last executing test programs: 2m34.165150343s ago: executing program 4 (id=73): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) 2m34.079211719s ago: executing program 4 (id=74): prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') chdir(&(0x7f0000000340)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x58e}) fcntl$lock(r0, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r2, &(0x7f00000000c0)=""/105, 0x69, 0xfff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="10080000000000000000000000000047675f4b0b9d403b5b8b08d6fa000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000010000bace29244ab336beab780144a5cfe2cec1dd95f3f4a5f04095d1e154cb97542d4b2c70eb78cc50f1e28f9cb1808e7fded7d24c5dd598347d8f8ea34ee966ca91f1ade9f410d762b9936e620b1697bdcd961b183d181a18da9f5eda87cf0800433ac674c07ceb60966ca329a121fcd419d4bbc6c1de99ae639bfa", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES8=r1], 0x50) 2m34.069408109s ago: executing program 4 (id=76): socket$packet(0x11, 0x2, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc408000400000000000000", 0x38}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2m34.018351392s ago: executing program 4 (id=78): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES16], 0x21, 0x286, &(0x7f0000000640)="$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") r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) fcntl$notify(r0, 0x402, 0x0) syz_clone(0x80208000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x10c) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) 2m33.890426059s ago: executing program 4 (id=79): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 2m33.628724195s ago: executing program 4 (id=84): mount$9p_tcp(0x0, 0x0, &(0x7f00000004c0), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472020000005763702c706f7274474f4476c049154a58dcf73d307830303030300200000000000000"]) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, &(0x7f0000006680)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x100f5, @loopback, 0x8}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffab, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000740)) 2m33.52867159s ago: executing program 32 (id=84): mount$9p_tcp(0x0, 0x0, &(0x7f00000004c0), 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="7472020000005763702c706f7274474f4476c049154a58dcf73d307830303030300200000000000000"]) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x1f, &(0x7f0000006680)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x100f5, @loopback, 0x8}]}, &(0x7f0000000140)=0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @local}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffab, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000740)) 1m47.17903191s ago: executing program 3 (id=904): r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(0x3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}}) getpgid(0xffffffffffffffff) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) r4 = fsmount(r1, 0x1, 0x0) fchdir(r4) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r3}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r5, &(0x7f0000002240)=""/131, 0x83, 0x5b) r6 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000580), 0x100) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r8, 0x0, 0x0) r9 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r10, r10, 0x0) fchown(r9, r10, 0x0) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000680)) open_tree(r0, &(0x7f0000000600)='./file0/file0\x00', 0x1200) getpgrp(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1m47.125878723s ago: executing program 3 (id=905): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb200018000000020000000000000400000000020000000000"], 0x0, 0x1a}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x11, r3, 0xfffffffffaa23000) r4 = fsmount(r2, 0x0, 0x6) fchdir(r4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@filename='./file0\x00', 0xee01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80000000, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfffffffe, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003}, 0x38) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x80, 0x0, 0x7ffc1ffb}]}) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1}) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) epoll_create1(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x4) 1m47.00589318s ago: executing program 3 (id=907): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x100000000000009, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8312, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa9", 0xa8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008ce585ff00000000064ecfb927000000541f000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x110}}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0xfffffffffffffffe}, 