAAAAIC3z3hjStJCRL5ZT9NCIeJMRJxNIrl9p1yaiohvRMR7ufxovT496KQBAAAAAAAAAAAAAAAAAADgmFld31icK5dLK70rjGShunvXh9We5jNykJUjYuto06hv8cDvymcfYGPOWM/31/Eu5Lr8Hg59YYCDEgAAAAAAAAAAAAAAAAAADKkXD/12+44vepsQAAAAAAAAAAAAAAAAAAAADKX04yQi6tOFiR+O7196ItnJNV4j4nePbv353ly1ujJdn/90d371L9n8mUHkD3Sr1U/TiKj3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCF1fWNxblyubRyyMJoF+sMuo0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh/FlAAAA//9qVsUI") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x3c033, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") io_submit(0x0, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000f40)='./file0\x00', 0x0, 0x10}, 0x18) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25ce, 0x0, 0x0, 0x0, 0x3ff}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x9, 0x8, 0x80, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0xff, 0x2e, &(0x7f00000002c0)=""/46, 0x40f00, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xc, 0x7, 0x1000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={@fallback=r2, 0x13, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000f80), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="2100000018000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="1a6ce8e7eb17cce39155c5989f20036d17e67187df69355f4d094ffcbde0aad5c5e11f28", @ANYRES64=r5], 0x20) syz_clone(0x1820100, &(0x7f00000010c0)="983b169ea5d26070b5c32555171d51da77306d6d0ca2e46e313214ad8a3a2906ae2b647032d84a260aa40f26e36b873d86a509edfb4c038b1a95bccdba5a8084e866d2c94db654f5ae92a9764c0c01f8177a6c84010e10d776f8cc4dbd723c59244d1b735307f1809c63dd1e110c0e7c7833906f89645225e3e7c356ae5a0d5306f4acb63c594319bac3f1bed88e4178858a901f93f79cba0e3869135887a3bd26a35a92ceeac83c809444d8bb3fd2959b3d36bf7c82b96fef45476053e54907cc081853ac15f1f836497eb39e1cfd36faf3ee7e8bd9e2bea4f5b076f1a7d147353089e26283f09635090c6c54a2bf", 0xef, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240)="1b831ef8f45d216a74772d6f502b4b3ff03358ec7a527454f5531a52c8cc91ef6efdea803f56ecd14022dedff88f78d0b8725142076299075c44ac2733c17b21e598af02c003df17fc24339983edd631f15d323e060220aadf3cd6322a9a6433103e0b7eabfa236d3387b7363cd246b79bc5a493aabd5f6e2ef6d645795a0b32f9cd4fe50c40bba29b1bd49a0c18fe731b427d72d7b28a887d64b774b857c8e34f7bb50925bb1e54b5443fc0488b3d2d911e60145b43cb35994ad8fbe9f81dbf3c85b52fdbcf10689b98f19613d1715bf851b3b8f87a0a59671e4ac663d0a8e2bbe00b458e93e417cd0b04e52212c0d110e09e7b5dc4f9") syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000002680)='.\x00', 0xa0, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) ioctl$int_out(0xffffffffffffffff, 0x5462, &(0x7f0000000140)) 1m58.263105158s ago: executing program 0 (id=774): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000bc0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x42000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xeffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "2a8e"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'macsec0\x00', 0x800}) socket(0x400000000010, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close_range(r3, 0xffffffffffffffff, 0x0) 1m56.872593419s ago: executing program 0 (id=790): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x90, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x480c0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000003000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000080010080200004"], 0x21c}}, 0x20008084) 1m56.838869381s ago: executing program 32 (id=790): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x90, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFCTH_TUPLE={0x7c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3d}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x480c0) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000003000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000080010080200004"], 0x21c}}, 0x20008084) 1m32.337773658s ago: executing program 1 (id=1174): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1m32.233949225s ago: executing program 1 (id=1177): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x9c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_EMATCHES={0x68, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0xaf}, {0x7fffffff, 0x200, 0x0, 0x0, 0x1, 0x2}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xa, 0x1, 0x6}, {0xfff, 0x101, 0xac0b, 0x6, 0x3, 0x1}}}, @TCF_EM_META={0x24, 0x3, 0x0, 0x0, {{0x7ff, 0x4, 0x7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xf, 0xa}, {0x3ff, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xb, 0x2}, {0x8, 0xb7}}}]}}]}]}]}}]}, 0x9c}}, 0x0) 1m32.13142129s ago: executing program 1 (id=1180): openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2102, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x48008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x83a, 0x800000, 0x5, 0x5, 0x2, 0x3a87, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34, 0xe7040000}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0) 1m32.119337521s ago: executing program 1 (id=1182): unshare(0x20000680) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@nombcache}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@quota}]}, 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xa000) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xa000) fallocate(r0, 0x0, 0x0, 0x8800000) syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r1, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) open(&(0x7f0000000180)='./file1\x00', 0x531542, 0x21) (async) r2 = open(&(0x7f0000000180)='./file1\x00', 0x531542, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) 1m31.78160191s ago: executing program 1 (id=1186): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8cffffffffffffff, 0x1) 1m31.565863463s ago: executing program 1 (id=1190): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2f8d, &(0x7f0000010400)={0x0, 0x86e5, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000080)) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSLCKTRMIOS(r2, 0x5432, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m31.565593383s ago: executing program 33 (id=1190): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2f8d, &(0x7f0000010400)={0x0, 0x86e5, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000080)) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSLCKTRMIOS(r2, 0x5432, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m25.678014416s ago: executing program 4 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x5, [@fwd={0x4}, @union={0x8, 0x2, 0x0, 0x5, 0x0, 0x10000, [{0x6, 0x4, 0x6}, {0xe, 0x0, 0x8}]}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0x6}]}, {0x0, [0x2e, 0x0, 0x2e]}}, &(0x7f0000000680)=""/209, 0x5d, 0xd1, 0x0, 0xfffffe00}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x100, '\x00', 0x0, r3, 0x1, 0x2, 0x4}, 0x50) socketpair(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f0000000140)="a30bfa0ca251644c1fa19a05a019bd3e42d6023ae086650a69161c2558948f93e537864b272966381d2ff958413a11aff75d0bcd3b3094fc9d7ee6aec3f6ccb7d4e74ffa13eca68daf0991150d71bbd3cc1079d9ea62b546eacad50900d19e30fbb4cf74b792ea768a1a71355d35a5c573078c8b1f0d3e453e10d84a561d32f315e2a6e0d1a3e5", &(0x7f0000000300)=""/254, &(0x7f0000000400)="cde631bffd8bd0d414fcc11353e44cbfb126f5ed7e1dec48995abd4f1d731eefd5d8611b5b334f48f4bafbd6e9ec9f7989d3a186614b9d5ffa816a805b13b90b2098fe1ffa7ccc4d5c4a5becef66f6f68bea34802c8a549830ad015af2523d10602b08e631ba1d0f045ed107677941a9b42cf0db781b6594ee1d5bd8b09fbc4e1883d94297153d7ea0816554c8d9d449adf943a194a245b486bf09dd35a62273039049032c7861d60f28b37a41df614875b9b0e8522ef5e5a178", &(0x7f00000004c0)="423149a7c7ef2bac7167d3b91a6d5ee82b", 0x7fff, r2, 0x4}, 0x38) getpeername$packet(r4, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r2, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r5}, 0x20) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000880)={0x0, 0x8000, 0x6}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000140), &(0x7f0000000000)=@tcp6=r4}, 0x20) 1m25.579197262s ago: executing program 4 (id=1291): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x9, &(0x7f00000001c0)={[{@barrier}, {@jqfmt_vfsv0}, {@nojournal_checksum}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x496, &(0x7f00000004c0)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010300000000000000002b0000000c000600"], 0x20}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffdffff4}], 0x1c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @empty, 0xffdffff4}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e24, 0x80001804, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="a5", 0x1}], 0x1}, 0x2408c8c0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x45, 0x7, 0xb, 0xff, 0xb, 0xfc, 0x1, 0x4, 0x7, 0x7, 0x6f, 0x7, 0x4, 0x7}, 0xe) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x6839f2f8}, {{0x0, 0x0, 0x0}, 0x9b47}], 0x2, 0x10032, 0x0) (async) recvmmsg(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x6839f2f8}, {{0x0, 0x0, 0x0}, 0x9b47}], 0x2, 0x10032, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x2}}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) 1m25.255485211s ago: executing program 4 (id=1295): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed000e, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@orlov}, {@sysvgroups}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x51}}, {@nogrpid}]}, 0xfa, 0x489, &(0x7f0000000840)="$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") r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) setreuid(0xee01, 0xee01) fcntl$setlease(r1, 0x400, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x64000004}, 0x2400c801) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x4810) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fspick(r0, &(0x7f0000000180)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000280)='jqfmt=vfsold', 0x0, r0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000201000010025bd7000f9db0ca16b6ec972", @ANYRES32=0x0, @ANYBLOB="158804000707060008001b000000000008000d0000000100"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x28, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe40}, 0x48) 1m24.997726576s ago: executing program 4 (id=1297): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) r0 = socket(0xa, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x3, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f00000020c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107c42, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x5c) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x54) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x80000001, 0x5) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002200)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001e00)=0xe8) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001880)=0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000021c0), r11) setuid(r10) statx(r3, &(0x7f0000001f00)='./file2\x00', 0x6000, 0x2, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000002080)={&(0x7f0000000680)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000000700)="bc0937d94de233a905aafa5afcc87e79486d930312ca7993f424c87378911491542490e2fb870b7a7678dd274f14e5fc42e7f61425cda038af7129d90e4bd246d4a91ea26048b8a3a80275f6697c235d3e575970dd52cea4b1ee561aa39225b9802cfb5d407805f9b58e1f5b9315635f3a79932204911e583f15320cd846a49549dffc3d7e25a7d2e6d41f87775a48d95b26ba590a602c7232f8445cdbe5141cbf08e4c5e3b59823681626b9d8b8541599ec2d8123321390d6ca3f750656a3ef0bc934d9148ea8ffc3c4ffddf1deb247bde84ec3759f29912b45b095bb3bb56893440e55d18e75c40465fcc2e3f0add065", 0xf1}, {&(0x7f0000000800)="e0b42c544f0962cd0eac6b4c056e81a56c1d122207b01d2f2e9484ceb6af3572eefc662f18bb24d079b1553577efed363a7ab67a152525374ac85067d53d9ecebd3bb5ae3ea03b84a1ddee12cfd5102f688d7548967c0ba958fe0307efc60f479057b16477100bf2bfb4f77d91b999fc41417c20030362d2871155101272e4bdbdb9d1c4b5ce62da0ad48418cb5d6ef384c9be7c110439a2c6ee05bbf5188ff0011001c5e5cf0cbe71457231e3b4ca5cdd7df7a7cf87f9edef4ba5714be90319a16b3dd3fadc1d60e092762c431db15b151421f69e6f82de7eed1f6c719b244b3e7d5b066857fc0c123e7bb725ec6660771a19a4dd17852fed34cc90df4abf6d61f8509eac1c9feab3829d410e606d86977568fea804b261bf3384c05e3573115ce83ac3c443f94c4df6842d504466e3bc0ca8f006635898402af1953ec299d8eafabc0678d2effce37ec120175f5e2bc6ff543b1a0ec50e782863bf2e5e9d13b089e0e0ccf26c017a0defbf10269f5c29c401b60e716b07bb3e2d40ea24bdabc6bad47045cc76db639ca3aa35a254df45c933473c92f6b2eeefd0c600c17294c024026eee3bdd48ee9934da6413bbf038bab3aac75ac5763a94a2b0883d25a8aeab21a89526a19c801505259e46474491a765f3611a37b07643f1b1a6d640b6ec346c600bd17b5a242282684b6ed8a371e54f41da87de74675b18d7dde04670c0a38d4c9c2274601501518b98c410a223fa1cb8b4d3d578a30897362d3be290b8aa063fc9e77ab8b762238f8a920e889f04e7fe87c420eb2b003d42159f07db83e69ed335b6f913d3f59285da4d176a6660bec16b7595d3ed914e27aff5613edff353a3457ddcd3bae475692db0040931c2abe890ea229b95fedca66f46998e598ff31a723242e4b91074a430d85bf7267c34ea966b03c1a3b40378e8d371121bfb7772e77817978fdd02a09b10f1da21366c98ebfae43546f1a024a0745b4b47e91e2abad34c852a32113469213966ea2bcc25abf8f829add5261797820404fd626b1ac1c4f54285fa5cbd0e15c9c480abb17e64447342492ade7781db5edab373aa3410e7454fb9d98cfc8ba83c23edb84b5dd3950f64acbb739d749cdeb20e60cd1694d233b60a1a35da54df97f7a4d9a0a4ae4bc6f8a5d7ce942bafdd4c05fb0b4f5584d03329a6b8632f7cff7ff69c8a7bebbae6e648a08571cf99ba7963b7fe6ade0b6049558ad25c881c7bf9b447f2fca8f8df9b073fa5d39ea1c160f26b85702b89366f911a2b2cead629569a027ffa7dcaca830eaba6b267c9b045f2e282adbd8667e73f65d41ad846fe37116f369280ac8790bff39c31ff3924a1640216388a58fb5e4236b1b14b40d0840f48a02c9c26da07c35773fc5827cd0021bf9c11f122d35cc550805bbaec624acd31aaa8adb876e33156c15c7f80a98ae9821a9fb9428c61db7e04438b3dcc9695661d718fd65d80e45c891539b051ebcf0f60e18374328f7ab1e012e3bce06f5973532e31cc83a9f9fccbdbb09596832b113aac752aa6eb1b283f1a0304524f31553ce5d734f8378e417d964376ecbf2284e9279d601bfce89a2b1e36df3cdd747f6fb23db3830351ecc100986aac34a4ba86bbe422b097fd2acf3065ad296165da690d344c746270cf5d41cbf2b2ac3c39d5b5b177de9e79a03080007f3417a5b0a4ed22525a54788d8d83103984dd2b64137c105c804274355dc9e10443556410eaa723adf3915d1fdd20f7e5cf29130362125fdf0a941837fca3d5b41ef37d56a9337df5e37710c8c9682f2bfe7d4545a39120c44f06c134f65c6d705bcbc0551b059a9d77d3537ba2a4b7e6891380b491d844db5b87b3f690f33773173b179b340cd97c9ee065a1c87894e8c1ded2c48d15f3260e08a355badaf07a5a162edd8f9ff0e96cef15fa9fc1f661de06c2dc894dcd1d84b1101b3d093e8099da776de1bcbdacc4c7b75c37a0ba14914b3e4196048470698e1e86c716e02f61510e455e3507aa1b566eccbffadf43fa2e5c7029bf9104809e0828328cbeca71a849c7b4c16f975e263eff12ff1abbf997cea31b82f8839cafdf4aea159f8c3238251d60bb74eff787811a08fc6aa36535c1e98016315a1c84ab894bc8f6203b6a2c93fde0dd2a62193fbeea646d86f911d6ff0366bae5dc23dde5e3a2ae2e630fed7bd7243ea7540ff95d65f6969212c0cdd78ea65d95fcba09042deee5876b985b20e12eff1fe31fdf27f2e91a047338fab4ad262fadd86331e5fc8365f7328e0f7c6c3bcd690a405e64b2395b9a054399487d49e27d4b476d193d2bfec2f8746de04e18232a9d680e9a3076ba906c68e9d84e6431ef3c3f79976e1a5c9a84eabe9270c7d1081a638aea6278ab76b38d6349f1d45fae95377eaee6c2ff32922c83995501f38a3c0edf86be7502ab8a942d32ee51228a9447c06a1d49df57996e173e5659367c86ed9ca14b82804cc0d6f3acd945dd2586f4b2504a6daa9304ca0f2af7b563a6bc8d5309cb16baa9cd78a30148ae58bbc9dcba6f3febe4a19e9ec27bed26b9143954b06b68f3dc330c8f7401f8e780bfe9c944572647fad9e776d0b87eb253502759d9e72424d3b4b17e9cbe33400d09b3fb57dccac89d39f7f08ea4e72a1b1325e92cfb4d2cae637577d4b30e8dff1d6fcb7555c120aab765c699b44e17e659519ec310bef41287d57928feb993f47eb2515e9f8d67e9d1cb83041ee528e0cfd0a1e0421003031d7957af4ca763ede010beb945c453f2068de26af3e8e1bdcb9daa311e6fdd24de3955080de6231e783c4d291c8ffdf69c8501010eefabfee7524ba3f80ad75d70a2d7afad43dbcaa00aa57463b72bb2e19ece1b52e1e0eff97cf5c1714b29b1a4c2613a39e989bae344c4b5869589e02c52163f57c3b846b6e207dbcc6f59a6de396d42ddfee6aa55c4199f9a81087f0e6c31acd5bc6cd778476be34d5391ea5f0ea96051cfb00c6fd5d2e225af1b450f1fdd129a9e106b7023f3b94240384e964acef0920aa10ff83602cf0f9dfb5a127362f3abd84d35542d6928db4c57b2bd77329d285aacace2145ba2f0ffa37c7d203199092db8b2d89e91785188a86c5d0ac637b14414d5b9330186ddc575fa35ac88d31b8775cdf7216f236c7e20edf849262be73cca5f09130bc46e496ea01d52a6365726094dbbe14ae75a934a8d62056fda5073209b3a26cbe312136772e15b6169207414e3e403958fd6db63a2666f01170d26418e8530fba3a7344a5c43d146fa903add13f6f2234b74fc98346ac07f492ea9e643dafda271f8154eb13f4c51ac98373462314360baeb1d01553fe55fde851a9a925e6df9bc2dbbfd25ef291ed358063256c8fd29dbad3b69c41387c2df5b49f6cb344cdd63f92d25daec350c49ddb9c3b5494ce76e3802792f67a1e863eb93580c1f1d72c04f2247319a3347ea1cdaadfcd33cee42c615d3582dfcbdefcc4a3ac266d3f56d431926e1644e996a1edc5f28fba35ffdd40973d96fac803ce2a987933cc396c5e48c29d752bee3db79fe2324b0a7d71c82625bf675967ba5efea1a88ff0d3fe975c27d1b59e5098ebf7853f06cdc060df3151685eb380aae118462f5f4a2bdda5429ce692f48daf500efe40d2c306119138558289599da53e0b358564f431b40da72f234ba6cc28d38daa8cd9625a19b7cd073bf5417fcfeef7401d56dd6b7c47116d0e2f30e01b1bf660a930e532e6b08576ca2e8506357bde1c1169a8db2af71371c961629c61aa3148fadad3b28a9d252d303145a77ea47c464197963ec81ef4082889b994ebe20586bd1538a01bf14e10ca640439499b9cce71dd2a61f13f1e25ae2780b0e578eddb5abe5598d37ae7b68bd2c323e2c74c0ec575efe726e9ad064864dd29f2c1430dedcc0a6eb71113c3fe64e855b0c3525ab05390c49c71c26ded917a73084d2a89cf226918591721d2eda261f1dbbd2d44e0d236e62e3d368104b31740c26368752591663c529587416c6b35673c231cb4eed2038f4d0638225757b3bcf3179ea0014379a2b76d3240054392a4713005975e2f36109b3aee342551ab5801c730457e5d802668d9fd5b93652f5260ed800f58fc409f6d69f52b3b0732e4af4929bf5b708bed827ab096c87579673f5c489576aaa50ad21bf2104134f650610217c27955cda1dd89ff095c26efa77d4d9bbeac93e4d462e7a1206fcd05e17ec9fec22b01afb82cc4f5ba76d6a3aeb6aa085a8e9f8c3bc8765d35555f3397b1ce6387636a4466caa7114ffcb2736358bc06d3cfdf933673a94586eda1a966f77e7e3227f42274e10ddf07f0cd5d497fccf0d6a03c61cfec8aa99ff9228bf8a3c9832fd49b0826b36ed474280f7b2b0efcfbe1b8e1cac28aab5824c69859632edc154f0ff94f7557733bf789b0bf6e1be1b947200217784a0385040593a43b9078b5449e2bffa6ffcc9c4682e8e256492a1d5f94c8895dcbab76e3ee97e2cea26fdbc0d22bf2523095bf77b49494d822ba7ebf145fb24feb3999e3e26f41923accf6c56ed904ceb2af133e1582a4b63f5842351946b139e8fef6fd388d070ac363ae34ef81d6db84e86e6b5ef4c34b6d5cd6003bd3dcdabf4046bf1be9731558e7e30325625206d8fd938d669af6a23c3e14a51f09991c75bebf49d9a6575f456e32b3e9087fbf27b1ca0ffae1dae2f2944ce00f426613b3ff237d2f717e32c25d984b8505d5453ad4313572bc567ecfffd848a5c4823f1060651cd8f5297dfc51fad9adc34081e39e7f5699beee1a368126c5a290bdebf729d129890423c7bb366b8869991a708f7be662b667958ff8bdcda616c5021de4265d90f9aa29b4b9a1af32f0faf4ebe352fce35f13ff1ee1bf24caa2e5bb4f5868c806df785187efc16a7ff28df269ad2d899f378513b2d2405454f4a4f99ff990d3488fb0eab68d6fadc092a97d2a13e64a8a5257ef77f843730721202134358a13a96281e97284870c3180c7b15f457fd70f348540b261917d59adca7d3412cb1de4b26ceb57a453f08dfadcbb76a664b80b60b95dc4acd11cef57ddece296d8e239cd00c359bcf16667e1bf0a92e8a9a99a53c32024eccaa826eb01319dbb88099684a644184d23773ba2fa2b4cd631b061df5c588229f335caa930f9b43b29255cf83315e598a4b35ec9c515aee9c621d1e6d64da384ac0d1bb4db59070b391bdf95426039497bed92412efbb58cb89a759074d538a1a5835824cbcd8f874b87c37ba8871deb070e24c3f26b12b2946041c79ed66d79a9089a8219f64c7d22218f32dbb0a43b8794e270e45be96c95e76621620723d0aacf32891bf748d58aca3912352681d7d4145533238251d9f501d83e076a0c3cf33620814307ac98ef53b97e76278b7f5856ec32b2893fd325f9236767232abff69909d4bc0694759d61f09877b411384b160c612eb971db0544312e905c20a68301923bce89c9d32f68c583d6d8791ccfcddd993d181a9b5f1570317b48804651c896454c1690fb957b8a0826bbade06cb71ed328e02175f539103ed3260889d594c2a13fe8c99e1d435153651900012cf792218a2093db3c6e8e8bfbb1203911c49356c35e0c25f1d5737ac9f2c19aac7f211b754da11e06a2117259c2cdaf11dcb0c581de523c93bde955eb5691a3e52172239c9a85b85394e7f6d86bb961f93dabb772f2301fba36d1105b16b0c57fedb03d8df7ea9bc27e195d115418410c9ec73aee62eaca920bd1408f9f59cd977338be83acb4ca128e8b4e9238f9c", 0x1000}], 0x2, &(0x7f0000002040)=[@cred={{0x1c, 0x1, 0x2, {r6, r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}], 0x40, 0x804}, 0x8004) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000000c0)={0x9, 0x9, 0xffffffff, 0x6, 0x5b}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000100)={0x3920e, r3, 0x3, 0x1, 0x6, 0x6}) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0xff6f}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nodelalloc}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}]}, 0x7, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a") 1m24.660953146s ago: executing program 4 (id=1307): openat2(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001800)={0x1}) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) r0 = syz_usbip_server_init(0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000140), &(0x7f0000000180)={'U-', 0x4d7}, 0x16, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@o_path={&(0x7f00000004c0)='./file0\x00', 0x0, 0x2018}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) write$usbip_server(r0, &(0x7f0000001c00)=@ret_submit={{0x3, 0x8c}, 0x40, 0x5b, 0x9cc, 0x0, 0x6, 0x0, "afec8aa6d9e1cec406b38a1632f2b084c8e9bb7d44b34414f70dca9290cfc1176b3d4cf058d910d9417d5f4145837a01bd2b7770f40116462d769dbe8c4fd9e76e9e54818bf4f476d94727a2b34a615138dedb96210e9b414ec2be"}, 0x8b) 1m24.161287745s ago: executing program 4 (id=1321): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001b00)={0x0, @rand_addr, @local}, &(0x7f0000001b40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001d40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x118, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x3}, 