0x102802, 0x0, 0xfffffffe, 0x5, 0xfff, 0x8001, 0xffff, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x10006000, &(0x7f00000002c0)="6cdbf170a21e70db9d113082a4c3d7aeed07b618c73744c9939f995d9db7ed1b1ec98b3b1808736bdfaa2cf89f096895c494b4c6e17ad478e3760da3d1bd12df96e2ed98882f5ecec9eb409aae5b96a06e11295de40e9aa9f35190c31035731188aa049b51c24b03b4d61bc40cab20ee8d840a", 0x73, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000640)="6b8f9f45fe63a29149e0ed58d2c62108469ae42493dfac4732fb65d6119c700ea873120b40f1ffd1b6e72b39bcb0fc4039e17634f9d869404ea87e4c4e13b20d3d32e2d83375c8e8d7bd31a975436cdbc62dd4a9165b5ced486b04ccdd0de6c59d3ba44751b0f68e3108ed84fa0b8ba0c8e383775d636c65c6ce4eb3a6a03721788835369a2cf6bd8537eb8fdff27984dad912229123cd4b5be840be6b815a08c223cf5452a79e8596286dde6104b12dafa98c0c7fdb6b03c7633c00058d7d9aeedb4d7c7d7e024722f842ee6a58d2f83b5e") syz_open_procfs(r7, &(0x7f0000000740)='net/ptype\x00') lsm_get_self_attr(0x64, 0x0, &(0x7f0000000140), 0x1) bind$netlink(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRESHEX=r8, @ANYRES32, @ANYBLOB="00000000000000000000000000000002"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r9, @ANYBLOB="00eb891330ced6f56baefef967dfba3d000000000080000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r10, r9}, 0xc) io_setup(0x1, &(0x7f00000000c0)) 1m46.930093475s ago: executing program 3 (id=908): syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000180)='./bus\x00', 0x800e, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x45e, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000380)='./bus\x00', 0x102) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/ip_tables_targets\x00') r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000300)='GPL\x00', 0xd1, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/195, 0xc3}], 0x1, 0x36, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080), &(0x7f0000000100)=@md5={0x1, "4cf0445cb821c188392093c5cf2948bc"}, 0x11, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x46f, &(0x7f0000001200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r4, 0xa, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) write$cgroup_pid(r0, &(0x7f0000000240)=r6, 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) r8 = getpgid(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = pidfd_getfd(r9, r9, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(r10, &(0x7f0000000000)='./file7/file0/file0\x00', &(0x7f0000000040)=ANY=[], 0x0, 0x1000) 1m46.353090858s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 1m45.518401646s ago: executing program 3 (id=938): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) readv(r0, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 1m45.485953558s ago: executing program 33 (id=938): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) readv(r0, &(0x7f0000000240), 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 1m16.031275217s ago: executing program 6 (id=1535): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) setfsgid(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800090400000000000000000a000000000000000000000008001e000100000014000100fe800000000000000000000000000035b6c4bfc5972e86858da8eaa0e5912cbdbc58ddc56f02af9b9ad9df93413b507714f728cc97ac2b646ec429dad3bb7143e7b4292421c1bc6fe071fe83732082e0c50f10de4daa7af70174332b6aed2a8b6d27a7a4403e62b63fa4fa2d930e6c49d08f1513da4d9f009fc20de3a01b0d62c1ea6becb415"], 0x38}}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7ffb, 0x510, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x80, 0x2}, 0x0, 0x8, 0x40008, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x2}, 0x0) r2 = inotify_init() read(r2, &(0x7f0000000040)=""/36, 0x24) creat(&(0x7f0000000400)='./file0\x00', 0x12b) pipe(&(0x7f00000001c0)) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0xe) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1m14.851619856s ago: executing program 6 (id=1565): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) connect$pppoe(r1, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'bridge_slave_1\x00'}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x8) sync() 1m14.654636097s ago: executing program 6 (id=1573): syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x3a63, 0x10100, 0x0, 0x1}, 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000308010200000007444198000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1m14.622810269s ago: executing program 6 (id=1575): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x4, {0x3, 0x2}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="c9b0d257d4c57eed5c85b1f0d4ae8c87eda08f7d81cd9256baf75f188cdb042d877b300cfe8afed169fa1595a239255dc5dc2b4c1a17ca208b1779374cfeea819e219d2faec9df02b232c6b54192ffeaca7b8d4f52c1aa0b6e7de347c9514ae36566e3de9a5c3817ab0591482350917dda8c2476b8ea879d80e2c8799c47832b5243d70652cc23bccaf8a7c1", 