0x1c) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./file2\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfb, 0x1213, &(0x7f0000000600)="$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") epoll_create1(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r6, 0x0) mincore(&(0x7f0000384000/0x2000)=nil, 0x2000, &(0x7f0000001900)=""/168) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) 1m24.151102106s ago: executing program 34 (id=1321): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r1 = socket(0x1e, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1, 0x0, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001b00)={0x0, @rand_addr, @local}, &(0x7f0000001b40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000001d40)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001d00)={&(0x7f0000001bc0)={0x118, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x0, 0x0, 0x3}, 0x1c) r5 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socket(0x40000000015, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./file2\x00', 0x804800, &(0x7f00000002c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfb, 0x1213, &(0x7f0000000600)="$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") epoll_create1(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x2013, r6, 0x0) mincore(&(0x7f0000384000/0x2000)=nil, 0x2000, &(0x7f0000001900)=""/168) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x18, &(0x7f0000000000), 0x1) 38.066046051s ago: executing program 6 (id=2022): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") r0 = socket$inet6(0xa, 0x80802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x4080, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x2}, 0x1, 0x0, 0x0, 0x5, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 37.877479752s ago: executing program 6 (id=2026): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000008400000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 37.554038931s ago: executing program 6 (id=2030): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003540)=[{{&(0x7f0000000100)={0x2, 0x4e1d, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000004c0)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000600)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a12ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xdb}, {&(0x7f00000005c0)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa8a08958f0dc0f394799f8100"/58, 0x3a}, {&(0x7f0000000b40)="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", 0x337}], 0x5}}], 0x1, 0x40080a0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) socketpair(0xffffffffffffffff, 0x800, 0x7, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) sendto$packet(r1, &(0x7f0000000180)="10030600e0fc020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x5, 0x1}, &(0x7f0000000200)) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x5, 0x4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000020002000b"], 0x40000) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) 37.349608103s ago: executing program 6 (id=2032): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x47a, &(0x7f0000000180)="$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") r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket(0x28, 0x5, 0x0) openat(r0, &(0x7f0000000100)='./file0\x00', 0x408082, 0x108) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r4, 0x4) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f0400000400000004215bd5533d0006793b672f370fd2b8a547698e4131e8dffdb5f0e33cadac685e3247ac3780c0325ca51cc6df4ff1df2af519176a762b26077bdec44f6cbe642cc01181622cef5e37df587845d59d1642062de665dcba7c7166400847e328c166d02b7b9aff0200000000000000550492059026ee181b7c93d0340fb35503f3197785fe29af6d519054a5dabf39b3ac7800e3a4b9cfc02a37bbc9ca76c8970f4ba26e684b559844832202fdf3866753c9beace27cf11de27d04d695d853b4e72ef68ee918667f56b09ee43aacdbe4", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$XFS_IOC_FSCOUNTS(0xffffffffffffffff, 0x80205871, &(0x7f00000000c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f00000001c0), &(0x7f00000004c0)=r2}, 0x72) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000008c0), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x28, r6, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x50) recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000840)={0x6, &(0x7f0000000800)=[{0x8, 0x9, 0x9, 0x2}, {0x1, 0x2, 0x3, 0x2}, {0x5, 0xd, 0x1, 0x1}, {0x1, 0x6, 0xd, 0x5}, {0x23, 0x8, 0x7, 0x5}, {0x5, 0x2, 0xf8, 0x7}]}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000740)={0x0, 0x81}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000007c0)={r8, 0x7, 0x95c, 0x1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 35.910722317s ago: executing program 6 (id=2047): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x80}}, 0x20000804) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)={0x60, r5, 0x505, 0x70bd2b, 0x25ffdbfe, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x75b67d20}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000441}, 0x2404c080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) 35.295012773s ago: executing program 6 (id=2052): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") r0 = socket$inet6(0xa, 0x80802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x4080, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x2}, 0x1, 0x0, 0x0, 0x5, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 35.270923514s ago: executing program 35 (id=2052): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f00000004c0)=ANY=[], 0x3, 0x599, &(0x7f0000000dc0)="$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") r0 = socket$inet6(0xa, 0x80802, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, 0x0, 0x0, 0x4080, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x2}, 0x1, 0x0, 0x0, 0x5, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) 3.76367761s ago: executing program 3 (id=2434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000019ffffff0000000000000004180100002020732500000000002020207b0af8ff00000000bfa100000000000007010000f6ffffffb7020000080000007b03000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0xfe4, &(0x7f0000001e00)=""/4068, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5411, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000400)="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", 0x150, 0x8000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0x720, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r2 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r2, &(0x7f0000000240)='-1\x00', 0x3) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e25, 0x7f, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) 3.472896117s ago: executing program 5 (id=2437): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x65140000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8840}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000400}, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) unshare(0x24020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104f000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000200)=0x61637885) ppoll(&(0x7f0000000040)=[{r4, 0x4000}], 0x1, &(0x7f00000000c0), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) 3.109430398s ago: executing program 5 (id=2440): r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x28, 0x1, 0xd, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1a, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000000098c183f107fe11a4a479318b6b5db3e983cea7b3d80487c385ebaeaab0c0ab8573274afe8542199475012bf24ed0914f9f674ab7f5096f89442c82f4486050f09a61178e3af6e89bf78ad5a7a809246fff81403a47e13132ab0730979a064e486a6a37ec4a5ad822d746d8baf6931e29b7465216d4e805a12a5c7206aae7967b23e6dfe5ec238bf90229b7cd97b0f8a63d69c1a2e70bc19dc175b12b94cfb370345e319bb9cf43a9965a3a4fd21362230885bbf1ca971a0abaf7d5be008fcc2f78b590087394cac7321bb3db48eca4e667761d70787afd6dad7ae75ac8c0c01e7942cf4b26364d9945f97f41307ca7108d5325a392a254ea5681d435a10d63a7de6419700a41f05bf2aaa1993addedb4bf11793a3c93b13073c42025a574bfa2b14b7bc52da96f35635d0f58da9f116551dbd11fc1aa839a42ae57a6395a97b81217f0a82d309040cc0e867cb1ba89139e60708e71989396a1a7a55433a19d15a3fc38e5de17", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000100"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000380)="5b2e91f42e050c62ba3d6f2447684311d296192e8ad79d12f42e8f7c01220e88414b7386db7456c3c6cf2c48726b8fee0c016bcd44d3a120ddce9d919f587f47a461f83b5aa567652ec54596d88937524ca55b7b949bb0b951f7de03bc281e25eddbba35c9518c05e5be9df76b011ac3530ae4963c9b0344028e4411ce5263dc936de33f2dea3ab547e58fff26a044602233ad3908597061e1f339fd659425ed29045817fa6bc71ca1de42e3a5e4ae485ac568a56cdf8c5a556d4c4a042c41f8dd4422aac557175ed34ffb5e0f3feb10329e763206c10e56d05784de358226612fc7546ed48a1de8e6f6e5d03ded2cab8176c51b", &(0x7f0000000600)=""/214}, 0x20) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x738b9e531a356e7c, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r7, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r7}}, 0x30) (async) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r7, 0xffffffff}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xc, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = getpgid(0x0) r10 = syz_pidfd_open(r9, 0x0) (async) r11 = socket(0x1, 0x2, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="681000004a000b0088dfce96a8fdce6a2f0685d3f2093bc378f19de7ac6400000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000080002000200000014000100fe8000000000000000000000000000aa080002000300000014000100fc02000000000000000000000000000109000100ff010000000000000000000000000001"], 0x68}}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000000240)=0x2) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pidfd_getfd(r10, r11, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x65, 0x0, &(0x7f0000000080)="f6f4e6a10000502468da5eb1c6b2feff8833ad63bf3707164aac031971c4be105eb953f86fbcb41d4e076aa7a493e796123bbbd8e3b7e60e8fd097e469ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe9900"/101, 0x0, 0x1, 0x0, 0x31, 0x5d, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 2.875234682s ago: executing program 3 (id=2447): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x9, 0xd, 0x10, 0x7, 0x0, 0x7fffffffffffffff, 0xa0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000080), 0x6}, 0x2, 0x100, 0x442, 0x2, 0x3, 0x10000, 0x1, 0x0, 0x3, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='sfq\x00') sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104", @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x20, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}}}}]}, 0x78}}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r5, &(0x7f0000000880)={0x27, r7, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001600", 0x3c}, 0x60) close(r6) sendto(r5, 0x0, 0x0, 0x4000, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3, 0x1, 0xaf}, {0x7fffffff, 0x200, 0x0, 0x0, 0x1, 0x2}}}]}]}]}}]}, 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.705115212s ago: executing program 3 (id=2451): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x8842) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x107}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4880) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028006000f"], 0x3c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.633993346s ago: executing program 3 (id=2452): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x26020400) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010027bd7000fdffffff02d0"], 0x24}}, 0x4000000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) 2.55392245s ago: executing program 3 (id=2455): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 2.122604786s ago: executing program 3 (id=2456): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @empty, 0x407}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4400c800) (async) ioctl$TCFLSH(r0, 0x5608, 0x1) (async) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x2, 0x0) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f00000000c0)) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, 0x0, 0xfffffffffffffd89) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000202"], 0x50) (async) unshare(0xe000480) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) preadv(r4, 0x0, 0x0, 0x8, 0x1ff) (async) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 2.122364076s ago: executing program 8 (id=2458): r0 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000001c0)=0x8) 2.121802306s ago: executing program 8 (id=2460): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x100000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1b81}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x0, 0x0, 0x8, 0x6, 0x2}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = dup2(r4, r4) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="b8779a0f7fc58be536c0c96f00f0e1a586765603cf54fc2662d6d51c", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f00000020c0)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20004844) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@nat={'nat\x00', 0x670, 0x5, 0x6e8, 0x0, 0x0, 0xfeffffff, 0x4b0, 0x0, 0x650, 0x650, 0xffffffff, 0x650, 0x650, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'veth1_to_team\x00', {}, {}, 0x88}, 0x0, 0x360, 0x388, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [0xff000000, 0x0, 0xff000000, 0xffffffff], @ipv4=@private=0xa010100, [0xff000000, 0xffffff00, 0xff], @ipv6=@mcast2, [0xff000000, 0xffff00, 0xff000000, 0xffffffff], @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff000000, 0xff000000], 0x80000001, 0x10000000, 0x88, 0x4e20, 0x4e20, 0x4e24, 0x4e21, 0x0, 0x2c5}, 0x180, 0x2000}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002, 0x0, 0x0, 0x4], 0x0, 0x3}}}, @common=@set={{0x40}, {{0x8, [0x4, 0x0, 0x0, 0x3], 0x0, 0x6}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0x200}}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0xff}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x5, 0x5, 0x6, 0x4, 0x5, 0x2], 0x5}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x9, @ipv4=@multicast2, @ipv6=@empty, @port=0x4e21, @icmp_id=0x68}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x748) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)=')', 0x1}], 0x1, &(0x7f0000000140)=ANY=[], 0x30}], 0x1, 0x200c1d2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x2}, {0x0, 0xfff1}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0x2, 0xfff1}, {0x2, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x10, 0x1, {0x0, 0xdb, 0x7ff, 0x2, 0x9, 0x6, 0x2, 0xfffffffb, 0xc00000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r14, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x9e, 0x8, 0xf1, 0x0, 0x101, 0x102, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0xffff}, 0x2000, 0x81, 0xd, 0x5, 0x8000000000000000, 0xfffffff7, 0x2, 0x0, 0x9, 0x0, 0x1}, r5, 0xa, r5, 0x8) 2.120234626s ago: executing program 7 (id=2462): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000480)={0x7fd, 0xabf1, 0xb, 0x2}, 0x8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2440, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r5, 0x401) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20042090}, 0xc000) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r8, 0x560a, &(0x7f0000000040)={0x0, 0x6029, 0x100, 0x1ff, 0x87, 0x401}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="a0eb010098000000000000000c008d9d930001008c0000000200"], 0x0, 0x26}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2000000002000000020000000000000001020000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="050000007e13553d11d148fc4b340e68e4062a1d48dc00"/37], 0x50) r10 = io_uring_setup(0xf31, &(0x7f00000001c0)={0x0, 0x8dd3, 0x8, 0x6, 0x18a, 0x0, r5}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 1.985819804s ago: executing program 2 (id=2465): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x14}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000001640)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000580)={0x0, 0x1, 0xf27}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000980)={r3, "6fd19f90da5ac9f272526df8b7e37748"}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x49, 0x100000, 0x3, 0x3}, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r6, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r6, 0x80000001, 0x4) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000370427bd70000000000000000000", @ANYRES32=r5, @ANYBLOB="6105ee00000000000d0012800b00010067726574617000000c00028008000700ac1414aa"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0x2, r5, 0x7}, 0x80, 0x0}}], 0x1, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x41032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000100)="57acef8f6654537b4b0a3894394ade2e4ce1a5d85b75a42bd1e5329a4fbfdfa6439318c325b5872a6082a58ace9c812cb14febd9b1e0d8b2179d2af5086f99", 0x3f}], 0x1, 0x1) r9 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x7, 0x40032, 0x0, 0x0) splice(r7, 0x0, r9, 0x0, 0x10d00, 0xf) 1.720010559s ago: executing program 2 (id=2466): r0 = request_key(&(0x7f0000000740)='dns_resolver\x00', &(0x7f0000000780)={'syz', 0x1}, &(0x7f00000007c0)='\x00', 0xffffffffffffffff) request_key(&(0x7f0000000680)='dns_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, 0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x8054) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x1, 0x8a5, 0x1001f0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) pwrite64(r5, 0x0, 0x0, 0x100000000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000280)='./file2\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) 1.71261804s ago: executing program 7 (id=2467): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 1.421647476s ago: executing program 8 (id=2468): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x22, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x1, 0x803, 0x0) (rerun: 64) connect$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x16, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}}, 0x8000) 1.421217756s ago: executing program 7 (id=2469): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000380)=@ll={0x11, 0x19, 0x0, 0x1, 0x0, 0x6, @multicast}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) (async) io_submit(0x0, 0x0, 0x0) (async) sync() (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_config_ext={0x4, 0x6}, 0x880, 0x34, 0x43a1bd76, 0x7, 0x3, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'lo\x00', 0x200}) (async) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.420908416s ago: executing program 5 (id=2470): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nodioread_nolock}, {@nogrpid}, {@norecovery}, {@errors_remount}, {@nodioread_nolock}, {@minixdf}, {@nouser_xattr}]}, 0x0, 0x590, &(0x7f0000000b00)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r2, 0x2}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) 1.272196946s ago: executing program 8 (id=2471): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x37}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x100000001, 0x30300) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000004c0)={{r0, &(0x7f0000000180)='syzkaller\x00', 0x10200, &(0x7f0000000380)={@align=0x1, {0x3ff, 0x1000, 0x4, 0x401}}, 0xfffff214, &(0x7f00000003c0), &(0x7f0000000400)=0x7}, {[0x0, 0x1000, 0xfffffff0, 0x9]}, 0xfff, 0x65, &(0x7f0000000440)=""/101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0x56, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000900)={0xffffffffffffffff, 0x770, 0x8}, 0xc) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000940)={{0x1, 0x1, 0x18, r0, {0x7fff, 0x2}}, './file0\x00'}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x13, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0xc1, &(0x7f0000000280)=""/193, 0x41000, 0x8, '\x00', 0x0, @fallback=0x36, r2, 0x8, &(0x7f0000000540)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x9, 0x9, 0x2}, 0x10, r3, r4, 0x9, &(0x7f0000000a00)=[r5, r6, 0x1, r7, r8, r9], &(0x7f0000000a40)=[{0x5, 0x4, 0x10, 0x8}, {0x0, 0x4, 0x6, 0xa}, {0x5, 0x5, 0xa, 0x4}, {0x0, 0x1, 0x6, 0x8}, {0x1, 0x1, 0xb, 0x9}, {0x0, 0x5, 0x9, 0xa}, {0x1, 0x1, 0x3, 0x3}, {0x1, 0x5, 0x8, 0xb}, {0x3, 0x4, 0x7, 0x4}]}, 0x94) 1.249942607s ago: executing program 8 (id=2472): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001d40)={0x0, 0xfff, 0xb8}) 1.121353414s ago: executing program 7 (id=2473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 1.088867196s ago: executing program 8 (id=2474): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r4 = epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x2}) ioctl$HIDIOCGUSAGES(r3, 0xd01c4813, &(0x7f0000000280)={{0x2, 0xffffffff, 0x3, 0x9, 0x100000, 0x8}, 0x360, [0x0, 0x2, 0x9, 0x9, 0x0, 0x1, 0x8000, 0x9, 0x401, 0x1, 0x3, 0x4, 0x7d, 0x8, 0x6, 0x10001, 0x80000001, 0xf935, 0xf, 0xfff, 0x3, 0x8, 0xa, 0x2, 0x8001, 0x9fb, 0x81, 0x2, 0x8, 0x6, 0x400, 0x6, 0x4, 0x40, 0x1a1, 0x3, 0x5b, 0x7, 0x1c, 0x694, 0x5, 0x0, 0x7, 0x1ff, 0x2, 0x1, 0xafb3, 0x2d1d, 0x7, 0xd, 0xa3, 0x8000, 0x4, 0x1ff, 0x7fffffff, 0x7, 0x9, 0x0, 0x3, 0x7, 0x1, 0x6, 0x10001, 0xe27, 0x631d, 0x8, 0x2, 0x7, 0x7ff, 0x100, 0x1, 0x8, 0x8001, 0x2, 0x9, 0x57c, 0xc9, 0x9, 0x4, 0x8, 0x5, 0x3, 0x3, 0x20000000, 0x83000000, 0xfffffffd, 0x8, 0x200, 0x80000001, 0x6, 0x4, 0x0, 0x7, 0x1, 0x0, 0x8, 0x8, 0x84, 0x1, 0x2, 0x1, 0x1, 0x7, 0x7, 0x6, 0x40, 0x71, 0x9f2, 0x80, 0x3, 0x2, 0x7, 0x8, 0x1, 0x1, 0x1ff, 0x2, 0x1, 0x57, 0xdf00000, 0x9, 0x8, 0x49, 0x401, 0x7fff, 0xa, 0x1b, 0x8, 0x4, 0x5, 0x5, 0xe0c, 0x8001, 0x10000, 0x200, 0xb, 0x40000, 0x2, 0x34e2, 0x1, 0x10, 0x8, 0xbc, 0x80000001, 0x9c5b, 0x6, 0x1, 0xffff, 0x77cf1b7f, 0x0, 0x7, 0x7, 0x9, 0x7, 0x3, 0x3, 0x7, 0xa9, 0x1, 0x9, 0x10000, 0x5, 0x80000001, 0x1, 0x5, 0x2, 0x0, 0x9, 0x2, 0x5, 0x8, 0xffffffff, 0x8001, 0x9, 0x3, 0x9, 0x6, 0x80, 0x2, 0xd, 0x100, 0x0, 0x31, 0x344, 0x0, 0x7, 0x30000000, 0x10000, 0xfff, 0x80, 0x6, 0x9, 0x7, 0xfffffffa, 0xfff, 0x8, 0x8, 0x9, 0x0, 0x87a9, 0x9, 0x6, 0xfffffff8, 0x800, 0x3, 0x3, 0x8001, 0x3bd, 0x6, 0x7f, 0x9, 0x4, 0xbfc, 0x1, 0x3, 0x20, 0x23, 0x8, 0x7, 0xea, 0x1, 0xc, 0x8, 0x8, 0x101, 0x92, 0x8, 0x1, 0x95, 0x6, 0x4, 0x9, 0x5, 0x8001, 0xcc, 0xdcd1, 0xfff, 0x8, 0x8, 0x7fdc, 0x6, 0x7, 0x81, 0x7, 0x10, 0xdd, 0x1, 0x6, 0x10, 0xb82, 0x4, 0xa, 0x80000000, 0xfd00, 0x7fff, 0x3, 0x0, 0xfff, 0x100, 0x9, 0x8, 0x4, 0x9, 0x2, 0x3, 0x200000, 0x4, 0x9, 0x2, 0xffff7fff, 0xfff, 0x7, 0x3, 0x552, 0xa9, 0x24a, 0x1, 0x80000001, 0x800, 0x7280, 0x1000, 0x6, 0x9, 0x10, 0x2, 0x6, 0x6, 0x8, 0x400, 0x3, 0x200, 0x1, 0x3, 0x1000, 0x9b194000, 0x6, 0x8000, 0xc, 0xff, 0x2, 0x7, 0x5, 0x4, 0x6, 0x0, 0x2, 0xd0a, 0x6, 0x4, 0x2, 0x1d0, 0x0, 0xfff, 0x10001, 0xb, 0x6, 0x3, 0x9, 0xcc, 0x5, 0xffffffff, 0xf0c, 0x5e2, 0xd, 0xefa, 0x101, 0x10, 0x7, 0xb3620a1, 0xe, 0x917, 0x6, 0x6, 0xd1, 0x0, 0x0, 0xd4a3, 0x1, 0x4, 0x1ff, 0xc, 0x3, 0xa, 0x8000, 0x1, 0x10, 0x7, 0x7f, 0xc10, 0xab7, 0x3, 0x1ff, 0x3, 0x6, 0xff, 0x5, 0xd, 0x5, 0x5, 0x4, 0x2, 0x9, 0x401, 0x7fffffff, 0x7, 0x9, 0x8622, 0x5, 0x2bb, 0x3, 0xd4, 0x7c, 0x1b, 0x7, 0x6, 0x5, 0x6, 0xd6, 0x7, 0x2, 0x9, 0x8, 0x10, 0x5, 0x1, 0x81, 0x8, 0x5, 0x4, 0x40100, 0x0, 0x0, 0x0, 0x670b, 0x2, 0x9, 0x9, 0x10, 0x2, 0x2, 0x8, 0x8, 0x7, 0x7, 0x8, 0x2b, 0xf, 0x200, 0x9c9, 0xffff8000, 0x8, 0x2, 0x3, 0x8, 0x973ab42, 0x7, 0x8, 0x1, 0x10001, 0x6, 0x6, 0x1, 0x9, 0xfc, 0x5, 0x7, 0x401, 0x2, 0x3, 0x7, 0x1, 0x7fff, 0x5, 0x401, 0x6, 0x6, 0x7, 0x8, 0x6, 0x40000000, 0xfc5, 0x6, 0x400, 0x3, 0x1, 0xa23e, 0xfc000000, 0x8fff, 0x7ac, 0x8, 0xfffffeff, 0x40b, 0x3ff, 0x0, 0x8, 0x8, 0x14000, 0x4, 0xfffffff7, 0x0, 0x4, 0x9, 0x5083, 0xd7, 0xe, 0x8001, 0x6fe1, 0xa, 0x1e37edcc, 0x30, 0x9, 0x400, 0x4, 0x9, 0xd2a, 0x9, 0x800, 0xfffffffb, 0x8, 0x5, 0xfffffffe, 0x1, 0x4, 0x5, 0xc, 0x3, 0x5, 0x7, 0x1, 0x4, 0x28, 0x9, 0x4dec, 0x5, 0xd9, 0x545, 0xe0, 0x0, 0xa9, 0xfe, 0x2, 0x1, 0x0, 0x8000, 0xb, 0x2, 0x80, 0x44, 0x7ff, 0xbf, 0x2, 0x800000, 0x1ff, 0x5, 0x7, 0x38, 0x2, 0x7, 0x8, 0x8, 0x2, 0x0, 0x6, 0x9, 0x5, 0xe, 0x3, 0x2dd, 0x1, 0x9, 0x3, 0xffff0000, 0x36, 0x3ff, 0x8001, 0x3, 0x9, 0x6, 0x1, 0xc, 0x4, 0xff, 0xfff, 0x5fdf, 0x101, 0x1, 0x8, 0x6b0e, 0x1000, 0x1, 0x9, 0x2, 0x1, 0xfffffff9, 0x280, 0x800, 0xffff8eda, 0x81, 0xb58, 0x6, 0x0, 0x10001, 0x0, 0x8, 0x7, 0x2, 0x7ff, 0x9, 0x6, 0x1, 0xffffff50, 0xfffffffe, 0x1, 0x9, 0x85e2, 0x400, 0x5, 0x7, 0x7, 0x80000000, 0x26d, 0xff, 0xfffffffd, 0x3ff, 0x0, 0x3, 0x60d5, 0x1, 0x81, 0xd3, 0x7, 0x9, 0x7, 0x3, 0x6, 0x0, 0x194, 0xff, 0x3, 0x8, 0x3, 0xff, 0x52a0c2e4, 0x4, 0x2, 0x1, 0x4, 0x1, 0xfffffffa, 0x3, 0x200, 0xfffffff9, 0xdb, 0x7, 0x8, 0x0, 0x5, 0x1, 0x0, 0x3, 0x9, 0x65, 0x401, 0x4, 0x6, 0x9, 0x7fffffff, 0x10000, 0x1, 0x6, 0x5, 0x1, 0x2, 0x7, 0x80, 0x0, 0xdf03, 0x101, 0x7, 0x1, 0x41ab, 0x1, 0x3, 0x401, 0x10000000, 0x8000, 0xfffff800, 0x2, 0x7, 0x1, 0x7, 0xc8a, 0x30000000, 0x7, 0xf, 0x4, 0x1, 0xff, 0x59, 0x0, 0x2, 0x6, 0x10000, 0xb6, 0x10, 0xd769, 0x9, 0xffff8001, 0x107da4eb, 0x6, 0x1, 0x6, 0x4, 0x5, 0xbe9, 0x1000002, 0x1, 0x200, 0x2, 0x1, 0x40, 0x101, 0x10000, 0xa40, 0xd1, 0x2, 0x0, 0xe, 0x2, 0xfffffff5, 0xa, 0x3, 0x7fff, 0x3ff, 0x1cf9, 0x5, 0xf863, 0x6, 0x3, 0x7, 0x5, 0x2, 0x10000, 0x37, 0x4, 0x3, 0x89, 0x8, 0x1ff, 0x6, 0x2, 0x5, 0xffff, 0x7f, 0x9, 0x4, 0x8a6, 0xee, 0x2, 0x3, 0x2, 0x9, 0x8, 0x9, 0x5, 0xffffff7f, 0xda4, 0xfffffff9, 0x9, 0x1, 0xd36, 0x9, 0x6, 0x7, 0xd, 0x2, 0x0, 0x101, 0x17a9, 0x6, 0x6, 0xfff, 0x3, 0x8b, 0x2, 0xb68, 0x4, 0x400, 0x4, 0x0, 0x200, 0x100, 0x8000, 0x1, 0x2, 0x6, 0x4, 0x8e7b, 0x80000000, 0x6b16, 0x8, 0x1000, 0x5f, 0x3, 0xa284, 0x3, 0x2, 0x1, 0x6, 0x65, 0x1, 0x5, 0x1, 0x5713, 0x725c, 0xff, 0x6, 0x5d63, 0x5, 0x0, 0x4, 0x2, 0x5, 0x4, 0x6, 0x5, 0x100, 0x5, 0x8, 0x6, 0x4, 0x5, 0xb, 0x2, 0x0, 0x9, 0x3, 0xe7, 0x3, 0x10001, 0x800, 0x7, 0x9, 0x7, 0x7, 0x1, 0x1, 0x1, 0x7, 0x6, 0x2, 0x2f98000, 0x4, 0xe, 0x92, 0x4, 0x88, 0xb0f, 0xfffffff3, 0x7, 0x9, 0x6, 0xa6c, 0x40, 0x7, 0xfffffff7, 0x6, 0x9, 0x5, 0x10000, 0x1, 0x98, 0x9, 0xcf, 0x6, 0x4, 0x5, 0x10001, 0x4, 0x28, 0x2b, 0x9, 0x8, 0x7, 0xfff, 0x6, 0x1, 0x3, 0x12, 0x5, 0xfffffff8, 0x2, 0x10000, 0x400, 0x9, 0x10001, 0x1, 0x2, 0x800, 0x7, 0x81, 0x32b3, 0x7f, 0x7f, 0x101, 0xfff, 0x4, 0x0, 0x1, 0x2, 0xc99ec87, 0x0, 0x7fffffff, 0x4, 0x6, 0x1, 0x0, 0x2, 0x7, 0x0, 0x9, 0x8, 0x3b5a, 0x9, 0x80, 0xe, 0x8, 0x8, 0x0, 0x2, 0x5, 0xf25, 0x3, 0x1d4, 0x7, 0x4978, 0x8, 0x7, 0x3, 0x0, 0xffffffc0, 0x6, 0x8001, 0x6, 0x7f, 0x5, 0x0, 0xffff44c2, 0x61, 0x4, 0x7fff, 0x3e2, 0x5, 0x2, 0x6, 0x20, 0x3, 0x8, 0x500, 0x63ee, 0xea5, 0x80000001, 0xc, 0xf, 0x622, 0x6, 0xfff, 0x6, 0x0, 0x1, 0x20, 0x2, 0x7fffffff, 0x3, 0x9, 0x3, 0x1ff, 0x7dc6, 0x0, 0x1, 0x400000, 0xdac7, 0x0, 0x800, 0xcde6, 0x1, 0xfffffffa, 0x2, 0xd44, 0x0, 0x5, 0xfffffc01, 0x0, 0x4, 0x1000, 0x7ff, 0x1ff, 0x4, 0x9, 0x667, 0x6, 0xace5, 0x81, 0x7fff, 0x1a4bff96, 0xbd, 0x101, 0x8, 0x10000000, 0x94, 0x101, 0x6, 0xf1d, 0x9, 0x0, 0x200, 0x2, 0x7, 0xffff, 0x9, 0x4, 0x4, 0x0, 0x5, 0x2, 0x0, 0x4, 0x9, 0x70000000, 0x5, 0x50f, 0xb8000000, 0x4, 0x8, 0x9, 0x100, 0x3, 0x1e9f, 0x1, 0xa2b6, 0xffffffff, 0xffff7fff, 0x6, 0x5, 0x3, 0x0, 0x2, 0xf7, 0x5e3, 0x6, 0x1, 0xff, 0x8000, 0x5, 0x4, 0xe0e, 0x88, 0xfffffffa, 0x8, 0x1e2, 0xc, 0xffff, 0x7fffffff, 0x3]}) timer_create(0x3, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) request_key(&(0x7f00000001c0)='rxrpc_s\x00', 0x0, 0x0, 0x0) gettid() sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0x4}, {}, {0xfff2, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x40080) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 883.959308ms ago: executing program 7 (id=2475): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) (async) syz_io_uring_setup(0x5339, &(0x7f0000000080)={0x0, 0xaf55, 0x200, 0x0, 0x59, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000140)) (async) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 854.6931ms ago: executing program 2 (id=2476): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3ff}]}}}]}, 0x40}}, 0x40080c0) openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x203, 0x11, 0xa}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x0, 0xf, 0x0, 0x5, 0xfff}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r1, 0x1) listen(r1, 0x5) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x1, 0x3, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000008000/0x1000)=nil, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x267, @remote, 0x8000}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000009000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)="d2fda1227ee1eb1917dad0e28f46ee6575e857b3bbe0c86a0a3918d7cdabf68d6e1702388bf1350f820c2a2f4126c940ed47cb564e8c0c00bb096180c6421aabe92ad71d66ea7834f61eb3414ade63ee1dfb41c44983d1a01cbf7c42926247f9a0dd27dd", 0x64, r2}, 0x68) 441.406783ms ago: executing program 7 (id=2477): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x1, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x80}}, 0x20000804) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)={0x60, 0x0, 0x505, 0x70bd2b, 0x25ffdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x75b67d20}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000441}, 0x2404c080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100fffffff8950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x7fffffffffffffff) 440.192254ms ago: executing program 2 (id=2486): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f00000000c0)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x1c, 0x1, 0xfffffffe, 0x100, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x9, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x1}, 0x80, 0x0, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 384.028337ms ago: executing program 5 (id=2478): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) read(r2, &(0x7f0000000440)=""/138, 0x8a) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 323.7472ms ago: executing program 2 (id=2479): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000040), 0x0}, 0x20) 217.926177ms ago: executing program 2 (id=2480): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r2, 0x4b45, 0x3) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80080, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) 201.261638ms ago: executing program 5 (id=2481): r0 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r3, &(0x7f0000000600), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=2482): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000001540), 0x1000000, &(0x7f0000001640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2$watch_queue(&(0x7f0000000040), 0x80) kernel console output (not intermixed with test programs): 64.086859][T10558] total_pgfault 100443 [ 164.091011][T10558] total_pgmajfault 40 [ 164.095045][T10558] total_inactive_anon 36864 [ 164.100344][T10558] total_active_anon 0 [ 164.104571][T10558] total_inactive_file 4096 [ 164.109272][T10558] total_active_file 0 [ 164.113304][T10558] total_unevictable 0 [ 164.119994][ T7562] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 164.128847][T10558] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2027,pid=10557,uid=0 [ 164.145797][T10558] Memory cgroup out of memory: Killed process 10558 (syz.2.2027) total-vm:94156kB, anon-rss:1348kB, file-rss:22432kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 164.147135][ T7562] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 164.178384][ T7562] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 164.195188][ T7562] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 164.237214][ T7562] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #11: comm syz-executor: invalid size [ 164.249611][T10599] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 164.256300][T10599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 164.282036][T10599] vhci_hcd vhci_hcd.0: Device attached [ 164.288022][T10602] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(13) [ 164.294728][T10602] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.310362][T10602] vhci_hcd vhci_hcd.0: Device attached [ 164.317952][T10610] vhci_hcd: connection closed [ 164.318498][T10607] vhci_hcd: connection closed [ 164.318510][T10378] vhci_hcd vhci_hcd.7: stop threads [ 164.348343][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2049'. [ 164.354439][T10378] vhci_hcd vhci_hcd.7: release socket [ 164.363218][T10378] vhci_hcd vhci_hcd.7: disconnect device [ 164.373512][T10378] vhci_hcd vhci_hcd.7: stop threads [ 164.379127][T10378] vhci_hcd vhci_hcd.7: release socket [ 164.384562][T10378] vhci_hcd vhci_hcd.7: disconnect device [ 164.386915][T10614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2049'. [ 164.403685][ T7867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.457390][ T7867] syz_tun (unregistering): left promiscuous mode [ 164.572470][T10619] program syz.2.2051 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.839938][T10621] lo speed is unknown, defaulting to 1000 [ 164.845568][T10601] syz.5.2045 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 164.908856][T10601] CPU: 0 UID: 0 PID: 10601 Comm: syz.5.2045 Tainted: G W syzkaller #0 PREEMPT(full) [ 164.908957][T10601] Tainted: [W]=WARN [ 164.908966][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 164.908982][T10601] Call Trace: [ 164.909009][T10601] [ 164.909019][T10601] __dump_stack+0x1d/0x30 [ 164.909110][T10601] dump_stack_lvl+0x95/0xd0 [ 164.909140][T10601] dump_stack+0x15/0x1b [ 164.909193][T10601] dump_header+0x80/0x240 [ 164.909223][T10601] oom_kill_process+0x295/0x350 [ 164.909262][T10601] out_of_memory+0x97d/0xb80 [ 164.909374][T10601] try_charge_memcg+0x62e/0xa10 [ 164.909419][T10601] obj_cgroup_charge_pages+0x23/0xc0 [ 164.909449][T10601] __memcg_kmem_charge_page+0x9e/0x170 [ 164.909577][T10601] __alloc_frozen_pages_noprof+0x18a/0x350 [ 164.909650][T10601] alloc_pages_mpol+0xb3/0x260 [ 164.909720][T10601] alloc_pages_noprof+0x8f/0x130 [ 164.909803][T10601] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 164.909854][T10601] __kvmalloc_node_noprof+0x471/0x680 [ 164.909891][T10601] ? ip_set_alloc+0x24/0x30 [ 164.909946][T10601] ? ip_set_alloc+0x24/0x30 [ 164.909988][T10601] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 164.910096][T10601] ip_set_alloc+0x24/0x30 [ 164.910130][T10601] hash_netiface_create+0x282/0x740 [ 164.910164][T10601] ? __pfx_hash_netiface_create+0x10/0x10 [ 164.910242][T10601] ip_set_create+0x3cf/0x970 [ 164.910328][T10601] ? __mutex_lock_slowpath+0xa/0x10 [ 164.910442][T10601] nfnetlink_rcv_msg+0x509/0x5d0 [ 164.910513][T10601] netlink_rcv_skb+0x123/0x220 [ 164.910561][T10601] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 164.910641][T10601] nfnetlink_rcv+0x167/0x1720 [ 164.910685][T10601] ? __kfree_skb+0x109/0x150 [ 164.910828][T10601] ? nlmon_xmit+0x4f/0x60 [ 164.910876][T10601] ? consume_skb+0x49/0x140 [ 164.910920][T10601] ? nlmon_xmit+0x4f/0x60 [ 164.910962][T10601] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 164.911042][T10601] ? __dev_queue_xmit+0x139a/0x1f20 [ 164.911118][T10601] ? __dev_queue_xmit+0x148/0x1f20 [ 164.911163][T10601] ? ref_tracker_free+0x37d/0x3e0 [ 164.911213][T10601] ? __netlink_deliver_tap+0x4dc/0x500 [ 164.911247][T10601] netlink_unicast+0x5c0/0x690 [ 164.911357][T10601] netlink_sendmsg+0x5c8/0x6f0 [ 164.911384][T10601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.911410][T10601] ____sys_sendmsg+0x5af/0x600 [ 164.911524][T10601] ___sys_sendmsg+0x195/0x1e0 [ 164.911565][T10601] __x64_sys_sendmsg+0xd4/0x160 [ 164.911592][T10601] x64_sys_call+0x194c/0x3020 [ 164.911679][T10601] do_syscall_64+0x12c/0x370 [ 164.911775][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.911804][T10601] RIP: 0033:0x7f9b9e2cbf79 [ 164.911825][T10601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.911849][T10601] RSP: 002b:00007f9b9cd1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.911882][T10601] RAX: ffffffffffffffda RBX: 00007f9b9e545fa0 RCX: 00007f9b9e2cbf79 [ 164.911900][T10601] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 164.911915][T10601] RBP: 00007f9b9e3627e0 R08: 0000000000000000 R09: 0000000000000000 [ 164.911996][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.912014][T10601] R13: 00007f9b9e546038 R14: 00007f9b9e545fa0 R15: 00007ffe2b4aae58 [ 164.912035][T10601] [ 165.243574][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 165.256251][T10601] memory: usage 307200kB, limit 307200kB, failcnt 509 [ 165.264561][T10636] hsr_slave_0: left promiscuous mode [ 165.264577][T10601] memory+swap: usage 307404kB, limit 9007199254740988kB, failcnt 0 [ 165.277947][T10636] hsr_slave_1: left promiscuous mode [ 165.279603][T10601] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 165.290982][T10601] Memory cgroup stats for /syz5: [ 165.291315][T10601] cache 0 [ 165.299531][T10601] rss 0 [ 165.302378][T10601] shmem 0 [ 165.305556][T10601] mapped_file 0 [ 165.309086][T10601] dirty 0 [ 165.312090][T10601] writeback 0 [ 165.315755][T10601] workingset_refault_anon 141 [ 165.320489][T10601] workingset_refault_file 0 [ 165.325047][T10601] swap 208896 [ 165.329854][T10601] swapcached 4096 [ 165.333674][T10601] pgpgin 41783 [ 165.341529][T10601] pgpgout 41781 [ 165.348970][T10601] pgfault 57339 [ 165.356243][T10601] pgmajfault 76 [ 165.362188][T10601] inactive_anon 0 [ 165.370740][T10601] active_anon 4096 [ 165.377129][T10601] inactive_file 0 [ 165.388974][T10601] active_file 4096 [ 165.396326][T10601] unevictable 0 [ 165.401584][T10601] hierarchical_memory_limit 314572800 [ 165.407246][T10601] hierarchical_memsw_limit 9223372036854771712 [ 165.416322][T10621] chnl_net:caif_netlink_parms(): no params data found [ 165.423126][T10601] total_cache 0 [ 165.423138][T10601] total_rss 0 [ 165.423146][T10601] total_shmem 0 [ 165.423155][T10601] total_mapped_file 0 [ 165.423166][T10601] total_dirty 0 [ 165.454283][T10601] total_writeback 0 [ 165.458163][T10601] total_workingset_refault_anon 141 [ 165.466529][T10601] total_workingset_refault_file 0 [ 165.471618][T10601] total_swap 208896 [ 165.486222][T10601] total_swapcached 4096 [ 165.490497][T10601] total_pgpgin 41783 [ 165.494485][T10601] total_pgpgout 41781 [ 165.502358][T10621] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.509723][T10601] total_pgfault 57339 [ 165.513809][T10601] total_pgmajfault 76 [ 165.517822][T10601] total_inactive_anon 0 [ 165.522401][T10621] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.529886][T10601] total_active_anon 4096 [ 165.534825][T10621] bridge_slave_0: entered allmulticast mode [ 165.541052][T10601] total_inactive_file 0 [ 165.545264][T10601] total_active_file 4096 [ 165.550438][T10621] bridge_slave_0: entered promiscuous mode [ 165.551162][T10601] total_unevictable 0 [ 165.558717][T10621] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.567478][T10621] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.571571][T10601] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 165.574740][T10621] bridge_slave_1: entered allmulticast mode [ 165.585490][T10601] ,cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5 [ 165.588196][T10621] bridge_slave_1: entered promiscuous mode [ 165.593027][T10648] loop2: detected capacity change from 0 to 512 [ 165.610638][T10601] ,task=syz.5.2045,pid=10597,uid=0 [ 165.617375][T10621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.627843][T10621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.631108][T10601] Memory cgroup out of memory: Killed process 10597 (syz.5.2045) total-vm:94156kB, anon-rss:1216kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 165.662343][T10621] team0: Port device team_slave_0 added [ 165.670747][T10648] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 165.671950][T10621] team0: Port device team_slave_1 added [ 165.733796][T10621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.740865][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.787660][ T28] audit: type=1400 audit(2000000602.829:2483): avc: denied { create } for pid=10646 comm="syz.2.2058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 165.823577][T10652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 165.828920][ T28] audit: type=1400 audit(2000000602.829:2484): avc: denied { write } for pid=10646 comm="syz.2.2058" path="socket:[30217]" dev="sockfs" ino=30217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 165.860971][T10621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.882842][T10621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.883120][T10652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2061'. [ 165.889902][T10621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.889938][T10621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.988068][T10621] hsr_slave_0: entered promiscuous mode [ 166.013293][T10621] hsr_slave_1: entered promiscuous mode [ 166.043601][T10621] debugfs: 'hsr0' already exists in 'hsr' [ 166.049468][T10621] Cannot create hsr debugfs directory [ 166.164015][T10667] loop5: detected capacity change from 0 to 1024 [ 166.185825][T10667] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 166.206815][T10646] delete_channel: no stack [ 166.238133][T10667] loop5: detected capacity change from 0 to 2048 [ 166.273202][T10667] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.318990][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2068'. [ 166.329848][ T8555] IPVS: ip_vs_send_async error -22 [ 166.414347][T10621] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 166.452536][T10621] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 166.489072][T10676] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2065: bg 0: block 234: padding at end of block bitmap is not set [ 166.509272][T10621] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 166.522255][T10676] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 616 with error 28 [ 166.538257][T10676] EXT4-fs (loop5): This should not happen!! Data will be lost [ 166.538257][T10676] [ 166.549133][T10676] EXT4-fs (loop5): Total free blocks count 0 [ 166.550830][T10621] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 166.559720][T10676] EXT4-fs (loop5): Free/Dirty block details [ 166.568020][T10676] EXT4-fs (loop5): free_blocks=0 [ 166.573751][T10676] EXT4-fs (loop5): dirty_blocks=624 [ 166.589411][T10676] EXT4-fs (loop5): Block reservation details [ 166.596008][T10676] EXT4-fs (loop5): i_reserved_data_blocks=39 [ 166.630243][T10655] syz.7.2062 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 166.644234][T10621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.654251][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.7.2062 Tainted: G W syzkaller #0 PREEMPT(full) [ 166.654409][T10655] Tainted: [W]=WARN [ 166.654416][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.654431][T10655] Call Trace: [ 166.654499][T10655] [ 166.654508][T10655] __dump_stack+0x1d/0x30 [ 