0x8c}, {&(0x7f0000000380)="7a82f6348f768e6c1e09e08ceb7d4bec5b021240500b94bf9fa68308f7e46218998a0c99d9d2ded7ce10ecd6ba924b31e60cae023bfb8361935d3334e89063adc17a50808733befdf434cbab848a7875820e5bfdcdb1f3a830ef36e2dc9527d00aff7f27abd31a921683ad15fd62a75f9241623e0076f685c296563ea19db56388c57a0960436b52d3565459454b787bba372b003b560a904b3384dfe552", 0x9e}, {&(0x7f0000000440)="4caf905ecfce31def135a7eaf23b5985c12659f97b6b92d43404ced356ec6159a2c2e822e10b5471c4e2ad8caa34b1925314f6c6", 0x34}, {&(0x7f00000004c0)="7c67687b55600ebd0419144701652cb7c51bf5a91e611fb8fdd0448652a70a6db3d42a3840d4ea799eb18ed8d778762b2a9c25fc315e0cca79b7f71a267147180d", 0x41}], 0x4, &(0x7f0000000b40)="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", 0x1000, 0x4008000}, 0x4041) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf25100000000800050011bb0000540001"], 0x8c}, 0x1, 0x0, 0x0, 0x4014}, 0xc004) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) setpriority(0x2, 0x0, 0xfffffffffffffff7) r7 = socket(0x11, 0x3, 0x0) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000080)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x0, 0x4}, 0x1c) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r8, 0x0, 0x0, 0x20010004, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x9}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x6, 0x0) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@md0, 0xee00, &(0x7f0000000540)) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) tgkill(r6, 0xffffffffffffffff, 0x17) getsockopt(r5, 0x111, 0x1, 0x0, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="1ec6cae268cd1121a25a6ffa7352ca33a4013f0400000cff00c12ab1379c80009b6368debfbb510efb9527330a82cce34843f2d79b88f118689f7c1f30d72d4652f07bfcdca820c376f560c4eec0055ec75a77dd9c81140169b613d03c4e3548e68ea5bc7b301ee82a9cdf593ab934fc88f1ee0a6f9078e44dda108f579c03f181d772cdcaa88e715e686446796af953be8efe5ee9740000000000000000", @ANYRES32=r0, @ANYBLOB="f300"/20, @ANYRES32=r9, @ANYRES32=r0, @ANYBLOB="0300000005000000040000000b00"/28], 0x50) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1m13.732070611s ago: executing program 6 (id=1594): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r1], 0x14}, 0x1, 0x0, 0x0, 0x10000000}, 0xc081) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001080)=ANY=[@ANYBLOB="780000001a00010027bd7000fedbdf250a1000000003fd05001a0000080010000400000008001700000400000600150003000000050014000100000014001680100008000c00028008000100210000000c00090034991005", @ANYRES32=0x0, @ANYBLOB="08001700010400000c000900ff0300081e565a4addc29034a51656f96cc16b4f3ae8ddce49d8a45f8631bdca96510845fb38633ef192ee7bc5bffa6ed3b876ff93340781fd4bf8b4d8b1f381574b9c774d486c3fbc2aa3cecfa5698a4768d1eeedab52da72a83a378e2826049a436908fedd885b7c9ec07812be788d4467daf4ff354d", @ANYRES32=r4, @ANYBLOB="0500140006000000"], 0x78}}, 0x24000080) sendto$packet(r2, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x4, 0x6, @local}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d40)=ANY=[@ANYBLOB="f00000001000010000000000fedbdf2500000000000000000000000000000000fe80000000000000000000000000004200000000081e00030a00208021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000700)={@initdev}, &(0x7f00000007c0)=0x14) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) dup3(r9, r8, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000230800000700000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000080"], 0x80}, 0x1, 0x0, 0x0, 0xc084}, 0x4000841) close_range(r7, 0xffffffffffffffff, 0x0) recvmmsg(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/228, 0xe4}, {&(0x7f00000001c0)=""/65, 0x41}, {&(0x7f0000002080)=""/4103, 0x1007}, {&(0x7f0000000240)=""/99, 0x63}, {&(0x7f00000002c0)=""/122, 0x7a}, {&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f00000008c0)=""/35, 0x23}, {&(0x7f0000000500)=""/214, 0xd6}, {&(0x7f0000000600)=""/1, 0x1}], 0x9}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/32, 0x20}], 0x1, &(0x7f00000009c0)=""/126, 0x7e}}], 0x3, 0x40002002, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="400000006800010003001000fdffff7f00000000000000000c000200010000001500000014000c80080003000200000008000200060000000600030001000000585c2e9ae300e5a3d20141e63f83730c2e94939768699ca0e4599a2df2d71c5c464d31cd1930a9d5257ccea8fe90be756cd57443fa311c9f64a270da7e6551696dbbc30f0d8b46aba9e2b7075169532d17a0c3b818770d176e466e1d1a27611e7f83f493a3bea72028a67093160c4fb2975895a0380f6d8a1a9aea319d5d73ea4f5424dffeed9245f59e"], 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="1f000020f78303dbcecb086ae391d14368a39450a6002fe8c3feea9abe245d941a6e09646a6d0f128587058ff3d911b133a9087077fafe6bc4c288ee7033a29ddf50596b617a8f25e1b2b64b6dda4ab6e25ccaff3d156d8f", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010065727370616e000010000280050013000100000004001200"], 