166.654543][T10655] dump_stack_lvl+0x95/0xd0 [ 166.654624][T10655] dump_stack+0x15/0x1b [ 166.654648][T10655] dump_header+0x80/0x240 [ 166.654683][T10655] oom_kill_process+0x295/0x350 [ 166.654781][T10655] out_of_memory+0x97d/0xb80 [ 166.654823][T10655] try_charge_memcg+0x62e/0xa10 [ 166.654869][T10655] obj_cgroup_charge_pages+0x23/0xc0 [ 166.654898][T10655] __memcg_kmem_charge_page+0x9e/0x170 [ 166.654947][T10655] __alloc_frozen_pages_noprof+0x18a/0x350 [ 166.655019][T10655] alloc_pages_mpol+0xb3/0x260 [ 166.655042][T10655] alloc_pages_noprof+0x8f/0x130 [ 166.655063][T10655] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 166.655117][T10655] __kvmalloc_node_noprof+0x471/0x680 [ 166.655265][T10655] ? ip_set_alloc+0x24/0x30 [ 166.655303][T10655] ? ip_set_alloc+0x24/0x30 [ 166.655409][T10655] ip_set_alloc+0x24/0x30 [ 166.655440][T10655] hash_netiface_create+0x282/0x740 [ 166.655502][T10655] ? __pfx_hash_netiface_create+0x10/0x10 [ 166.655544][T10655] ip_set_create+0x3cf/0x970 [ 166.655634][T10655] ? __nla_parse+0x40/0x60 [ 166.655682][T10655] nfnetlink_rcv_msg+0x509/0x5d0 [ 166.655766][T10655] netlink_rcv_skb+0x123/0x220 [ 166.655806][T10655] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 166.655844][T10655] nfnetlink_rcv+0x167/0x1720 [ 166.655886][T10655] ? __kfree_skb+0x109/0x150 [ 166.655955][T10655] ? nlmon_xmit+0x4f/0x60 [ 166.655988][T10655] ? consume_skb+0x49/0x140 [ 166.656077][T10655] ? nlmon_xmit+0x4f/0x60 [ 166.656111][T10655] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 166.656178][T10655] ? __dev_queue_xmit+0x139a/0x1f20 [ 166.656201][T10655] ? __dev_queue_xmit+0x148/0x1f20 [ 166.656224][T10655] ? ref_tracker_free+0x37d/0x3e0 [ 166.656273][T10655] ? __netlink_deliver_tap+0x4dc/0x500 [ 166.656343][T10655] netlink_unicast+0x5c0/0x690 [ 166.656450][T10655] netlink_sendmsg+0x5c8/0x6f0 [ 166.656473][T10655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.656523][T10655] ____sys_sendmsg+0x5af/0x600 [ 166.656591][T10621] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.656666][T10655] ___sys_sendmsg+0x195/0x1e0 [ 166.656791][T10655] __x64_sys_sendmsg+0xd4/0x160 [ 166.657023][T10655] x64_sys_call+0x194c/0x3020 [ 166.657114][T10655] do_syscall_64+0x12c/0x370 [ 166.657257][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.657335][T10655] RIP: 0033:0x7f4d73bfbf79 [ 166.657390][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.657490][T10655] RSP: 002b:00007f4d72657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.657554][T10655] RAX: ffffffffffffffda RBX: 00007f4d73e75fa0 RCX: 00007f4d73bfbf79 [ 166.657604][T10655] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 166.657647][T10655] RBP: 00007f4d73c927e0 R08: 0000000000000000 R09: 0000000000000000 [ 166.657703][T10655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.657792][T10655] R13: 00007f4d73e76038 R14: 00007f4d73e75fa0 R15: 00007fff6e2d9e48 [ 166.657914][T10655] [ 166.666002][T10655] memory: usage 307200kB, limit 307200kB, failcnt 2535 [ 166.761931][T10621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.790672][T10655] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 166.845047][T10621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.986667][T10655] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 167.002884][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.017586][T10655] Memory cgroup stats for [ 167.018325][ T9315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.025682][T10655] /syz7 [ 167.040837][ T9315] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.050880][T10655] : [ 167.054463][ T9315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.057973][T10655] cache 0 [ 167.069117][T10655] rss 8192 [ 167.073429][T10655] shmem 0 [ 167.077936][T10655] mapped_file 0 [ 167.083233][T10655] dirty 0 [ 167.087967][T10655] writeback 0 [ 167.095586][ T6150] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.108882][T10655] workingset_refault_anon 132 [ 167.115029][T10655] workingset_refault_file 0 [ 167.119884][T10655] swap 532480 [ 167.123319][T10655] swapcached 12288 [ 167.127383][T10655] pgpgin 44590 [ 167.131153][T10655] pgpgout 44587 [ 167.171691][T10655] pgfault 38008 [ 167.199948][T10621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.206607][T10655] pgmajfault 94 [ 167.210374][T10655] inactive_anon 0 [ 167.214099][T10655] active_anon 8192 [ 167.226891][T10655] inactive_file 0 [ 167.239107][T10655] active_file 0 [ 167.242887][T10655] unevictable 0 [ 167.246368][T10655] hierarchical_memory_limit 314572800 [ 167.251859][T10655] hierarchical_memsw_limit 9223372036854771712 [ 167.258083][T10655] total_cache 0 [ 167.261792][T10655] total_rss 8192 [ 167.265357][T10655] total_shmem 0 [ 167.268884][T10655] total_mapped_file 0 [ 167.273268][T10655] total_dirty 0 [ 167.276780][T10655] total_writeback 0 [ 167.281050][T10655] total_workingset_refault_anon 132 [ 167.287612][T10655] total_workingset_refault_file 0 [ 167.292758][T10655] total_swap 532480 [ 167.296641][T10655] total_swapcached 12288 [ 167.300936][T10655] total_pgpgin 44590 [ 167.304960][T10655] total_pgpgout 44587 [ 167.308998][T10655] total_pgfault 38008 [ 167.313081][T10655] total_pgmajfault 94 [ 167.317217][T10655] total_inactive_anon 0 [ 167.321389][T10655] total_active_anon 8192 [ 167.326439][T10655] total_inactive_file 0 [ 167.330674][T10655] total_active_file 0 [ 167.334705][T10655] total_unevictable 0 [ 167.338760][T10655] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2062,pid=10654,uid=0 [ 167.354959][T10655] Memory cgroup out of memory: Killed process 10654 (syz.7.2062) total-vm:96204kB, anon-rss:1220kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 167.495871][T10705] vlan2: entered promiscuous mode [ 167.512131][T10709] __nla_validate_parse: 3 callbacks suppressed [ 167.512150][T10709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2075'. [ 167.551262][T10709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2075'. [ 167.625149][T10621] veth0_vlan: entered promiscuous mode [ 167.658432][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2076'. [ 167.671094][T10621] veth1_vlan: entered promiscuous mode [ 167.690809][T10716] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 167.718567][T10621] veth0_macvtap: entered promiscuous mode [ 167.728216][T10718] loop5: detected capacity change from 0 to 7 [ 167.735308][ C0] blk_print_req_error: 2 callbacks suppressed [ 167.735327][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.753685][T10621] veth1_macvtap: entered promiscuous mode [ 167.764426][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.774056][ C1] buffer_io_error: 2 callbacks suppressed [ 167.774070][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.795248][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.804947][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.813105][T10716] FAULT_INJECTION: forcing a failure. [ 167.813105][T10716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.826265][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.835884][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.842195][T10716] CPU: 1 UID: 0 PID: 10716 Comm: syz.2.2076 Tainted: G W syzkaller #0 PREEMPT(full) [ 167.842392][T10716] Tainted: [W]=WARN [ 167.842414][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.842455][T10716] Call Trace: [ 167.842474][T10716] [ 167.842495][T10716] __dump_stack+0x1d/0x30 [ 167.842565][T10716] dump_stack_lvl+0x95/0xd0 [ 167.842648][T10716] dump_stack+0x15/0x1b [ 167.842717][T10716] should_fail_ex+0x263/0x280 [ 167.842843][T10716] should_fail+0xb/0x20 [ 167.842920][T10716] should_fail_usercopy+0x1a/0x20 [ 167.843057][T10716] _copy_from_user+0x1c/0xb0 [ 167.843280][T10716] ___sys_sendmsg+0xc1/0x1e0 [ 167.843406][T10716] __x64_sys_sendmsg+0xd4/0x160 [ 167.843479][T10716] x64_sys_call+0x194c/0x3020 [ 167.843552][T10716] do_syscall_64+0x12c/0x370 [ 167.843706][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.843836][T10716] RIP: 0033:0x7f508757bf79 [ 167.843886][T10716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.843945][T10716] RSP: 002b:00007f5085fcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.844004][T10716] RAX: ffffffffffffffda RBX: 00007f50877f5fa0 RCX: 00007f508757bf79 [ 167.844049][T10716] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 167.844206][T10716] RBP: 00007f5085fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 167.844232][T10716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.844282][T10716] R13: 00007f50877f6038 R14: 00007f50877f5fa0 R15: 00007ffefd1991b8 [ 167.844349][T10716] [ 167.845207][T10621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.856987][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.902585][T10621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.906557][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 167.912633][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 167.992222][ T407] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.996021][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.085973][ T407] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.094742][ T407] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.131873][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.135712][ T28] audit: type=1400 audit(2000000605.056:2485): avc: denied { create } for pid=10729 comm="syz.2.2082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 168.141514][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.164056][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2082'. [ 168.178199][ T407] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.188391][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.198023][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.206075][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.215673][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.223982][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 168.233573][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.243370][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 168.279153][T10730] loop2: detected capacity change from 0 to 2048 [ 168.348052][T10730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.391690][T10730] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.564813][T10744] lo speed is unknown, defaulting to 1000 [ 168.627712][ T6150] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 168.657260][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 168.668572][ T6150] CPU: 0 UID: 0 PID: 6150 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 168.668611][ T6150] Tainted: [W]=WARN [ 168.668617][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 168.668629][ T6150] Call Trace: [ 168.668635][ T6150] [ 168.668642][ T6150] __dump_stack+0x1d/0x30 [ 168.668704][ T6150] dump_stack_lvl+0x95/0xd0 [ 168.668725][ T6150] dump_stack+0x15/0x1b [ 168.668750][ T6150] dump_header+0x80/0x240 [ 168.668777][ T6150] oom_kill_process+0x295/0x350 [ 168.668812][ T6150] out_of_memory+0x97d/0xb80 [ 168.668843][ T6150] try_charge_memcg+0x62e/0xa10 [ 168.668884][ T6150] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 168.668966][ T6150] __read_swap_cache_async+0x17b/0x2d0 [ 168.668999][ T6150] swap_cluster_readahead+0x362/0x3c0 [ 168.669036][ T6150] swapin_readahead+0xde/0x840 [ 168.669154][ T6150] ? __rcu_read_unlock+0x4e/0x70 [ 168.669190][ T6150] ? __perf_event_task_sched_in+0xa65/0xad0 [ 168.669226][ T6150] ? __list_add_valid_or_report+0x38/0xe0 [ 168.669254][ T6150] ? __rcu_read_unlock+0x4e/0x70 [ 168.669349][ T6150] ? swap_cache_get_folio+0x26f/0x280 [ 168.669376][ T6150] do_swap_page+0x59b/0x2a50 [ 168.669403][ T6150] ? _raw_spin_unlock+0x9/0x30 [ 168.669435][ T6150] ? __rcu_read_lock+0x36/0x50 [ 168.669527][ T6150] ? __pfx_default_wake_function+0x10/0x10 [ 168.669603][ T6150] handle_mm_fault+0xb40/0x3030 [ 168.669635][ T6150] ? vma_start_read+0x1c7/0x2c0 [ 168.669690][ T6150] do_user_addr_fault+0x62f/0x1050 [ 168.669784][ T6150] exc_page_fault+0x62/0xa0 [ 168.669810][ T6150] asm_exc_page_fault+0x26/0x30 [ 168.669836][ T6150] RIP: 0033:0x7f9b9e287197 [ 168.669873][ T6150] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 168.669892][ T6150] RSP: 002b:00007ffe2b4ab150 EFLAGS: 00010202 [ 168.669909][ T6150] RAX: 0000000000000000 RBX: 000055557958b500 RCX: 00007f9b9e287197 [ 168.669926][ T6150] RDX: 00007ffe2b4ab190 RSI: 0000000000000000 RDI: 0000000000000000 [ 168.669989][ T6150] RBP: 00007ffe2b4ab1fc R08: 0000000000000000 R09: 0000000000000000 [ 168.670003][ T6150] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 168.670019][ T6150] R13: 00000000000927c0 R14: 000000000002879a R15: 00007ffe2b4ab250 [ 168.670047][ T6150] [ 168.670056][ T6150] memory: usage 307200kB, limit 307200kB, failcnt 939 [ 168.812291][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2086'. [ 168.830743][T10731] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2082: bg 0: block 345: padding at end of block bitmap is not set [ 168.838610][ T6150] memory+swap: usage 307408kB, limit 9007199254740988kB, failcnt 0 [ 168.908294][T10731] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1080 with error 117 [ 168.951029][ T6150] kmem: usage 286712kB, limit 9007199254740988kB, failcnt 0 [ 168.971638][T10731] EXT4-fs (loop2): This should not happen!! Data will be lost [ 168.971638][T10731] [ 169.041886][ T6150] Memory cgroup stats for /syz5: [ 169.051917][ T407] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1096 with max blocks 1 with error 28 [ 169.059915][ T6150] cache 0 [ 169.072939][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2088'. [ 169.121711][ T6150] rss 0 [ 169.123187][T10756] vlan3: entered promiscuous mode [ 169.131343][ T6150] shmem 0 [ 169.139969][ T407] EXT4-fs (loop2): This should not happen!! Data will be lost [ 169.139969][ T407] [ 169.141598][ T6150] mapped_file 0 [ 169.174864][ T6150] dirty 0 [ 169.177890][ T6150] writeback 0 [ 169.181270][ T6150] workingset_refault_anon 224 [ 169.189790][ T407] EXT4-fs (loop2): Total free blocks count 0 [ 169.197168][ T6150] workingset_refault_file 0 [ 169.204876][ T407] EXT4-fs (loop2): Free/Dirty block details [ 169.209264][ T6150] swap 212992 [ 169.216823][ T6150] swapcached 0 [ 169.220321][ T407] EXT4-fs (loop2): free_blocks=0 [ 169.225013][ T6150] pgpgin 43324 [ 169.226189][ T407] EXT4-fs (loop2): dirty_blocks=16 [ 169.231342][ T6150] pgpgout 43323 [ 169.239913][ T407] EXT4-fs (loop2): Block reservation details [ 169.246636][ T6150] pgfault 59622 [ 169.281697][ T6150] pgmajfault 126 [ 169.285287][ T6150] inactive_anon 0 [ 169.295681][ T6150] active_anon 0 [ 169.301082][T10762] lo speed is unknown, defaulting to 1000 [ 169.306936][ T6150] inactive_file 0 [ 169.318813][ T6150] active_file 4096 [ 169.326346][ T6150] unevictable 0 [ 169.334502][ T6150] hierarchical_memory_limit 314572800 [ 169.344146][T10764] netlink: 'syz.2.2091': attribute type 6 has an invalid length. [ 169.344970][ T6150] hierarchical_memsw_limit 9223372036854771712 [ 169.372014][ T6150] total_cache 0 [ 169.379903][ T6150] total_rss 0 [ 169.386727][ T6150] total_shmem 0 [ 169.393671][ T6150] total_mapped_file 0 [ 169.402226][ T6150] total_dirty 0 [ 169.409163][ T6150] total_writeback 0 [ 169.413665][T10754] loop7: detected capacity change from 0 to 32768 [ 169.420219][ T6150] total_workingset_refault_anon 224 [ 169.427563][ T6150] total_workingset_refault_file 0 [ 169.432723][ T6150] total_swap 212992 [ 169.437152][ T6150] total_swapcached 0 [ 169.441345][ T6150] total_pgpgin 43324 [ 169.445641][ T6150] total_pgpgout 43323 [ 169.449717][ T6150] total_pgfault 59622 [ 169.474234][T10762] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 169.479767][ T6150] total_pgmajfault 126 [ 169.480878][T10762] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.491024][ T6150] total_inactive_anon 0 [ 169.502050][T10762] vhci_hcd vhci_hcd.0: Device attached [ 169.512308][ T6150] total_active_anon 0 [ 169.516434][ T6150] total_inactive_file 0 [ 169.520789][ T6150] total_active_file 4096 [ 169.525086][ T6150] total_unevictable 0 [ 169.529184][ T6150] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2084,pid=10736,uid=0 [ 169.544089][T10762] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 169.550705][T10762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 169.560826][T10762] vhci_hcd vhci_hcd.0: Device attached [ 169.566448][ T6150] Memory cgroup out of memory: Killed process 10736 (syz.5.2084) total-vm:96204kB, anon-rss:1220kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 169.585033][T10774] vhci_hcd: connection closed [ 169.594669][T10769] vhci_hcd: connection closed [ 169.600226][ T9328] vhci_hcd vhci_hcd.2: stop threads [ 169.634446][ T9328] vhci_hcd vhci_hcd.2: release socket [ 169.645001][ T9328] vhci_hcd vhci_hcd.2: disconnect device [ 169.660643][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2095'. [ 169.677051][ T9328] vhci_hcd vhci_hcd.2: stop threads [ 169.682365][ T9328] vhci_hcd vhci_hcd.2: release socket [ 169.709176][ T9328] vhci_hcd vhci_hcd.2: disconnect device [ 169.751928][ T3360] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 170.035860][T10759] syz.8.2090 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 170.063559][T10792] program syz.5.2096 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.102349][T10795] lo speed is unknown, defaulting to 1000 [ 170.115280][T10759] CPU: 1 UID: 0 PID: 10759 Comm: syz.8.2090 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.115327][T10759] Tainted: [W]=WARN [ 170.115334][T10759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 170.115346][T10759] Call Trace: [ 170.115353][T10759] [ 170.115360][T10759] __dump_stack+0x1d/0x30 [ 170.115429][T10759] dump_stack_lvl+0x95/0xd0 [ 170.115459][T10759] dump_stack+0x15/0x1b [ 170.115486][T10759] dump_header+0x80/0x240 [ 170.115566][T10759] oom_kill_process+0x295/0x350 [ 170.115600][T10759] out_of_memory+0x97d/0xb80 [ 170.115702][T10759] try_charge_memcg+0x62e/0xa10 [ 170.115744][T10759] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 170.115778][T10759] __read_swap_cache_async+0x17b/0x2d0 [ 170.115813][T10759] swap_cluster_readahead+0x262/0x3c0 [ 170.115890][T10759] swapin_readahead+0xde/0x840 [ 170.115915][T10759] ? __rcu_read_unlock+0x33/0x70 [ 170.116005][T10759] ? __rcu_read_unlock+0x4e/0x70 [ 170.116097][T10759] ? swap_cache_get_folio+0x26f/0x280 [ 170.116152][T10759] do_swap_page+0x59b/0x2a50 [ 170.116182][T10759] ? __rcu_read_lock+0x36/0x50 [ 170.116222][T10759] ? __pfx_default_wake_function+0x10/0x10 [ 170.116444][T10759] handle_mm_fault+0xb40/0x3030 [ 170.116611][T10759] ? vma_start_read+0x1c7/0x2c0 [ 170.116660][T10759] do_user_addr_fault+0x62f/0x1050 [ 170.116697][T10759] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 170.116778][T10759] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 170.116912][T10759] ? irqentry_exit+0x3c/0x520 [ 170.116941][T10759] exc_page_fault+0x62/0xa0 [ 170.117007][T10759] asm_exc_page_fault+0x26/0x30 [ 170.117034][T10759] RIP: 0033:0x7f68792a99d0 [ 170.117055][T10759] Code: c4 4c 0f 42 e0 83 3d fa e3 3a 00 00 0f 8e d9 fd ff ff e8 f3 87 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be bc ed 00 e8 03 00 00 48 8d 1d bf c5 3a 00 e8 ca 30 13 00 [ 170.117074][T10759] RSP: 002b:00007ffdc935b710 EFLAGS: 00010206 [ 170.117168][T10759] RAX: 0000000000028d66 RBX: 00007f6879657da0 RCX: 0000000000028c58 [ 170.117182][T10759] RDX: 000000000000010e RSI: 00007ffdc935b6f0 RDI: 0000000000000001 [ 170.117195][T10759] RBP: 00007f6879657da0 R08: 00000000101adbfc R09: 7fffffffffffffff [ 170.117210][T10759] R10: 3fffffffffffffff R11: 0000000000000246 R12: 0000000000028dd8 [ 170.117228][T10759] R13: 00007f687965609c R14: 0000000000028b16 R15: 00007f6879656090 [ 170.117251][T10759] [ 170.524069][T10759] memory: usage 221724kB, limit 307200kB, failcnt 275 [ 170.531131][T10759] memory+swap: usage 214628kB, limit 9007199254740988kB, failcnt 0 [ 170.539862][T10759] kmem: usage 212996kB, limit 9007199254740988kB, failcnt 0 [ 170.547514][T10759] Memory cgroup stats for /syz8: [ 170.547817][T10759] cache 0 [ 170.556141][T10759] rss 4096 [ 170.559357][T10759] shmem 0 [ 170.562718][T10759] mapped_file 0 [ 170.606714][T10803] loop2: detected capacity change from 0 to 512 [ 170.626004][T10759] dirty 0 [ 170.632574][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 170.654690][T10759] writeback 8192 [ 170.658354][T10759] workingset_refault_anon 33 [ 170.670275][T10759] workingset_refault_file 0 [ 170.674958][T10759] swap 188416 [ 170.678316][T10759] swapcached 8192 [ 170.682305][T10759] pgpgin 154 [ 170.685540][T10759] pgpgout 152 [ 170.688902][T10759] pgfault 343 [ 170.692250][T10759] pgmajfault 23 [ 170.695989][T10759] inactive_anon 8192 [ 170.699997][T10759] active_anon 0 [ 170.703587][T10759] inactive_file 0 [ 170.707503][T10759] active_file 0 [ 170.711052][T10759] unevictable 0 [ 170.714606][T10759] hierarchical_memory_limit 314572800 [ 170.728650][T10803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.747820][T10811] netlink: 'syz.7.2104': attribute type 15 has an invalid length. [ 170.757724][T10759] hierarchical_memsw_limit 9223372036854771712 [ 170.770829][T10759] total_cache 0 [ 170.774727][T10759] total_rss 4096 [ 170.778796][T10759] total_shmem 0 [ 170.782444][T10759] total_mapped_file 0 [ 170.786465][T10759] total_dirty 0 [ 170.790190][T10759] total_writeback 8192 [ 170.793214][T10811] netlink: 'syz.7.2104': attribute type 15 has an invalid length. [ 170.794520][T10759] total_workingset_refault_anon 33 [ 170.802218][T10378] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 170.807444][T10759] total_workingset_refault_file 0 [ 170.825846][T10759] total_swap 188416 [ 170.829747][T10759] total_swapcached 8192 [ 170.834011][T10759] total_pgpgin 154 [ 170.837872][T10759] total_pgpgout 152 [ 170.841700][T10759] total_pgfault 343 [ 170.843254][ T28] audit: type=1400 audit(2000000607.572:2486): avc: denied { read } for pid=10802 comm="syz.2.2101" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.845757][T10759] total_pgmajfault 23 [ 170.873839][T10378] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 170.875303][T10759] total_inactive_anon 8192 [ 170.886660][T10378] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 170.895101][T10378] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 170.904821][T10759] total_active_anon 0 [ 170.909311][ T28] audit: type=1400 audit(2000000607.572:2487): avc: denied { open } for pid=10802 comm="syz.2.2101" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 170.945548][T10819] loop5: detected capacity change from 0 to 256 [ 170.949264][T10759] total_inactive_file 0 [ 170.955998][T10759] total_active_file 0 [ 170.967210][T10759] total_unevictable 0 [ 170.971352][T10759] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2090,pid=10759,uid=0 [ 170.994348][ T28] audit: type=1400 audit(2000000607.572:2488): avc: denied { ioctl } for pid=10802 comm="syz.2.2101" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 171.011299][T10823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.035468][T10759] Memory cgroup out of memory: Killed process 10759 (syz.8.2090) total-vm:94084kB, anon-rss:1216kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 171.064876][ T28] audit: type=1326 audit(2000000607.768:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.110304][T10823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.143840][ T28] audit: type=1326 audit(2000000607.768:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.168182][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.215941][ T28] audit: type=1326 audit(2000000607.768:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.260071][ T28] audit: type=1326 audit(2000000607.768:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.260331][T10834] lo speed is unknown, defaulting to 1000 [ 171.284429][ T28] audit: type=1326 audit(2000000607.768:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.314366][T10832] netlink: 'syz.8.2110': attribute type 1 has an invalid length. [ 171.325348][ T28] audit: type=1326 audit(2000000607.787:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.349172][ T28] audit: type=1326 audit(2000000607.834:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10818 comm="syz.5.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 171.422930][T10837] netlink: 'syz.3.2112': attribute type 6 has an invalid length. [ 171.542295][T10853] program syz.8.2116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.802561][T10856] batman_adv: batadv0: Adding interface: ipvlan2 [ 171.816070][T10856] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.842581][T10856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.854032][T10856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.877560][T10856] batman_adv: batadv0: Interface activated: ipvlan2 [ 171.973229][T10864] lo speed is unknown, defaulting to 1000 [ 171.991497][ T9328] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.074160][ T9328] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.139962][ T9328] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.148826][ T9328] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.228031][T10873] vlan3: entered promiscuous mode [ 172.545183][T10891] dvmrp6: entered allmulticast mode [ 172.789129][T10905] syz.3.2134: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 172.789203][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.3.2134 Tainted: G W syzkaller #0 PREEMPT(full) [ 172.789324][T10905] Tainted: [W]=WARN [ 172.789331][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 172.789349][T10905] Call Trace: [ 172.789357][T10905] [ 172.789366][T10905] __dump_stack+0x1d/0x30 [ 172.789397][T10905] dump_stack_lvl+0x95/0xd0 [ 172.789423][T10905] dump_stack+0x15/0x1b [ 172.789469][T10905] warn_alloc+0x145/0x1c0 [ 172.789529][T10905] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 172.789571][T10905] ? preempt_schedule_thunk+0x16/0x30 [ 172.789626][T10905] ? __rcu_read_unlock+0x4e/0x70 [ 172.789684][T10905] ? avc_has_perm_noaudit+0xab/0x130 [ 172.789724][T10905] ? should_fail_ex+0x30/0x280 [ 172.789754][T10905] ? should_failslab+0x8c/0xb0 [ 172.789928][T10905] vmalloc_user_noprof+0x7d/0xb0 [ 172.789962][T10905] ? xskq_create+0x80/0xe0 [ 172.790007][T10905] xskq_create+0x80/0xe0 [ 172.790136][T10905] xsk_init_queue+0x91/0xe0 [ 172.790167][T10905] xsk_setsockopt+0x3f5/0x640 [ 172.790281][T10905] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.790396][T10905] __sys_setsockopt+0x184/0x200 [ 172.790448][T10905] __x64_sys_setsockopt+0x64/0x80 [ 172.790493][T10905] x64_sys_call+0x2327/0x3020 [ 172.790603][T10905] do_syscall_64+0x12c/0x370 [ 172.790639][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.790738][T10905] RIP: 0033:0x7f2742a8bf79 [ 172.790757][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.790780][T10905] RSP: 002b:00007f27414df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.790841][T10905] RAX: ffffffffffffffda RBX: 00007f2742d05fa0 RCX: 00007f2742a8bf79 [ 172.790855][T10905] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 172.790868][T10905] RBP: 00007f2742b227e0 R08: 0000000000000004 R09: 0000000000000000 [ 172.790882][T10905] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.790897][T10905] R13: 00007f2742d06038 R14: 00007f2742d05fa0 R15: 00007ffdaae9f028 [ 172.790977][T10905] [ 172.790984][T10905] Mem-Info: [ 172.791003][T10905] active_anon:11947 inactive_anon:11 isolated_anon:0 [ 172.791003][T10905] active_file:9307 inactive_file:13879 isolated_file:0 [ 172.791003][T10905] unevictable:0 dirty:195 writeback:1 [ 172.791003][T10905] slab_reclaimable:3714 slab_unreclaimable:38024 [ 172.791003][T10905] mapped:30205 shmem:589 pagetables:1696 [ 172.791003][T10905] sec_pagetables:0 bounce:0 [ 172.791003][T10905] kernel_misc_reclaimable:0 [ 172.791003][T10905] free:1775731 free_pcp:32187 free_cma:0 [ 172.791199][T10905] Node 0 active_anon:47788kB inactive_anon:44kB active_file:37228kB inactive_file:55516kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120820kB dirty:780kB writeback:4kB shmem:2356kB kernel_stack:5136kB pagetables:6784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 172.791255][T10905] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.791392][T10905] lowmem_reserve[]: 0 2880 7859 7859 [ 172.791442][T10905] Node 0 DMA32 free:2945816kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949448kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 172.791544][T10905] lowmem_reserve[]: 0 0 4978 4978 [ 172.791580][T10905] Node 0 Normal free:4141748kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:47788kB inactive_anon:44kB active_file:37228kB inactive_file:55516kB unevictable:0kB writepending:784kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:126216kB local_pcp:88308kB free_cma:0kB [ 172.791669][T10905] lowmem_reserve[]: 0 0 0 0 [ 172.791702][T10905] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.791995][T10905] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 1*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2945816kB [ 172.792228][T10905] Node 0 Normal: 3480*4kB (UM) 2515*8kB (UM) 1002*16kB (UME) 1285*32kB (UME) 866*64kB (UME) 520*128kB (UME) 374*256kB (UME) 348*512kB (UM) 273*1024kB (UM) 208*2048kB (UM) 720*4096kB (UM) = 4141752kB [ 172.792551][T10905] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 172.792571][T10905] 23774 total pagecache pages [ 172.792587][T10905] 12 pages in swap cache [ 172.792595][T10905] Free swap = 124212kB [ 172.792604][T10905] Total swap = 124996kB [ 172.792612][T10905] 2097051 pages RAM [ 172.792620][T10905] 0 pages HighMem/MovableOnly [ 172.792628][T10905] 81289 pages reserved [ 172.809934][T10903] lo speed is unknown, defaulting to 1000 [ 172.833123][T10909] netlink: 'syz.2.2133': attribute type 6 has an invalid length. [ 172.892601][T10903] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 172.892641][T10903] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 172.893160][T10903] vhci_hcd vhci_hcd.0: Device attached [ 172.900415][T10903] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 172.900444][T10903] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 172.900479][T10903] vhci_hcd vhci_hcd.0: Device attached [ 172.900894][T10915] vhci_hcd: connection closed [ 172.900957][ T9328] vhci_hcd vhci_hcd.2: stop threads [ 172.901004][ T9328] vhci_hcd vhci_hcd.2: release socket [ 172.901018][ T9328] vhci_hcd vhci_hcd.2: disconnect device [ 172.901117][T10917] vhci_hcd: connection closed [ 172.901234][ T9328] vhci_hcd vhci_hcd.2: stop threads [ 172.901247][ T9328] vhci_hcd vhci_hcd.2: release socket [ 172.901261][ T9328] vhci_hcd vhci_hcd.2: disconnect device [ 173.301210][T10930] __nla_validate_parse: 19 callbacks suppressed [ 173.301239][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2140'. [ 173.301294][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2140'. [ 173.587219][T10934] syz.8.2143 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 173.587260][T10934] CPU: 1 UID: 0 PID: 10934 Comm: syz.8.2143 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.587292][T10934] Tainted: [W]=WARN [ 173.587304][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.587325][T10934] Call Trace: [ 173.587331][T10934] [ 173.587338][T10934] __dump_stack+0x1d/0x30 [ 173.587365][T10934] dump_stack_lvl+0x95/0xd0 [ 173.587471][T10934] dump_stack+0x15/0x1b [ 173.587509][T10934] dump_header+0x80/0x240 [ 173.587537][T10934] oom_kill_process+0x295/0x350 [ 173.587579][T10934] out_of_memory+0x97d/0xb80 [ 173.587636][T10934] try_charge_memcg+0x62e/0xa10 [ 173.587701][T10934] obj_cgroup_charge_pages+0x23/0xc0 [ 173.587788][T10934] __memcg_kmem_charge_page+0x9e/0x170 [ 173.587854][T10934] __alloc_frozen_pages_noprof+0x18a/0x350 [ 173.587900][T10934] alloc_pages_mpol+0xb3/0x260 [ 173.587930][T10934] alloc_pages_noprof+0x8f/0x130 [ 173.588018][T10934] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 173.588075][T10934] __kvmalloc_node_noprof+0x471/0x680 [ 173.588115][T10934] ? ip_set_alloc+0x24/0x30 [ 173.588151][T10934] ? ip_set_alloc+0x24/0x30 [ 173.588259][T10934] ip_set_alloc+0x24/0x30 [ 173.588317][T10934] hash_netiface_create+0x282/0x740 [ 173.588361][T10934] ? __pfx_hash_netiface_create+0x10/0x10 [ 173.588403][T10934] ip_set_create+0x3cf/0x970 [ 173.588441][T10934] ? __nla_parse+0x40/0x60 [ 173.588493][T10934] nfnetlink_rcv_msg+0x509/0x5d0 [ 173.588550][T10934] netlink_rcv_skb+0x123/0x220 [ 173.588584][T10934] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 173.588660][T10934] nfnetlink_rcv+0x167/0x1720 [ 173.588764][T10934] ? __kfree_skb+0x109/0x150 [ 173.588797][T10934] ? nlmon_xmit+0x4f/0x60 [ 173.588827][T10934] ? consume_skb+0x49/0x140 [ 173.588998][T10934] ? nlmon_xmit+0x4f/0x60 [ 173.589042][T10934] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 173.589091][T10934] ? __dev_queue_xmit+0x139a/0x1f20 [ 173.589113][T10934] ? __dev_queue_xmit+0x148/0x1f20 [ 173.589206][T10934] ? ref_tracker_free+0x37d/0x3e0 [ 173.589272][T10934] ? __netlink_deliver_tap+0x4dc/0x500 [ 173.589307][T10934] netlink_unicast+0x5c0/0x690 [ 173.589416][T10934] netlink_sendmsg+0x5c8/0x6f0 [ 173.589474][T10934] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.589500][T10934] ____sys_sendmsg+0x5af/0x600 [ 173.589534][T10934] ___sys_sendmsg+0x195/0x1e0 [ 173.589652][T10934] __x64_sys_sendmsg+0xd4/0x160 [ 173.589685][T10934] x64_sys_call+0x194c/0x3020 [ 173.589777][T10934] do_syscall_64+0x12c/0x370 [ 173.589819][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.589846][T10934] RIP: 0033:0x7f68793dbf79 [ 173.589866][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.589963][T10934] RSP: 002b:00007f6877e2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.589988][T10934] RAX: ffffffffffffffda RBX: 00007f6879655fa0 RCX: 00007f68793dbf79 [ 173.590006][T10934] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 173.590022][T10934] RBP: 00007f68794727e0 R08: 0000000000000000 R09: 0000000000000000 [ 173.590039][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.590132][T10934] R13: 00007f6879656038 R14: 00007f6879655fa0 R15: 00007ffdc935b5a8 [ 173.590160][T10934] [ 173.596670][T10934] memory: usage 292900kB, limit 307200kB, failcnt 386 [ 173.596685][T10934] memory+swap: usage 293088kB, limit 9007199254740988kB, failcnt 0 [ 173.596703][T10934] kmem: usage 292652kB, limit 9007199254740988kB, failcnt 0 [ 173.596715][T10934] Memory cgroup stats for /syz8: [ 173.596925][T10934] cache 0 [ 173.596936][T10934] rss 4096 [ 173.596978][T10934] shmem 0 [ 173.596987][T10934] mapped_file 0 [ 173.597020][T10934] dirty 0 [ 173.597027][T10934] writeback 0 [ 173.597035][T10934] workingset_refault_anon 92 [ 173.597203][T10934] workingset_refault_file 0 [ 173.597215][T10934] swap 192512 [ 173.597258][T10934] swapcached 8192 [ 173.597265][T10934] pgpgin 495 [ 173.597271][T10934] pgpgout 493 [ 173.597279][T10934] pgfault 1067 [ 173.597287][T10934] pgmajfault 54 [ 173.597295][T10934] inactive_anon 4096 [ 173.597310][T10934] active_anon 0 [ 173.597319][T10934] inactive_file 0 [ 173.597328][T10934] active_file 0 [ 173.597336][T10934] unevictable 0 [ 173.597345][T10934] hierarchical_memory_limit 314572800 [ 173.597429][T10934] hierarchical_memsw_limit 9223372036854771712 [ 173.597688][T10934] total_cache 0 [ 173.597730][T10934] total_rss 4096 [ 173.597736][T10934] total_shmem 0 [ 173.597743][T10934] total_mapped_file 0 [ 173.597752][T10934] total_dirty 0 [ 173.597761][T10934] total_writeback 0 [ 173.597770][T10934] total_workingset_refault_anon 92 [ 173.597788][T10934] total_workingset_refault_file 0 [ 173.597798][T10934] total_swap 192512 [ 173.597807][T10934] total_swapcached 8192 [ 173.597816][T10934] total_pgpgin 495 [ 173.597824][T10934] total_pgpgout 493 [ 173.597895][T10934] total_pgfault 1067 [ 173.597905][T10934] total_pgmajfault 54 [ 173.597915][T10934] total_inactive_anon 4096 [ 173.597977][T10934] total_active_anon 0 [ 173.597995][T10934] total_inactive_file 0 [ 173.598003][T10934] total_active_file 0 [ 173.598009][T10934] total_unevictable 0 [ 173.598020][T10934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2143,pid=10933,uid=0 [ 173.598176][T10934] Memory cgroup out of memory: Killed process 10933 (syz.8.2143) total-vm:94084kB, anon-rss:1216kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 173.608808][T10937] lo speed is unknown, defaulting to 1000 [ 173.686637][T10943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2145'. [ 173.689769][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2145'. [ 173.989212][T10955] loop2: detected capacity change from 0 to 512 [ 173.996787][T10955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 174.788005][T10955] EXT4-fs (loop2): 1 truncate cleaned up [ 174.794163][T10955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.982782][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.029107][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2155'. [ 175.051083][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2155'. [ 175.080503][T10982] loop5: detected capacity change from 0 to 4096 [ 175.124238][T10982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.299588][T10982] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 175.344058][T11001] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 175.548645][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 175.567329][T11006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 175.588957][T11008] lo speed is unknown, defaulting to 1000 [ 175.623796][T11009] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1553 sclass=netlink_route_socket pid=11009 comm=syz.8.2164 [ 175.709385][T11008] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11008 comm=syz.8.2164 [ 175.736389][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2164'. [ 175.913746][T11021] netlink: 380 bytes leftover after parsing attributes in process `syz.8.2169'. [ 175.969510][ T6150] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.139016][T11033] lo speed is unknown, defaulting to 1000 [ 176.162953][T11036] netlink: 'syz.5.2172': attribute type 6 has an invalid length. [ 176.224252][T11035] loop8: detected capacity change from 0 to 164 [ 176.259121][T11033] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 176.265872][T11033] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 176.288454][T11033] vhci_hcd vhci_hcd.0: Device attached [ 176.296330][T11035] isofs_fill_super: root inode is not a directory. Corrupted media? [ 176.306495][T11033] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(12) [ 176.313124][T11033] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 176.396420][T11033] vhci_hcd vhci_hcd.0: Device attached [ 176.408452][T11041] vhci_hcd: connection closed [ 176.410531][ T9307] vhci_hcd vhci_hcd.5: stop threads [ 176.410670][T11039] vhci_hcd: connection closed [ 176.432576][ T9307] vhci_hcd vhci_hcd.5: release socket [ 176.447456][ T9307] vhci_hcd vhci_hcd.5: disconnect device [ 176.458172][ T9307] vhci_hcd vhci_hcd.5: stop threads [ 176.465626][ T9307] vhci_hcd vhci_hcd.5: release socket [ 176.476247][ T3414] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 176.486944][ T9307] vhci_hcd vhci_hcd.5: disconnect device [ 176.540587][ T3414] usb 11-1: new full-speed USB device number 3 using vhci_hcd [ 176.555200][ T3414] usb 11-1: enqueue for inactive port 0 [ 176.564651][ T3414] usb 11-1: enqueue for inactive port 0 [ 176.572826][ T3414] usb 11-1: enqueue for inactive port 0 [ 176.648607][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 176.648625][ T28] audit: type=1400 audit(2000000613.025:2665): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 176.675698][ T3414] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 176.862114][T11054] netlink: 'syz.2.2178': attribute type 10 has an invalid length. [ 177.672856][ T28] audit: type=1326 audit(2000000613.970:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 177.729912][ T28] audit: type=1326 audit(2000000613.979:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 177.812221][ T28] audit: type=1326 audit(2000000613.979:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 177.897376][ T28] audit: type=1326 audit(2000000613.989:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 177.983697][ T28] audit: type=1326 audit(2000000613.989:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 178.032263][ T28] audit: type=1326 audit(2000000613.989:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 178.090232][ T28] audit: type=1326 audit(2000000614.026:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 178.149945][ T28] audit: type=1326 audit(2000000614.026:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 178.176467][T11117] lo speed is unknown, defaulting to 1000 [ 178.218031][ T28] audit: type=1326 audit(2000000614.035:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11097 comm="syz.8.2194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68793dbf79 code=0x7ffc0000 [ 178.435165][T11129] program syz.5.2203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.477443][T11132] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 178.557530][T11137] loop2: detected capacity change from 0 to 512 [ 178.572790][T11139] loop5: detected capacity change from 0 to 128 [ 178.629536][T11139] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 178.642383][T11137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.662264][T11137] ext4 filesystem being mounted at /382/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.677112][T11139] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.681221][T11137] __nla_validate_parse: 3 callbacks suppressed [ 178.681268][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2206'. [ 178.727181][T11137] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2206'. [ 178.747093][T11145] netlink: 17 bytes leftover after parsing attributes in process `syz.7.2208'. [ 178.767021][T11145] loop7: detected capacity change from 0 to 512 [ 178.789692][T11139] EXT4-fs warning (device loop5): ext4_group_add:1736: No reserved GDT blocks, can't resize [ 178.805603][T11145] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2208: inode has both inline data and extents flags [ 178.838590][T11148] loop8: detected capacity change from 0 to 4096 [ 178.846883][T11145] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.847019][T11145] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2208: couldn't read orphan inode 15 (err -117) [ 178.880247][T11148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.917205][T11145] loop7: lost filesystem error report for type 5 error -117 [ 178.917897][T11145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.947826][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.957533][T11148] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 