0x40}}, 0x0) socket$kcm(0x2, 0xa, 0x2) 1m13.653947025s ago: executing program 6 (id=1600): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x40}, 0x40000) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/crypto\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000300), 0x8) pread64(r6, &(0x7f0000000740)=""/211, 0xd3, 0xff) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x1b8, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xee0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x45}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8081}, 0x20000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@delchain={0x24, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xfff9}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x171, 0x410}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x40) 1m13.633486136s ago: executing program 34 (id=1600): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x40}, 0x40000) sendmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x8841) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/crypto\x00', 0x0, 0x0) read$rfkill(r6, &(0x7f0000000300), 0x8) pread64(r6, &(0x7f0000000740)=""/211, 0xd3, 0xff) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x1b8, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xee0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x92b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x200}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9c}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x45}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8081}, 0x20000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xe) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r12) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@delchain={0x24, 0x2c, 0xf31, 0x1, 0x2000, {0x0, 0x0, 0x0, r13, {}, {0xfff2, 0xfff9}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r10, 0x171, 0x410}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x40) 28.074411011s ago: executing program 7 (id=2318): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_cancel(0x0, 0x0, &(0x7f0000000100)) 28.073768961s ago: executing program 7 (id=2319): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f805ffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0xff7, &(0x7f0000002780)=""/4087, 0x0, 0x24}, 0x94) 28.058079462s ago: executing program 7 (id=2320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x300400d4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01010000000000000000020000000900010073797a30000000000900020073797a30000000002c000000200a01010000000000000000020000040c000540000000d8000000020900010073797a30"], 0x80}}, 0x0) io_uring_setup(0x347b, &(0x7f0000000000)={0x0, 0x336e, 0x8, 0x3, 0xf3}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x840c0}, 0x4004) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3402ccf946bc329b2f53", @ANYRES16=r3, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x8000}, 0x4008049) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r2, @ANYRES16=r0, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x5, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xc}, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchmod(r5, 0x22) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x5}, 0x10320, 0x0, 0x8001, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, 0xfffffffffffffffd, 0x0) ioprio_set$pid(0x1, 0x0, 0x4007) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(r6, 0xc008240a, &(0x7f00000003c0)=ANY=[]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 28.008148274s ago: executing program 7 (id=2321): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file1\x00'}) splice(r3, 0x0, r1, 0x0, 0x6, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x7}, 0x8102, 0x6, 0x3, 0x1, 0x8, 0x4, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, r1, 0x2) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x402) fcntl$setstatus(r1, 0x4, 0x7c00) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f0000002180)=""/1, 0x1f80}], 0x2b, &(0x7f00000021c0)=[{0xfffffffffffffffc, 0x2034afca}], 0x1, 0x0) syz_clone3(&(0x7f0000001440)={0x80, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000090601"], 0x144}, 0x1, 0x0, 0x0, 0x40015}, 0x44080) 27.636507456s ago: executing program 7 (id=2326): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r2 = dup2(r1, r1) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000240)={0x0, 0x5}) sendto$inet(r0, &(0x7f00000001c0)="ee", 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f400", 0x2}], 0x1}, 0x810) shutdown(r0, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 26.35638521s ago: executing program 7 (id=2339): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x62001) socket(0x10, 0x803, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) pipe(&(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) 26.326437742s ago: executing program 35 (id=2339): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x62001) socket(0x10, 0x803, 0x6) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) pipe(&(0x7f00000001c0)) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000280), &(0x7f0000000000)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) lseek(0xffffffffffffffff, 0x0, 0x1) syz_emit_ethernet(0x86, &(0x7f0000000780)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "30bd05a78f0edbcb66cce5984343e09c262fc62d381cd6515d33e142245708d9", "85db081dcb26409ecb60274324d72410", {"0c1c28b8552c9dfdf23da2340cb8cbc7", "1f5489d79cc13665174cedcb215e4a1a"}}}}}}}, 0x0) 11.304004254s ago: executing program 8 (id=2640): io_setup(0x239f, &(0x7f0000000380)=0x0) (async, rerun: 64) r1 = eventfd2(0x2, 0x80800) (rerun: 64) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x0, 0x300, 0x800002, 0x0, 0x0, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9841, r1, &(0x7f0000000080)="e2", 0x36, 0x5, 0x0, 0x1, r1}]) (async, rerun: 64) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r2, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x1b, &(0x7f0000001400)=""/223}, 0x94) 11.271419416s ago: executing program 8 (id=2642): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = creat(0x0, 0x4) r2 = dup2(r1, r1) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) sendto$inet(r0, &(0x7f00000001c0)="ee", 0x1, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f400", 0x2}], 0x1}, 0x810) shutdown(r0, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 11.237288227s ago: executing program 8 (id=2643): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r3, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f805ffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0xff7, &(0x7f0000002780)=""/4087, 0x0, 0x24}, 0x94) 11.19250206s ago: executing program 8 (id=2646): pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x0, 0xffffffffffffffff}}, './file1\x00'}) splice(r3, 0x0, r1, 0x0, 0x6, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x1, @perf_bp={0x0, 0x7}, 0x8102, 0x6, 0x3, 0x1, 0x8, 0x4, 0xb900, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, r1, 0x2) syz_mount_image$ext4(&(0x7f0000000a00)='ext4\x00', &(0x7f00000009c0)='./file1\x00', 0x1004410, &(0x7f0000000980), 0x1, 0x5b0, &(0x7f0000000a40)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xc00) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x402) fcntl$setstatus(r1, 0x4, 0x7c00) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r4, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f0000002180)=""/1, 0x1f80}], 0x2b, &(0x7f00000021c0)=[{0xfffffffffffffffc, 0x2034afca}], 0x1, 0x0) syz_clone3(&(0x7f0000001440)={0x80, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44010000090601"], 0x144}, 0x1, 0x0, 0x0, 0x40015}, 0x44080) 11.059778458s ago: executing program 8 (id=2648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd29, 0x0, {{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x4, 0x1000000, 0x4000000, 0x0, 0x0, 0x0, 0x1d}, {0x7f, 0xc99, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x17c}}, 0x40044) 10.054258816s ago: executing program 8 (id=2666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = creat(0x0, 0x4) r2 = dup2(r1, r1) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f400", 0x2}], 0x1}, 0x810) shutdown(r0, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 9.868612137s ago: executing program 36 (id=2666): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = creat(0x0, 0x4) r2 = dup2(r1, r1) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="f400", 0x2}], 0x1}, 0x810) shutdown(r0, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 3.006059236s ago: executing program 1 (id=2772): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4) shutdown(r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 2.985891347s ago: executing program 1 (id=2773): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="d8000000180081084e81f782db44b904021d0800fd007c06e8fe55a10a0015400600142603600e120800060000000201a80016000800014003e01100036010fab94dcf5c0461c1d67f6f9400e08000a0e408e8d8ef52a98515277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed1bffec62070000cbee5de6ccd44a677575a62cef352a92954b43370e9701ee1b6ec75a526c5d5b5701cf8773", 0xd8}], 0x1}, 0x400c0) 2.898460392s ago: executing program 1 (id=2775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB]) 2.897829891s ago: executing program 1 (id=2776): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x16743, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xff, 