178.976680][T11148] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 179.003105][T11155] wireguard0: left promiscuous mode [ 179.008535][T11155] wireguard0: left allmulticast mode [ 179.014172][T11155] bond2: left allmulticast mode [ 179.022168][T11155] bond0: left promiscuous mode [ 179.028149][T11155] gretap1: left allmulticast mode [ 179.037449][T11155] netlink: 'syz.2.2210': attribute type 4 has an invalid length. [ 179.171320][T11164] loop2: detected capacity change from 0 to 512 [ 179.179827][T11164] EXT4-fs: Ignoring removed oldalloc option [ 179.187638][T11164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 179.198698][T11164] EXT4-fs (loop2): 1 truncate cleaned up [ 179.205322][T11164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.249147][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.267676][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.298902][T11169] lo speed is unknown, defaulting to 1000 [ 179.381746][ T6150] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.409508][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 179.427427][T11179] vlan0: entered promiscuous mode [ 179.445725][T11181] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2219'. [ 180.774477][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.905507][T11209] IPv6: Can't replace route, no match found [ 180.929779][T11212] loop8: detected capacity change from 0 to 512 [ 181.077421][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2231'. [ 181.121176][T11212] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.123574][T11222] vlan2: entered promiscuous mode [ 181.227323][T11212] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.262752][T11230] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2232'. [ 181.294862][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.316399][T11227] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2232'. [ 181.339496][T11227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2232'. [ 181.369213][T11227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2232'. [ 181.448373][T11245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28973 sclass=netlink_route_socket pid=11245 comm=syz.5.2236 [ 181.616843][T11250] loop8: detected capacity change from 0 to 8192 [ 181.685785][T11262] netlink: 'syz.2.2242': attribute type 10 has an invalid length. [ 181.774426][T11266] loop2: detected capacity change from 0 to 512 [ 181.798926][T11266] EXT4-fs: Ignoring removed oldalloc option [ 181.836519][T11266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 181.883057][T11266] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2243: iget: bogus i_mode (4) [ 181.912197][T11266] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 181.912434][T11266] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2243: couldn't read orphan inode 15 (err -117) [ 181.997741][T11266] loop2: lost filesystem error report for type 5 error -117 [ 182.003813][T11266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.025750][T10621] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 182.042866][T10621] FAT-fs (loop8): Filesystem has been set read-only [ 182.057056][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 182.057071][ T28] audit: type=1400 audit(2000000618.086:2712): avc: denied { unmount } for pid=10621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 182.146155][T11269] program syz.8.2244 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.156030][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.218381][T11274] program syz.2.2245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.293692][ T28] audit: type=1400 audit(2000000618.292:2713): avc: denied { read } for pid=11276 comm="syz.2.2247" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 182.361466][ T28] audit: type=1400 audit(2000000618.292:2714): avc: denied { open } for pid=11276 comm="syz.2.2247" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 182.448725][ T407] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.457749][ T407] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.481870][ T407] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.503907][ T407] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 182.620825][T11297] loop8: detected capacity change from 0 to 4096 [ 182.648634][T11297] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 182.786475][T11297] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.809161][T11301] syz.7.2255 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 182.824964][T11301] CPU: 1 UID: 0 PID: 11301 Comm: syz.7.2255 Tainted: G W syzkaller #0 PREEMPT(full) [ 182.825002][T11301] Tainted: [W]=WARN [ 182.825009][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 182.825065][T11301] Call Trace: [ 182.825075][T11301] [ 182.825086][T11301] __dump_stack+0x1d/0x30 [ 182.825128][T11301] dump_stack_lvl+0x95/0xd0 [ 182.825173][T11301] dump_stack+0x15/0x1b [ 182.825199][T11301] dump_header+0x80/0x240 [ 182.825221][T11301] oom_kill_process+0x295/0x350 [ 182.825255][T11301] out_of_memory+0x97d/0xb80 [ 182.825307][T11301] try_charge_memcg+0x62e/0xa10 [ 182.825347][T11301] obj_cgroup_charge_pages+0x23/0xc0 [ 182.825396][T11301] __memcg_kmem_charge_page+0x9e/0x170 [ 182.825502][T11301] __alloc_frozen_pages_noprof+0x18a/0x350 [ 182.825622][T11301] alloc_pages_mpol+0xb3/0x260 [ 182.825666][T11301] alloc_pages_noprof+0x8f/0x130 [ 182.825697][T11301] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 182.825825][T11301] __kvmalloc_node_noprof+0x471/0x680 [ 182.825873][T11301] ? ip_set_alloc+0x24/0x30 [ 182.826048][T11301] ? ip_set_alloc+0x24/0x30 [ 182.826133][T11301] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 182.826234][T11301] ip_set_alloc+0x24/0x30 [ 182.826265][T11301] hash_netiface_create+0x282/0x740 [ 182.826378][T11301] ? __pfx_hash_netiface_create+0x10/0x10 [ 182.826415][T11301] ip_set_create+0x3cf/0x970 [ 182.826528][T11301] ? __nla_parse+0x40/0x60 [ 182.826597][T11301] nfnetlink_rcv_msg+0x509/0x5d0 [ 182.826655][T11301] netlink_rcv_skb+0x123/0x220 [ 182.826764][T11301] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 182.826879][T11301] nfnetlink_rcv+0x167/0x1720 [ 182.826916][T11301] ? __kfree_skb+0x109/0x150 [ 182.826949][T11301] ? nlmon_xmit+0x4f/0x60 [ 182.827059][T11301] ? consume_skb+0x49/0x140 [ 182.827203][T11301] ? nlmon_xmit+0x4f/0x60 [ 182.827282][T11301] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 182.827332][T11301] ? __dev_queue_xmit+0x139a/0x1f20 [ 182.827357][T11301] ? __dev_queue_xmit+0x148/0x1f20 [ 182.827416][T11301] ? strlen+0x19/0x40 [ 182.827459][T11301] ? ref_tracker_free+0x37d/0x3e0 [ 182.827574][T11301] ? __netlink_deliver_tap+0x4dc/0x500 [ 182.827667][T11301] netlink_unicast+0x5c0/0x690 [ 182.827714][T11301] netlink_sendmsg+0x5c8/0x6f0 [ 182.827747][T11301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.827804][T11301] ____sys_sendmsg+0x5af/0x600 [ 182.827836][T11301] ___sys_sendmsg+0x195/0x1e0 [ 182.827881][T11301] __x64_sys_sendmsg+0xd4/0x160 [ 182.827924][T11301] x64_sys_call+0x194c/0x3020 [ 182.827960][T11301] do_syscall_64+0x12c/0x370 [ 182.828006][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.828116][T11301] RIP: 0033:0x7f4d73bfbf79 [ 182.828141][T11301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.828168][T11301] RSP: 002b:00007f4d72657028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.828199][T11301] RAX: ffffffffffffffda RBX: 00007f4d73e75fa0 RCX: 00007f4d73bfbf79 [ 182.828218][T11301] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 182.828236][T11301] RBP: 00007f4d73c927e0 R08: 0000000000000000 R09: 0000000000000000 [ 182.828319][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.828335][T11301] R13: 00007f4d73e76038 R14: 00007f4d73e75fa0 R15: 00007fff6e2d9e48 [ 182.828357][T11301] [ 183.169954][T11301] memory: usage 256756kB, limit 307200kB, failcnt 6282 [ 183.254310][T11301] memory+swap: usage 106152kB, limit 9007199254740988kB, failcnt 0 [ 183.265720][T11301] kmem: usage 101448kB, limit 9007199254740988kB, failcnt 0 [ 183.297251][T11301] Memory cgroup stats for /syz7: [ 183.297562][T11301] cache 0 [ 183.328313][T11301] rss 65536 [ 183.350337][T11301] shmem 0 [ 183.361063][T11301] mapped_file 0 [ 183.366331][T11301] dirty 0 [ 183.369337][T11301] writeback 0 [ 183.402250][T11312] xt_hashlimit: size too large, truncated to 1048576 [ 183.409368][T11314] program syz.5.2260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.434698][T11301] workingset_refault_anon 514 [ 183.439553][T11301] workingset_refault_file 0 [ 183.469677][T11301] swap 458752 [ 183.473067][T11301] swapcached 65536 [ 183.476810][T11301] pgpgin 77435 [ 183.487430][ T28] audit: type=1400 audit(2000000619.414:2715): avc: denied { getopt } for pid=11311 comm="syz.3.2259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.489368][T11301] pgpgout 77415 [ 183.534810][T11301] pgfault 56415 [ 183.549170][T11301] pgmajfault 292 [ 183.552759][T11301] inactive_anon 0 [ 183.569583][ T28] audit: type=1400 audit(2000000619.489:2716): avc: denied { sys_module } for pid=11311 comm="syz.3.2259" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 183.598528][T11301] active_anon 77824 [ 183.602423][T11301] inactive_file 0 [ 183.610840][T11301] active_file 0 [ 183.617089][T11301] unevictable 0 [ 183.617780][ T28] audit: type=1400 audit(2000000619.489:2717): avc: denied { module_request } for pid=11311 comm="syz.3.2259" kmod="syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 183.627708][T11301] hierarchical_memory_limit 314572800 [ 183.679073][T11301] hierarchical_memsw_limit 9223372036854771712 [ 183.685587][T11301] total_cache 0 [ 183.689074][T11301] total_rss 65536 [ 183.692836][T11301] total_shmem 0 [ 183.696390][T11301] total_mapped_file 0 [ 183.700476][T11301] total_dirty 0 [ 183.704262][T11301] total_writeback 0 [ 183.708139][T11301] total_workingset_refault_anon 514 [ 183.718930][T11301] total_workingset_refault_file 0 [ 183.723992][T11301] total_swap 458752 [ 183.727736][ T28] audit: type=1400 audit(2000000619.573:2718): avc: denied { read write } for pid=6150 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.748257][T11301] total_swapcached 65536 [ 183.768753][T11301] total_pgpgin 77435 [ 183.772880][T11301] total_pgpgout 77415 [ 183.776892][T11301] total_pgfault 56415 [ 183.788715][T11301] total_pgmajfault 292 [ 183.799361][T11301] total_inactive_anon 0 [ 183.805166][T11301] total_active_anon 77824 [ 183.809528][T11301] total_inactive_file 0 [ 183.814438][ T28] audit: type=1400 audit(2000000619.573:2719): avc: denied { open } for pid=6150 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.839215][ T28] audit: type=1400 audit(2000000619.573:2720): avc: denied { ioctl } for pid=6150 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 183.861266][T11301] total_active_file 0 [ 183.871025][ T28] audit: type=1400 audit(2000000619.582:2721): avc: denied { execmem } for pid=11324 comm="syz.5.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 183.904095][T11301] total_unevictable 0 [ 183.908348][T11301] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2255,pid=11299,uid=0 [ 183.923327][T11301] Memory cgroup out of memory: Killed process 11301 (syz.7.2255) total-vm:94288kB, anon-rss:1216kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 184.154805][T11350] loop2: detected capacity change from 0 to 1024 [ 184.161714][T11350] EXT4-fs: Ignoring removed orlov option [ 184.180812][T11338] loop7: detected capacity change from 0 to 8192 [ 184.216753][T11350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.278455][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.300192][T11350] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.2270: bit already cleared for inode 15 [ 184.420137][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.432015][T11354] program syz.8.2271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.527344][T11358] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 184.698193][T11333] syz.5.2266 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 184.719232][T11333] CPU: 1 UID: 0 PID: 11333 Comm: syz.5.2266 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.719304][T11333] Tainted: [W]=WARN [ 184.719313][T11333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.719337][T11333] Call Trace: [ 184.719345][T11333] [ 184.719356][T11333] __dump_stack+0x1d/0x30 [ 184.719389][T11333] dump_stack_lvl+0x95/0xd0 [ 184.719420][T11333] dump_stack+0x15/0x1b [ 184.719594][T11333] dump_header+0x80/0x240 [ 184.719624][T11333] oom_kill_process+0x295/0x350 [ 184.719715][T11333] out_of_memory+0x97d/0xb80 [ 184.719828][T11333] try_charge_memcg+0x62e/0xa10 [ 184.719931][T11333] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 184.719968][T11333] __read_swap_cache_async+0x17b/0x2d0 [ 184.720002][T11333] swap_cluster_readahead+0x362/0x3c0 [ 184.720118][T11333] swapin_readahead+0xde/0x840 [ 184.720149][T11333] ? __rcu_read_unlock+0x4e/0x70 [ 184.720185][T11333] ? __perf_event_task_sched_in+0xa65/0xad0 [ 184.720300][T11333] ? __list_add_valid_or_report+0x38/0xe0 [ 184.720323][T11333] ? __rcu_read_unlock+0x4e/0x70 [ 184.720374][T11333] ? swap_cache_get_folio+0x26f/0x280 [ 184.720405][T11333] do_swap_page+0x59b/0x2a50 [ 184.720533][T11333] ? _raw_spin_unlock+0x9/0x30 [ 184.720640][T11333] ? __rcu_read_lock+0x36/0x50 [ 184.720674][T11333] ? __pfx_default_wake_function+0x10/0x10 [ 184.720779][T11333] handle_mm_fault+0xb40/0x3030 [ 184.720811][T11333] ? vma_start_read+0x1c7/0x2c0 [ 184.720925][T11333] do_user_addr_fault+0x62f/0x1050 [ 184.720974][T11333] exc_page_fault+0x62/0xa0 [ 184.721008][T11333] asm_exc_page_fault+0x26/0x30 [ 184.721036][T11333] RIP: 0033:0x7f9b9e28c84e [ 184.721058][T11333] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.721150][T11333] RSP: 002b:00007ffe2b4aaf38 EFLAGS: 00010246 [ 184.721172][T11333] RAX: 0000000000000000 RBX: 000055557958b500 RCX: 00007f9b9e28c84e [ 184.721189][T11333] RDX: 00007ffe2b4aaf90 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.721223][T11333] RBP: 00007f9b9e547da0 R08: 0000000000000000 R09: 0000000000000000 [ 184.721240][T11333] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002c3de [ 184.721257][T11333] R13: 00007f9b9e54609c R14: 000000000002c10b R15: 00007f9b9e546090 [ 184.721295][T11333] [ 184.721541][T11333] memory: usage 307200kB, limit 307200kB, failcnt 1101 [ 184.958451][T11333] memory+swap: usage 307536kB, limit 9007199254740988kB, failcnt 0 [ 184.990794][T11333] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 184.998259][T11333] Memory cgroup stats for /syz5: [ 184.998502][T11333] cache 0 [ 185.006433][T11333] rss 0 [ 185.014255][T11333] shmem 0 [ 185.017300][T11333] mapped_file 0 [ 185.023256][T11333] dirty 0 [ 185.026651][T11375] netlink: 'syz.3.2279': attribute type 21 has an invalid length. [ 185.034680][T11375] __nla_validate_parse: 8 callbacks suppressed [ 185.034695][T11375] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2279'. [ 185.053050][T11371] loop8: detected capacity change from 0 to 1024 [ 185.071968][T11371] EXT4-fs: inline encryption not supported [ 185.075227][T11333] writeback 0 [ 185.081322][T11333] workingset_refault_anon 322 [ 185.086394][T11333] workingset_refault_file 0 [ 185.090967][T11333] swap 344064 [ 185.094519][T11333] swapcached 0 [ 185.103796][T11371] ext4: Invalid uid '0x00000000ffffffff' [ 185.113532][T11333] pgpgin 51007 [ 185.120336][T11333] pgpgout 51006 [ 185.123839][T11333] pgfault 69283 [ 185.142197][T11382] netlink: 'syz.2.2280': attribute type 21 has an invalid length. [ 185.153906][T11333] pgmajfault 191 [ 185.157541][T11333] inactive_anon 0 [ 185.161375][T11333] active_anon 0 [ 185.164948][T11333] inactive_file 0 [ 185.168685][T11333] active_file 4096 [ 185.172611][T11333] unevictable 0 [ 185.176103][T11333] hierarchical_memory_limit 314572800 [ 185.181914][T11333] hierarchical_memsw_limit 9223372036854771712 [ 185.188252][T11333] total_cache 0 [ 185.192175][T11333] total_rss 0 [ 185.195483][T11333] total_shmem 0 [ 185.199020][T11333] total_mapped_file 0 [ 185.203276][T11382] netlink: 'syz.2.2280': attribute type 1 has an invalid length. [ 185.203536][T11333] total_dirty 0 [ 185.224701][T11382] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2280'. [ 185.237749][T11333] total_writeback 0 [ 185.241602][T11333] total_workingset_refault_anon 322 [ 185.257818][T11333] total_workingset_refault_file 0 [ 185.267742][T11333] total_swap 344064 [ 185.275258][T11333] total_swapcached 0 [ 185.279214][T11333] total_pgpgin 51007 [ 185.286437][T11333] total_pgpgout 51006 [ 185.294039][T11333] total_pgfault 69283 [ 185.305077][T11333] total_pgmajfault 191 [ 185.310223][T11333] total_inactive_anon 0 [ 185.314428][T11333] total_active_anon 0 [ 185.322217][T11333] total_inactive_file 0 [ 185.326485][T11333] total_active_file 4096 [ 185.345196][T11333] total_unevictable 0 [ 185.352504][T11333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2266,pid=11333,uid=0 [ 185.367683][T11333] Memory cgroup out of memory: Killed process 11333 (syz.5.2266) total-vm:94156kB, anon-rss:1220kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 185.427518][T11392] 8021q: VLANs not supported on wg2 [ 185.436015][T11393] netlink: 'syz.8.2284': attribute type 1 has an invalid length. [ 185.479507][T11392] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2284'. [ 185.495159][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 185.508466][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2285'. [ 185.522868][T11401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11401 comm=syz.5.2285 [ 185.683138][T11412] lo speed is unknown, defaulting to 1000 [ 185.721603][T11415] netlink: 'syz.5.2290': attribute type 6 has an invalid length. [ 185.796738][T11412] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 185.803386][T11412] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 185.834346][T11412] vhci_hcd vhci_hcd.0: Device attached [ 185.857190][T11420] vhci_hcd: connection closed [ 185.857283][ T407] vhci_hcd vhci_hcd.5: stop threads [ 185.875723][ T407] vhci_hcd vhci_hcd.5: release socket [ 185.885018][ T407] vhci_hcd vhci_hcd.5: disconnect device [ 186.081940][T11433] loop2: detected capacity change from 0 to 128 [ 186.102751][T11433] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.143817][T11433] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.163347][T11433] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2294: No space for directory leaf checksum. Please run e2fsck -D. [ 186.293382][T11433] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2294: checksumming directory block 0 [ 186.305809][T11438] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2294: No space for directory leaf checksum. Please run e2fsck -D. [ 186.355065][T11438] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2294: checksumming directory block 0 [ 186.397454][T11440] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2294: No space for directory leaf checksum. Please run e2fsck -D. [ 186.427635][T11433] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:375: inode #2: comm syz.2.2294: No space for directory leaf checksum. Please run e2fsck -D. [ 186.477232][T11440] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2294: checksumming directory block 0 [ 186.511187][T11433] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.2294: checksumming directory block 0 [ 186.595384][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.639403][T11410] syz.8.2287 (11410) used greatest stack depth: 6696 bytes left [ 186.701609][T11448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2298'. [ 186.706473][T11450] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2299'. [ 186.726023][T11450] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2299'. [ 186.933200][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2303'. [ 187.009568][T11466] lo speed is unknown, defaulting to 1000 [ 187.286840][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2304'. [ 187.370675][T11472] loop7: detected capacity change from 0 to 4096 [ 187.414073][T11472] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.445594][ T28] kauditd_printk_skb: 90 callbacks suppressed [ 187.445613][ T28] audit: type=1400 audit(2000000623.118:2812): avc: denied { remount } for pid=11471 comm="syz.7.2305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 187.477118][T11472] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 187.507070][ T28] audit: type=1400 audit(2000000623.165:2813): avc: denied { mount } for pid=11475 comm="syz.8.2306" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 187.572253][T11484] lo speed is unknown, defaulting to 1000 [ 187.607829][ T28] audit: type=1326 audit(2000000623.212:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.7.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d73bfbf79 code=0x7ffc0000 [ 187.638139][T11495] netlink: 'syz.3.2307': attribute type 6 has an invalid length. [ 187.688196][ T28] audit: type=1326 audit(2000000623.212:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11471 comm="syz.7.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d73bfbf79 code=0x7ffc0000 [ 187.761620][ T28] audit: type=1400 audit(2000000623.212:2816): avc: denied { create } for pid=11481 comm="syz.2.2308" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.817058][T11506] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 187.845673][ T28] audit: type=1400 audit(2000000623.221:2817): avc: denied { write } for pid=11481 comm="syz.2.2308" path="socket:[33979]" dev="sockfs" ino=33979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.887704][T11507] loop5: detected capacity change from 0 to 8192 [ 187.895207][ T28] audit: type=1400 audit(2000000623.230:2818): avc: denied { ioctl } for pid=11481 comm="syz.2.2308" path="socket:[33979]" dev="sockfs" ino=33979 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 187.925872][ T28] audit: type=1400 audit(2000000623.305:2819): avc: denied { create } for pid=11492 comm="syz.2.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.946115][ T28] audit: type=1400 audit(2000000623.305:2820): avc: denied { connect } for pid=11492 comm="syz.2.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.967177][ T28] audit: type=1400 audit(2000000623.315:2821): avc: denied { read } for pid=11492 comm="syz.2.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 187.967993][ T3300] loop5: p1 p2 p4 [ 187.994820][ T3300] loop5: p1 size 262144 extends beyond EOD, truncated [ 188.003375][ T3300] loop5: p2 start 4293394690 is beyond EOD, truncated [ 188.010759][ T3300] loop5: p4 size 100663296 extends beyond EOD, truncated [ 188.021579][T11507] loop5: p1 p2 p4 [ 188.025697][T11507] loop5: p1 size 262144 extends beyond EOD, truncated [ 188.034566][T11507] loop5: p2 start 4293394690 is beyond EOD, truncated [ 188.042052][T11507] loop5: p4 size 100663296 extends beyond EOD, truncated [ 188.258249][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.479502][T11485] syz.8.2309 (11485) used greatest stack depth: 5368 bytes left [ 188.712759][T11539] vlan2: entered promiscuous mode [ 188.797003][T11543] lo speed is unknown, defaulting to 1000 [ 188.852285][T11544] netlink: 'syz.5.2328': attribute type 6 has an invalid length. [ 188.941520][T11543] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10) [ 188.948241][T11543] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 188.956413][T11543] vhci_hcd vhci_hcd.0: Device attached [ 188.962437][T11549] vhci_hcd: connection closed [ 188.962584][ T9612] vhci_hcd vhci_hcd.5: stop threads [ 188.991939][ T9612] vhci_hcd vhci_hcd.5: release socket [ 189.003145][ T9612] vhci_hcd vhci_hcd.5: disconnect device [ 189.073538][T11552] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 189.236429][T11518] syz.7.2317 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 189.249945][T11518] CPU: 0 UID: 0 PID: 11518 Comm: syz.7.2317 Tainted: G W syzkaller #0 PREEMPT(full) [ 189.250032][T11518] Tainted: [W]=WARN [ 189.250043][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.250060][T11518] Call Trace: [ 189.250068][T11518] [ 189.250090][T11518] __dump_stack+0x1d/0x30 [ 189.250197][T11518] dump_stack_lvl+0x95/0xd0 [ 189.250241][T11518] dump_stack+0x15/0x1b [ 189.250336][T11518] dump_header+0x80/0x240 [ 189.250365][T11518] oom_kill_process+0x295/0x350 [ 189.250407][T11518] out_of_memory+0x97d/0xb80 [ 189.250502][T11518] try_charge_memcg+0x62e/0xa10 [ 189.250545][T11518] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 189.250580][T11518] __read_swap_cache_async+0x17b/0x2d0 [ 189.250661][T11518] swap_cluster_readahead+0x262/0x3c0 [ 189.250706][T11518] swapin_readahead+0xde/0x840 [ 189.250814][T11518] ? __rcu_read_unlock+0x33/0x70 [ 189.250856][T11518] ? __rcu_read_unlock+0x4e/0x70 [ 189.250897][T11518] ? swap_cache_get_folio+0x26f/0x280 [ 189.251001][T11518] do_swap_page+0x59b/0x2a50 [ 189.251035][T11518] ? __rcu_read_lock+0x36/0x50 [ 189.251075][T11518] ? __pfx_default_wake_function+0x10/0x10 [ 189.251188][T11518] handle_mm_fault+0xb40/0x3030 [ 189.251227][T11518] ? vma_start_read+0x1c7/0x2c0 [ 189.251277][T11518] do_user_addr_fault+0x62f/0x1050 [ 189.251438][T11518] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 189.251510][T11518] ? irqentry_exit+0x3c/0x520 [ 189.251611][T11518] exc_page_fault+0x62/0xa0 [ 189.251640][T11518] asm_exc_page_fault+0x26/0x30 [ 189.251668][T11518] RIP: 0033:0x7f4d73ab0770 [ 189.251759][T11518] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 189.251783][T11518] RSP: 002b:00007fff6e2d9ed8 EFLAGS: 00010246 [ 189.251805][T11518] RAX: 0000000081846778 RBX: ffffffff81846778 RCX: ffffffff81846778 [ 189.251900][T11518] RDX: 0000000000000778 RSI: ffffffff81846778 RDI: 0000000000000002 [ 189.251973][T11518] RBP: 0000000000000000 R08: 00007f4d73e60000 R09: 00007f4d73e62000 [ 189.252041][T11518] R10: 000000008184677c R11: 0000000000000002 R12: 00007f4d73e76038 [ 189.252059][T11518] R13: 000000000005d5bc R14: ffffffff818465e7 R15: 00007f4d749a5720 [ 189.252090][T11518] ? list_lru_count_one+0x17/0x100 [ 189.252117][T11518] ? list_lru_walk_one+0x48/0x50 [ 189.252144][T11518] ? list_lru_walk_one+0x48/0x50 [ 189.252171][T11518] ? list_lru_walk_one+0x48/0x50 [ 189.252198][T11518] [ 189.268430][T11568] loop2: detected capacity change from 0 to 512 [ 189.277427][T11518] memory: usage 307200kB, limit 307200kB, failcnt 6591 [ 189.333866][T11568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.340132][T11518] memory+swap: usage 307728kB, limit 9007199254740988kB, failcnt 0 [ 189.342761][T11568] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.347516][T11518] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 189.357891][T11568] EXT4-fs (loop2): shut down requested (1) [ 189.362855][T11518] Memory cgroup stats for [ 189.561630][T11573] loop8: detected capacity change from 0 to 512 [ 189.568958][T11518] /syz7: [ 189.572653][T11518] cache 0 [ 189.578485][T11518] rss 0 [ 189.581267][T11518] shmem 0 [ 189.584412][T11518] mapped_file 0 [ 189.587896][T11518] dirty 0 [ 189.590863][T11518] writeback 0 [ 189.594785][T11573] EXT4-fs: Ignoring removed oldalloc option [ 189.603577][T11573] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 189.613953][T11518] workingset_refault_anon 592 [ 189.618932][T11518] workingset_refault_file 0 [ 189.624223][T11518] swap 540672 [ 189.629172][T11573] EXT4-fs (loop8): 1 truncate cleaned up [ 189.635529][T11573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.648011][T11518] swapcached 4096 [ 189.651749][T11518] pgpgin 103926 [ 189.655329][T11518] pgpgout 103925 [ 189.659746][T11518] pgfault 83210 [ 189.663249][T11518] pgmajfault 343 [ 189.666910][T11518] inactive_anon 4096 [ 189.671617][T11518] active_anon 0 [ 189.675175][T11518] inactive_file 0 [ 189.678968][T11518] active_file 0 [ 189.682835][T11518] unevictable 0 [ 189.686387][T11518] hierarchical_memory_limit 314572800 [ 189.692016][T11518] hierarchical_memsw_limit 9223372036854771712 [ 189.698258][T11518] total_cache 0 [ 189.701946][T11518] total_rss 0 [ 189.705287][T11518] total_shmem 0 [ 189.708777][T11518] total_mapped_file 0 [ 189.714822][T11518] total_dirty 0 [ 189.718303][T11518] total_writeback 0 [ 189.722576][T11518] total_workingset_refault_anon 592 [ 189.722907][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.727931][T11518] total_workingset_refault_file 0 [ 189.741926][T11518] total_swap 540672 [ 189.745821][T11518] total_swapcached 4096 [ 189.750057][T11518] total_pgpgin 103926 [ 189.754186][T11518] total_pgpgout 103925 [ 189.758279][T11518] total_pgfault 83210 [ 189.762293][T11518] total_pgmajfault 343 [ 189.766473][T11518] total_inactive_anon 4096 [ 189.771053][T11518] total_active_anon 0 [ 189.775111][T11518] total_inactive_file 0 [ 189.779352][T11518] total_active_file 0 [ 189.783355][T11518] total_unevictable 0 [ 189.787483][T11518] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2317,pid=11518,uid=0 [ 189.802388][T11518] Memory cgroup out of memory: Killed process 11518 (syz.7.2317) total-vm:94156kB, anon-rss:1220kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 189.904203][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.929058][T11582] netlink: 'syz.2.2338': attribute type 29 has an invalid length. [ 189.946899][T11582] netlink: 'syz.2.2338': attribute type 29 has an invalid length. [ 189.961956][T11590] loop8: detected capacity change from 0 to 512 [ 189.982265][T11590] EXT4-fs: inline encryption not supported [ 189.991793][T11582] netlink: 'syz.2.2338': attribute type 29 has an invalid length. [ 190.026100][T11590] EXT4-fs (loop8): 1 orphan inode deleted [ 190.043110][T11590] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.062923][ T9328] EXT4-fs error (device loop8): ext4_release_dquot:7027: comm kworker/u8:16: Failed to release dquot type 1 [ 190.108544][ T9328] loop8: lost filesystem error report for type 5 error -117 [ 190.112603][T11590] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.236894][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.286147][T11623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.298306][T11625] loop8: detected capacity change from 0 to 256 [ 190.325103][T11625] FAT-fs (loop8): Directory bread(block 64) failed [ 190.334961][T11625] FAT-fs (loop8): Directory bread(block 65) failed [ 190.346544][T11625] FAT-fs (loop8): Directory bread(block 66) failed [ 190.353312][T11625] FAT-fs (loop8): Directory bread(block 67) failed [ 190.359993][T11625] FAT-fs (loop8): Directory bread(block 68) failed [ 190.362948][T11623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.366720][T11625] FAT-fs (loop8): Directory bread(block 69) failed [ 190.388625][T11625] FAT-fs (loop8): Directory bread(block 70) failed [ 190.395208][T11625] FAT-fs (loop8): Directory bread(block 71) failed [ 190.401948][T11625] FAT-fs (loop8): Directory bread(block 72) failed [ 190.408741][T11625] FAT-fs (loop8): Directory bread(block 73) failed [ 190.423344][T11625] __nla_validate_parse: 13 callbacks suppressed [ 190.423358][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2352'. [ 190.439451][T11625] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2352'. [ 190.770950][T11643] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2358'. [ 191.260410][T11657] tipc: Enabled bearer , priority 10 [ 191.267388][T11659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2364'. [ 191.277094][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2364'. [ 191.286542][T11657] loop7: detected capacity change from 0 to 512 [ 191.306683][T11657] EXT4-fs warning (device loop7): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.321846][T11657] EXT4-fs (loop7): mount failed [ 191.377064][T11666] loop7: detected capacity change from 0 to 512 [ 191.386927][T11666] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2366: inode has both inline data and extents flags [ 191.408521][T11666] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.408692][T11666] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2366: couldn't read orphan inode 15 (err -117) [ 191.434354][T11666] loop7: lost filesystem error report for type 5 error -117 [ 191.437280][T11666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.509574][T11673] loop8: detected capacity change from 0 to 512 [ 191.517566][T11673] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.536757][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.550142][T11673] EXT4-fs (loop8): warning: checktime reached, running e2fsck is recommended [ 191.565987][T11673] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 191.583244][T11673] System zones: 0-2, 18-18, 34-34 [ 191.596940][T11681] netlink: 'syz.7.2367': attribute type 21 has an invalid length. [ 191.606669][T11673] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2369: bad orphan inode 15 [ 191.609622][T11681] netlink: 128 bytes leftover after parsing attributes in process `syz.7.2367'. [ 191.616940][T11673] loop8: lost filesystem error report for type 5 error -117 [ 191.626168][T11673] ext4_test_bit(bit=14, block=18) = 1 [ 191.639013][T11673] is_bad_inode(inode)=0 [ 191.643199][T11673] NEXT_ORPHAN(inode)=2264924160 [ 191.650891][T11673] max_ino=32 [ 191.654201][T11673] i_nlink=0 [ 191.657552][T11681] netlink: 3 bytes leftover after parsing attributes in process `syz.7.2367'. [ 191.666616][T11673] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.2369: corrupted inode contents [ 191.678600][T11673] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.678864][T11673] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.2369: mark_inode_dirty error [ 191.704320][T11684] loop5: detected capacity change from 0 to 128 [ 191.715477][T11673] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.716375][T11673] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.2369: corrupted inode contents [ 191.748473][T11673] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.748672][T11673] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.2369: mark_inode_dirty error [ 191.772478][T11684] syz.5.2370: attempt to access beyond end of device [ 191.772478][T11684] loop5: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 191.774286][T11673] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.788439][T11673] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.2369: mark inode dirty (error -117) [ 191.789147][T11684] netlink: 'syz.5.2370': attribute type 1 has an invalid length. [ 191.800021][T11673] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.828199][T11673] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 191.847779][T11673] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.847814][T11684] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2370'. [ 191.900855][T11684] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.911412][T11684] bond0: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 191.913050][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.926837][T11684] bond0: (slave vxcan3): making interface the new active one [ 191.938516][T11684] bond0: (slave vxcan3): Enslaving as an active interface with an up link [ 191.955244][T11684] syz.5.2370: attempt to access beyond end of device [ 191.955244][T11684] loop5: rw=0, sector=97, nr_sectors = 32 limit=128 [ 191.968579][T11684] syz.5.2370: attempt to access beyond end of device [ 191.968579][T11684] loop5: rw=0, sector=145, nr_sectors = 3 limit=128 [ 191.990360][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2377'. [ 192.005028][T11699] EXT4-fs: test_dummy_encryption option not supported [ 192.029602][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2375'. [ 192.041498][T11696] 8021q: adding VLAN 0 to HW filter on device team1 [ 192.122582][T11710] program syz.7.2379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.160598][T11717] ipt_REJECT: ECHOREPLY no longer supported. [ 192.180055][T11721] EXT4-fs: Ignoring removed nobh option [ 192.190268][T11723] sch_tbf: burst 20480 is lower than device lo mtu (65550) ! [ 192.214050][T11721] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 192.234049][T11721] ext4 filesystem being mounted at /193/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 192.253964][T11726] EXT4-fs: Ignoring removed nobh option [ 192.288506][T11726] EXT4-fs (loop8): 1 orphan inode deleted [ 192.296131][ T8018] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.306099][T11726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.363066][T11733] Cannot find del_set index 2 as target [ 192.502348][T11737] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 192.514802][T11737] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.529244][T11737] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.2390: lblock 0 mapped to illegal pblock 0 (length 1) [ 192.615799][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.630185][T11751] EXT4-fs error (device loop7): ext4_ext_remove_space:2955: inode #15: comm syz.7.2390: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 192.663417][T11751] EXT4-fs error (device loop7) in ext4_setattr:6035: Corrupt filesystem [ 192.730453][ T9307] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm kworker/u8:9: lblock 0 mapped to illegal pblock 0 (length 1) [ 192.753095][ T9307] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 192.769389][ T9307] EXT4-fs (loop7): This should not happen!! Data will be lost [ 192.769389][ T9307] [ 192.780566][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 192.899718][ T28] kauditd_printk_skb: 215 callbacks suppressed [ 192.899737][ T28] audit: type=1400 audit(2000000628.226:3035): avc: denied { write } for pid=11769 comm="syz.5.2399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 192.964152][ T28] audit: type=1326 audit(2000000628.272:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 192.989347][ T28] audit: type=1326 audit(2000000628.272:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.072141][ T28] audit: type=1326 audit(2000000628.272:3038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.096049][ T28] audit: type=1326 audit(2000000628.272:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.121424][ T28] audit: type=1326 audit(2000000628.272:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.145402][ T28] audit: type=1326 audit(2000000628.272:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.173004][T11756] set_capacity_and_notify: 4 callbacks suppressed [ 193.173021][T11756] loop8: detected capacity change from 0 to 128 [ 193.188155][ T28] audit: type=1326 audit(2000000628.272:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.211164][T11756] FAT-fs (loop8): bogus number of reserved sectors [ 193.212541][ T28] audit: type=1326 audit(2000000628.272:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.239216][T11756] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 193.242617][ T28] audit: type=1326 audit(2000000628.272:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11779 comm="syz.5.2402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b9e2cbf79 code=0x7ffc0000 [ 193.260567][T11756] FAT-fs (loop8): Can't find a valid FAT filesystem [ 193.462694][T11796] lo speed is unknown, defaulting to 1000 [ 193.922123][T11808] program syz.7.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.009471][T11815] loop8: detected capacity change from 0 to 512 [ 194.065615][T11815] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.082222][T11823] loop5: detected capacity change from 0 to 512 [ 194.106310][T11815] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.139769][T11828] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1544 sclass=netlink_route_socket pid=11828 comm=syz.3.2420 [ 194.224948][T11830] lo speed is unknown, defaulting to 1000 [ 194.235274][T11835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11835 comm=syz.2.2419 [ 194.252253][T10621] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.271289][T11836] netlink: 'syz.7.2421': attribute type 6 has an invalid length. [ 194.307184][T11838] Cannot find del_set index 2 as target [ 194.433243][T11852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11852 comm=syz.3.2427 [ 194.582498][T11861] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 194.800187][T11842] syz.8.2423 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 194.822020][T11864] loop7: detected capacity change from 0 to 512 [ 194.829153][T11864] EXT4-fs: Ignoring removed orlov option [ 194.835750][T11842] CPU: 1 UID: 0 PID: 11842 Comm: syz.8.2423 Tainted: G W syzkaller #0 PREEMPT(full) [ 194.835794][T11842] Tainted: [W]=WARN [ 194.835804][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 194.835820][T11842] Call Trace: [ 194.835828][T11842] [ 194.835836][T11842] __dump_stack+0x1d/0x30 [ 194.835969][T11842] dump_stack_lvl+0x95/0xd0 [ 194.836001][T11842] dump_stack+0x15/0x1b [ 194.836048][T11842] dump_header+0x80/0x240 [ 194.836087][T11842] oom_kill_process+0x295/0x350 [ 194.836128][T11842] out_of_memory+0x97d/0xb80 [ 194.836171][T11842] try_charge_memcg+0x62e/0xa10 [ 194.836219][T11842] obj_cgroup_charge_pages+0x23/0xc0 [ 194.836252][T11842] __memcg_kmem_charge_page+0x9e/0x170 [ 194.836352][T11842] __alloc_frozen_pages_noprof+0x18a/0x350 [ 194.836412][T11842] alloc_pages_mpol+0xb3/0x260 [ 194.836442][T11842] alloc_pages_noprof+0x8f/0x130 [ 194.836520][T11842] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 194.836578][T11842] __kvmalloc_node_noprof+0x471/0x680 [ 194.836661][T11842] ? ip_set_alloc+0x24/0x30 [ 194.836695][T11842] ? ip_set_alloc+0x24/0x30 [ 194.836736][T11842] ? __kmalloc_cache_noprof+0x3cd/0x4a0 [ 194.836818][T11842] ip_set_alloc+0x24/0x30 [ 194.836909][T11842] hash_netiface_create+0x282/0x740 [ 194.836955][T11842] ? __pfx_hash_netiface_create+0x10/0x10 [ 194.836994][T11842] ip_set_create+0x3cf/0x970 [ 194.837042][T11842] ? __nla_parse+0x40/0x60 [ 194.837089][T11842] nfnetlink_rcv_msg+0x509/0x5d0 [ 194.837205][T11842] netlink_rcv_skb+0x123/0x220 [ 194.837266][T11842] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.837384][T11842] nfnetlink_rcv+0x167/0x1720 [ 194.837420][T11842] ? __kfree_skb+0x109/0x150 [ 194.837466][T11842] ? nlmon_xmit+0x4f/0x60 [ 194.837543][T11842] ? consume_skb+0x49/0x140 [ 194.837628][T11842] ? nlmon_xmit+0x4f/0x60 [ 194.837660][T11842] ? dev_hard_start_xmit+0x3a8/0x3e0 [ 194.837755][T11842] ? __dev_queue_xmit+0x139a/0x1f20 [ 194.837774][T11842] ? __dev_queue_xmit+0x148/0x1f20 [ 194.837800][T11842] ? strlen+0x19/0x40 [ 194.837836][T11842] ? ref_tracker_free+0x37d/0x3e0 [ 194.837894][T11842] ? __netlink_deliver_tap+0x4dc/0x500 [ 194.837929][T11842] netlink_unicast+0x5c0/0x690 [ 194.837969][T11842] netlink_sendmsg+0x5c8/0x6f0 [ 194.838001][T11842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.838029][T11842] ____sys_sendmsg+0x5af/0x600 [ 194.838100][T11842] ___sys_sendmsg+0x195/0x1e0 [ 194.838135][T11842] __x64_sys_sendmsg+0xd4/0x160 [ 194.838190][T11842] x64_sys_call+0x194c/0x3020 [ 194.838222][T11842] do_syscall_64+0x12c/0x370 [ 194.838303][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.838414][T11842] RIP: 0033:0x7f68793dbf79 [ 194.838433][T11842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.838459][T11842] RSP: 002b:00007f6877e2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.838529][T11842] RAX: ffffffffffffffda RBX: 00007f6879655fa0 RCX: 00007f68793dbf79 [ 194.838548][T11842] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 194.838564][T11842] RBP: 00007f68794727e0 R08: 0000000000000000 R09: 0000000000000000 [ 194.838577][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.838591][T11842] R13: 00007f6879656038 R14: 00007f6879655fa0 R15: 00007ffdc935b5a8 [ 194.838618][T11842] [ 195.185740][T11864] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 195.307403][T11842] memory: usage 302976kB, limit 307200kB, failcnt 591 [ 195.595780][T11842] memory+swap: usage 341592kB, limit 9007199254740988kB, failcnt 0 [ 195.629647][T11842] kmem: usage 261152kB, limit 9007199254740988kB, failcnt 0 [ 195.658616][T11842] Memory cgroup stats for /syz8: [ 195.658901][T11842] cache 0 [ 195.684727][T11842] rss 49152 [ 195.698397][T11842] shmem 0 [ 195.708478][T11842] mapped_file 0 [ 195.719492][T11842] dirty 0 [ 195.728847][T11842] writeback 0 [ 195.740413][T11842] workingset_refault_anon 170 [ 195.758637][T11842] workingset_refault_file 0 [ 195.779898][T11842] swap 63492096 [ 195.809893][T11842] swapcached 12288 [ 195.824259][T11842] pgpgin 37399 [ 195.837211][T11842] pgpgout 37384 [ 195.853932][T11842] pgfault 27320 [ 195.883915][T11842] pgmajfault 92 [ 195.901549][T11842] inactive_anon 28672 [ 195.915074][T11842] active_anon 32768 [ 195.931261][T11842] inactive_file 0 [ 195.954108][T11842] active_file 0 [ 195.977112][T11842] unevictable 0 [ 195.980676][T11842] hierarchical_memory_limit 314572800 [ 196.015419][T11842] hierarchical_memsw_limit 9223372036854771712 [ 196.036693][T11873] netlink: 'syz.2.2433': attribute type 13 has an invalid length. [ 196.056194][T11842] total_cache 0 [ 196.063800][T11842] total_rss 49152 [ 196.074442][T11842] total_shmem 0 [ 196.089239][T11842] total_mapped_file 0 [ 196.101553][T11842] total_dirty 0 [ 196.108572][T11842] total_writeback 0 [ 196.117069][T11842] total_workingset_refault_anon 170 [ 196.127857][T11842] total_workingset_refault_file 0 [ 196.135761][T11842] total_swap 63492096 [ 196.140085][T11842] total_swapcached 12288 [ 196.144504][T11842] total_pgpgin 37399 [ 196.148771][T11842] total_pgpgout 37384 [ 196.152948][T11842] total_pgfault 27320 [ 196.156972][T11842] total_pgmajfault 92 [ 196.164094][T11842] total_inactive_anon 28672 [ 196.169382][T11842] total_active_anon 32768 [ 196.173767][T11842] total_inactive_file 0 [ 196.178044][T11842] total_active_file 0 [ 196.182327][T11842] total_unevictable 0 [ 196.186364][T11842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2423,pid=11841,uid=0 [ 196.201747][T11842] Memory cgroup out of memory: Killed process 11842 (syz.8.2423) total-vm:94156kB, anon-rss:1348kB, file-rss:22304kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 196.281179][T11879] __nla_validate_parse: 6 callbacks suppressed [ 196.281200][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2435'. [ 196.316114][T11879] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2435'. [ 196.338329][T11879] 9pnet_fd: Insufficient options for proto=fd [ 196.505496][T11885] lo speed is unknown, defaulting to 1000 [ 196.676130][T11890] loop7: detected capacity change from 0 to 512 [ 196.694693][T11890] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.2438: inode has both inline data and extents flags [ 196.725210][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2439'. [ 196.731550][T11890] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 196.736576][T11890] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.2438: couldn't read orphan inode 15 (err -117) [ 196.763783][T11893] loop2: detected capacity change from 0 to 512 [ 196.772767][T11890] loop7: lost filesystem error report for type 5 error -117 [ 196.783928][T11893] EXT4-fs: Mount option(s) incompatible with ext3 [ 196.798994][T11890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.830676][T11890] EXT4-fs error (device loop7): ext4_check_dx_root:2201: inode #2: comm syz.7.2438: Corrupt dir, invalid name_len for '.', running e2fsck is recommended [ 196.897474][ T8018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.907544][T11893] usb usb4: usbfs: process 11893 (syz.2.2439) did not claim interface 0 before use [ 196.922227][T11893] 9p: Bad value for 'rfdno' [ 197.072386][T11915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2447'. [ 197.126926][T11920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2447'. [ 197.140632][T11919] loop2: detected capacity change from 0 to 8192 [ 197.191043][ T3309] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 197.209756][ T3309] FAT-fs (loop2): Filesystem has been set read-only [ 197.430237][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'. [ 197.448515][T11940] lo speed is unknown, defaulting to 1000 [ 197.558597][ T7775] syz_tun (unregistering): left allmulticast mode [ 197.661513][T11966] program syz.7.2461 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.824277][T11951] lo speed is unknown, defaulting to 1000 [ 197.952615][T11983] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2465'. [ 198.035250][T11951] chnl_net:caif_netlink_parms(): no params data found [ 198.215214][T10377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.320723][T10377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.358962][T11951] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.392775][T11951] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.413689][T11951] bridge_slave_0: entered allmulticast mode [ 198.420553][T11951] bridge_slave_0: entered promiscuous mode [ 198.485173][T10377] team0: Port device netdevsim1 removed [ 198.498309][T10377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.547947][T11951] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.563256][T11951] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.581770][T11951] bridge_slave_1: entered allmulticast mode [ 198.595940][T11951] bridge_slave_1: entered promiscuous mode [ 198.613625][T10377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.677054][T11951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.715191][T11951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.715600][T12013] program syz.8.2472 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.771159][T11951] team0: Port device team_slave_0 added [ 198.796932][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 198.796951][ T28] audit: type=1400 audit(2000000633.735:3085): avc: denied { read } for pid=3035 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 198.826919][T11951] team0: Port device team_slave_1 added [ 198.862554][ T28] audit: type=1400 audit(2000000633.744:3086): avc: denied { search } for pid=3035 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.953718][T11951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.990748][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.990950][ T28] audit: type=1400 audit(2000000633.744:3087): avc: denied { search } for pid=3035 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.086226][T11951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.118933][T11951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.129834][T11951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.161766][ T28] audit: type=1400 audit(2000000633.744:3088): avc: denied { search } for pid=3035 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.197297][T11951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.238034][ T28] audit: type=1400 audit(2000000633.744:3089): avc: denied { read } for pid=3035 comm="dhcpcd" name="n42" dev="tmpfs" ino=15562 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.244590][T10377] bridge_slave_1: left allmulticast mode [ 199.294442][T12040] loop5: detected capacity change from 0 to 1024 [ 199.303641][T10377] bridge_slave_1: left promiscuous mode [ 199.309401][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.320666][ T28] audit: type=1400 audit(2000000633.744:3090): avc: denied { open } for pid=3035 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=15562 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.363163][ T28] audit: type=1400 audit(2000000633.744:3091): avc: denied { getattr } for pid=3035 comm="dhcpcd" path="/run/udev/data/n42" dev="tmpfs" ino=15562 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 199.387212][ T28] audit: type=1400 audit(2000000633.829:3092): avc: denied { ioctl } for pid=12016 comm="syz.8.2474" path="socket:[35885]" dev="sockfs" ino=35885 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 199.492720][T10377] bridge_slave_0: left allmulticast mode [ 199.497202][T12040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.510838][T12048] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2486'. [ 199.521072][T10377] bridge_slave_0: left promiscuous mode [ 199.526888][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.539531][ T28] audit: type=1400 audit(2000000633.903:3093): avc: denied { read open } for pid=12020 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.566153][ T28] audit: type=1400 audit(2000000633.903:3094): avc: denied { getattr } for pid=12020 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.567123][ T6150] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.013480][T12049] ================================================================== [ 200.021612][T12049] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 200.029438][T12049] [ 200.031781][T12049] write to 0xffffea000717ab18 of 8 bytes by task 11950 on cpu 1: [ 200.039494][T12049] __filemap_remove_folio+0x201/0x300 [ 200.044884][T12049] filemap_remove_folio+0x6d/0x1d0 [ 200.050007][T12049] truncate_inode_folio+0x42/0x50 [ 200.055039][T12049] shmem_undo_range+0x26d/0xb10 [ 200.059912][T12049] shmem_evict_inode+0x12e/0x510 [ 200.064853][T12049] evict+0x2af/0x510 [ 200.068759][T12049] iput+0x41a/0x580 [ 200.072590][T12049] dentry_unlink_inode+0x24f/0x260 [ 200.077709][T12049] __dentry_kill+0x13f/0x460 [ 200.082310][T12049] finish_dput+0x2b/0x200 [ 200.086639][T12049] dput+0x52/0x60 [ 200.090286][T12049] __fput+0x444/0x650 [ 200.094289][T12049] ____fput+0x1c/0x30 [ 200.098279][T12049] task_work_run+0x130/0x1a0 [ 200.102876][T12049] do_exit+0x466/0x1590 [ 200.107038][T12049] do_group_exit+0xfe/0x140 [ 200.111552][T12049] get_signal+0xe4f/0xf60 [ 200.115907][T12049] arch_do_signal_or_restart+0x96/0x450 [ 200.121465][T12049] irqentry_exit+0xf7/0x520 [ 200.125972][T12049] exc_general_protection+0x153/0x1e0 [ 200.131356][T12049] asm_exc_general_protection+0x26/0x30 [ 200.136907][T12049] [ 200.139233][T12049] read to 0xffffea000717ab18 of 8 bytes by task 12049 on cpu 0: [ 200.146861][T12049] folio_mapping+0xa1/0xe0 [ 200.151284][T12049] evict_folios+0xde9/0x35b0 [ 200.155881][T12049] try_to_shrink_lruvec+0x5f6/0x960 [ 200.161095][T12049] shrink_lruvec+0x24e/0x1bc0 [ 200.165775][T12049] shrink_node+0x68e/0x2000 [ 200.170292][T12049] do_try_to_free_pages+0x404/0xcc0 [ 200.175497][T12049] try_to_free_mem_cgroup_pages+0x222/0x470 [ 200.181396][T12049] try_charge_memcg+0x37e/0xa10 [ 200.186280][T12049] obj_cgroup_charge_pages+0x23/0xc0 [ 200.191567][T12049] __memcg_kmem_charge_page+0x9e/0x170 [ 200.197029][T12049] __alloc_frozen_pages_noprof+0x18a/0x350 [ 200.202853][T12049] alloc_pages_mpol+0xb3/0x260 [ 200.207624][T12049] alloc_pages_noprof+0x8f/0x130 [ 200.212579][T12049] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 200.218490][T12049] __kvmalloc_node_noprof+0x471/0x680 [ 200.223880][T12049] ip_set_alloc+0x24/0x30 [ 200.228222][T12049] hash_netiface_create+0x282/0x740 [ 200.233450][T12049] ip_set_create+0x3cf/0x970 [ 200.238045][T12049] nfnetlink_rcv_msg+0x509/0x5d0 [ 200.242992][T12049] netlink_rcv_skb+0x123/0x220 [ 200.247769][T12049] nfnetlink_rcv+0x167/0x1720 [ 200.252467][T12049] netlink_unicast+0x5c0/0x690 [ 200.257262][T12049] netlink_sendmsg+0x5c8/0x6f0 [ 200.262032][T12049] ____sys_sendmsg+0x5af/0x600 [ 200.266802][T12049] ___sys_sendmsg+0x195/0x1e0 [ 200.271498][T12049] __x64_sys_sendmsg+0xd4/0x160 [ 200.276443][T12049] x64_sys_call+0x194c/0x3020 [ 200.281136][T12049] do_syscall_64+0x12c/0x370 [ 200.285742][T12049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.291637][T12049] [ 200.293957][T12049] value changed: 0xffff88811af5aaa0 -> 0x0000000000000000 [ 200.301060][T12049] [ 200.303389][T12049] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 200.309543][T12049] CPU: 0 UID: 0 PID: 12049 Comm: syz.7.2477 Tainted: G W syzkaller #0 PREEMPT(full) [ 200.320494][T12049] Tainted: [W]=WARN [ 200.324294][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 200.334351][T12049] ================================================================== [ 200.417577][T10377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.466265][T10377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.486994][T10377] bond0 (unregistering): Released all slaves [ 200.520353][T10377] bond1 (unregistering): (slave batadv1): Releasing active interface [ 200.552664][T10377] bond1 (unregistering): Released all slaves [ 200.573352][T10377] bond2 (unregistering): (slave vlan2): Releasing active interface [ 200.584918][T10377] bond2 (unregistering): Released all slaves [ 200.674055][T12068] syz_tun (unregistering): left promiscuous mode [ 200.725408][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.732853][T10377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.797850][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.805287][T10377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.840546][T10377] veth1_macvtap: left promiscuous mode [ 200.846080][T10377] veth0_macvtap: left promiscuous mode [ 200.872457][T10377] veth1_vlan: left allmulticast mode [ 200.877874][T10377] veth1_vlan: left promiscuous mode [ 200.901171][T10377] veth0_vlan: left promiscuous mode [ 200.992806][T10377] pim6reg (unregistering): left allmulticast mode [ 201.073282][T10377] team0 (unregistering): Port device team_slave_1 removed [ 201.086778][T10377] team0 (unregistering): Port device team_slave_0 removed [ 201.485537][T10377] IPVS: stop unused estimator thread 0... [ 201.540259][T10377] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.550854][T10377] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.612805][T10377] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.623225][T10377] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.687541][T10377] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.697958][T10377] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.735466][T10377] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.745933][T10377] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.803238][T10377] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 201.813129][T10377] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.868128][T10377] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 201.878061][T10377] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.932441][T10377] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 201.942432][T10377] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.996491][T10377] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 202.006335][T10377] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.075651][T10377] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.086265][T10377] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.158623][T10377] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.169081][T10377] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.234911][T10377] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.245302][T10377] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.321396][T10377] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.331828][T10377] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.408007][T10377] bridge_slave_1: left allmulticast mode [ 202.414514][T10377] bridge_slave_1: left promiscuous mode [ 202.420199][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.428159][T10377] bridge_slave_0: left allmulticast mode [ 202.433897][T10377] bridge_slave_0: left promiscuous mode [ 202.439734][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.448603][T10377] bridge_slave_1: left allmulticast mode [ 202.454257][T10377] bridge_slave_1: left promiscuous mode [ 202.460079][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.468007][T10377] bridge_slave_0: left allmulticast mode [ 202.473650][T10377] bridge_slave_0: left promiscuous mode [ 202.479550][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.488409][T10377] bridge_slave_1: left allmulticast mode [ 202.494055][T10377] bridge_slave_1: left promiscuous mode [ 202.499803][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.507678][T10377] bridge_slave_0: left allmulticast mode [ 202.513477][T10377] bridge_slave_0: left promiscuous mode [ 202.519282][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.533432][T10377] bridge_slave_1: left allmulticast mode [ 202.539071][T10377] bridge_slave_1: left promiscuous mode [ 202.545277][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.553257][T10377] bridge_slave_0: left allmulticast mode [ 202.558904][T10377] bridge_slave_0: left promiscuous mode [ 202.564788][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.777309][T10377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.787375][T10377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.797069][T10377] bond0 (unregistering): Released all slaves [ 202.804617][T10377] bond1 (unregistering): Released all slaves [ 202.937706][T10377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.947898][T10377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.957712][T10377] bond0 (unregistering): Released all slaves [ 202.967497][T10377] ip6gretap0 (unregistering): left promiscuous mode [ 203.006720][T10377] bond0 (unregistering): (slave vxcan3): Releasing backup interface [ 203.017781][T10377] bond0 (unregistering): Released all slaves [ 203.055161][T10377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.065184][T10377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.074714][T10377] bond0 (unregistering): Released all slaves [ 203.124540][T10377] tipc: Disabling bearer [ 203.129995][T10377] tipc: Disabling bearer [ 203.135406][T10377] tipc: Left network mode [ 203.142675][T10377] IPVS: stopping master sync thread 8555 ... [ 203.156033][T10377] hsr_slave_0: left promiscuous mode [ 203.163752][T10377] hsr_slave_1: left promiscuous mode [ 203.169574][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.177879][T10377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.185694][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.194684][T10377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.202264][T10377] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 203.213483][T10377] batman_adv: batadv0: Removing interface: ipvlan2 [ 203.222978][T10377] hsr_slave_0: left promiscuous mode [ 203.228788][T10377] hsr_slave_1: left promiscuous mode [ 203.234693][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.242296][T10377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.250038][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.257561][T10377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.267544][T10377] hsr_slave_0: left promiscuous mode [ 203.273197][T10377] hsr_slave_1: left promiscuous mode [ 203.280057][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.287433][T10377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.294969][T10377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.302384][T10377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.309988][T10377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.317562][T10377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.332560][T10377] veth1_macvtap: left promiscuous mode [ 203.338057][T10377] veth0_macvtap: left promiscuous mode [ 203.343643][T10377] veth1_vlan: left promiscuous mode [ 203.348992][T10377] veth0_vlan: left promiscuous mode [ 203.354959][T10377] veth1_macvtap: left promiscuous mode [ 203.360495][T10377] veth0_macvtap: left promiscuous mode [ 203.366076][T10377] veth1_vlan: left promiscuous mode [ 203.371334][T10377] veth0_vlan: left promiscuous mode [ 203.377635][T10377] veth1_macvtap: left promiscuous mode [ 203.383182][T10377] veth0_macvtap: left promiscuous mode [ 203.388865][T10377] veth0_vlan: left promiscuous mode [ 203.537932][T10377] team0 (unregistering): Port device team_slave_1 removed [ 203.547935][T10377] team0 (unregistering): Port device team_slave_0 removed [ 203.610315][T10377] team0 (unregistering): Port device team_slave_1 removed [ 203.620377][T10377] team0 (unregistering): Port device team_slave_0 removed [ 203.683636][T10377] team0 (unregistering): Port device team_slave_1 removed [ 203.693609][T10377] team0 (unregistering): Port device team_slave_0 removed [ 203.730145][T10377] team0 (unregistering): Port device team_slave_1 removed [ 203.739993][T10377] team0 (unregistering): Port device team_slave_0 removed [ 204.635828][T10377] IPVS: stop unused estimator thread 0...