0xffff, 0xffff, 0x9dfe, 0x0, "925d3216209134d0"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x5, 0x5, 0x7, 0xe9, 0x1, "0062007d82ea1f0098e6da83acc500000015c7"}) r1 = socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) syz_io_uring_setup(0xddb, &(0x7f0000000300)={0x0, 0xd963, 0x100, 0x0, 0x36e}, &(0x7f0000000100), &(0x7f0000000240)) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0xee5, 0x401) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, &(0x7f0000000000)) 2.75755235s ago: executing program 1 (id=2777): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="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", 0x3c6}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x8841) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$l2tp(0x2, 0x2, 0x73) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="4d6a974600", 0x5}], 0x1, 0x0, 0x0, 0x4048041}, 0x20058800) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) lsetxattr$security_capability(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000080), 0x0, 0x0, 0x3) ptrace$setregs(0xd, r5, 0x20000000002, &(0x7f0000000040)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/58) ptrace$cont(0x21, r5, 0x80000001, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r4, 0xb0ef2000) mount$cgroup2(0x0, &(0x7f0000000440)='./file2\x00', &(0x7f0000000540), 0x10008, &(0x7f0000000580)={[{@subsystem='cpu'}, {@memory_hugetlb_accounting}, {@memory_hugetlb_accounting}, {@memory_recursiveprot}], [{@context={'context', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, 'vfat\x00'}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000600)={0x32, 0x1, 0x5, 0x10}) 2.596549349s ago: executing program 1 (id=2781): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2, 0x4028}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) tkill(r0, 0x13) 2.536247963s ago: executing program 0 (id=2783): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7, 0x8, 0xc3, 0xa, {{0x13, 0x4, 0x2, 0x9, 0x4c, 0x66, 0x0, 0x78, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x7, 0xdc, [@empty]}, @ssrr={0x89, 0x23, 0xbb, [@empty, @local, @local, @loopback, @broadcast, @empty, @multicast1, @local]}, @generic={0x44, 0xc, "c8fbeee833bdde3517a4"}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="7c060000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="e69f7f"], 0x67c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc095) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8969, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000480)="97d0dc", 0x1, 0x0, 0x3}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x884) socket(0x25, 0x1, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000000), 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r11, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.699039722s ago: executing program 0 (id=2789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r2 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r2, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x4, 0xff7, &(0x7f0000002780)=""/4087, 0x0, 0x24}, 0x94) 1.637440825s ago: executing program 2 (id=2792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x500000000000000, 0x4000}, 0x80) 1.5572855s ago: executing program 2 (id=2794): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x1000000, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 1.55652247s ago: executing program 0 (id=2795): syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000002000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 1.03757102s ago: executing program 2 (id=2797): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@data_err_ignore}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101a42, 0xa7) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, 0x0}, 0x4000044) (async) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)="ac5510a223", 0x5}], 0x1, 0x9, 0xff, 0x14) read$msr(r0, &(0x7f0000000000)=""/13, 0xd) 969.479093ms ago: executing program 2 (id=2798): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff62ffb702000008000000b70300000000000085000000c800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x6, 0xb45, 0x8, 0x5, 0x0, 0xd}, 0xc) listen(r3, 0xd8e) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 755.386526ms ago: executing program 0 (id=2799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181, 0x600}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x44}}, 0x20040010) 654.078741ms ago: executing program 0 (id=2801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) r3 = socket$vsock_stream(0x28, 0x1, 0x0) dup2(r3, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x4, 0xff7, &(0x7f0000002780)=""/4087, 0x0, 0x24}, 0x94) 589.454555ms ago: executing program 0 (id=2803): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r1 = dup3(0xffffffffffffffff, r0, 0x80000) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) recvmsg(r1, &(0x7f0000001680)={&(0x7f0000000080)=@rc, 0x80, &(0x7f0000001540)=[{&(0x7f0000000100)=""/65, 0x41}, {&(0x7f0000000180)=""/32, 0x20}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f0000000380)=""/215, 0xd7}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/68, 0x44}, {&(0x7f0000001500)=""/43, 0x2b}], 0x9, &(0x7f0000001600)=""/107, 0x6b}, 0x2) writev(r0, &(0x7f00000017c0)=[{&(0x7f00000016c0)}, {&(0x7f0000001700)="dc98dba8d9c0de991587b14ef00321d66d8434da94fd0a330eeac30b3e1a5fa3e1d9823f44e14bb22c95decf9908ff6942e1b84c37d0ad648c6d0b1b2097cafeaa663c0c2dbeccb2ac40e8b67c378c", 0x4f}, {&(0x7f0000001780)="084e392c72d708a446ac95c23cff11b508d33b648ed6504d19a6211c499ca08d", 0x20}], 0x3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001880)={'syztnl1\x00', &(0x7f0000001800)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0xff, 0x0, 0x40, @local, @local, 0x8, 0x10, 0xef1d, 0x200}}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000018c0)={{{@in6=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@remote}}, &(0x7f00000019c0)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001a00)={{{@in6=@remote, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4e22, 0x4, 0xa, 0x80, 0x80, 0xc, r2, r4}, {0xfffffffffffffff7, 0x3, 0x1, 0x6, 0xd483, 0xfffffffffffffffa, 0x8, 0x9}, {0xfff, 0x8, 0x7c85, 0x5872b8a9}, 0x7, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d2}, 0x2, @in=@local, 0x3500, 0x3, 0x2, 0x8, 0x9eb, 0x4, 0x30d3}}, 0xe8) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x30, 0x1407, 0x200, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001c00)={r1, r1, 0x0, r1}, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001d00)=0x0) r6 = perf_event_open(&(0x7f0000001c80)={0x0, 0x80, 0x80, 0x6, 0x8, 0xb, 0x0, 0x6, 0x8001, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001c40), 0x1}, 0x311, 0x3, 0x9, 0x0, 0x3, 0x7, 0x3, 0x0, 0x6, 0x0, 0x7}, r5, 0x9, r1, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d40)='./file0\x00', 0x20000, 0xc3) getdents64(r7, &(0x7f0000001d80)=""/98, 0x62) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001e80)={'ip6gre0\x00', &(0x7f0000001e00)={'ip6_vti0\x00', r3, 0x4, 0x2, 0x80, 0x6, 0x3b, @loopback, @empty, 0x1, 0x700, 0xf, 0x80}}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000001ec0)=0xeeb, 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) poll(&(0x7f0000001f00)=[{r1, 0x1210}, {r6, 0x200}], 0x2, 0xffff) r8 = accept4$packet(r1, &(0x7f0000001f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001f80)=0x14, 0x800) ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000002000)={0xff, 0x28, [0x6, 0x100000000, 0x3, 0x7], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000020c0)={'syztnl0\x00', &(0x7f0000002040)={'syztnl1\x00', r9, 0xaca8b6d7c54c3a72, 0x5, 0x1, 0x5, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x10, 0x7fff, 0xff}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002180)={'erspan0\x00', &(0x7f0000002100)={'sit0\x00', r10, 0x8, 0x8, 0x1ff, 0x5, {{0xb, 0x4, 0x2, 0x3d, 0x2c, 0x66, 0x0, 0x4, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @rr={0x7, 0x17, 0x37, [@rand_addr=0x64010100, @remote, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) setsockopt$MRT6_ASSERT(r1, 0x29, 0xcf, &(0x7f00000021c0), 0x4) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002240), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x40, r12, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'caif0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x400c000) sendmsg$nl_route_sched(r1, &(0x7f0000005280)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005240)={&(0x7f0000002380)=@delchain={0x2eb8, 0x65, 0x520, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0xffe0, 0x12}, {0xfff3, 0x7}, {0xfff2, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xe67f8a2222f8d2c7, 0x5}}, @TCA_U32_POLICE={0x10, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}]}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x2e4c, 0x2, [@TCA_CGROUP_POLICE={0x82c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3, 0x93, 0x19, 0x8, 0x9, 0x0, 0x8, 0x7ff, 0x1, 0x6, 0x800, 0x8, 0x5, 0x7fffffff, 0xbf9, 0x9d49, 0x4, 0x4, 0x8, 0x5, 0xb7d, 0xd3, 0x1, 0x7, 0x3, 0x5, 0x8001, 0x1c, 0x5, 0x90, 0x2, 0x5, 0xc, 0x10, 0x1, 0x3, 0x9, 0x4, 0x1dec4ac8, 0xfffffff7, 0x0, 0xdc69, 0xccbc, 0x9, 0x0, 0x7, 0x7ff, 0xfb2, 0x400, 0x9, 0x7, 0x6, 0x0, 0x1ff, 0x100, 0x100, 0x2, 0x7f, 0x6, 0x3, 0x7ff, 0xfffffffa, 0x45, 0x5e04bcf7, 0x9, 0x1, 0xb, 0x0, 0x8, 0x4, 0x6, 0x10, 0x28, 0x54d, 0x9, 0x6, 0x3, 0x44, 0x8, 0x1, 0x4, 0x1, 0x8, 0x5, 0xfffffff7, 0x4, 0x2, 0xd95, 0x8, 0x79cf, 0x3e4, 0x80000000, 0x1, 0x75c, 0x1, 0x1, 0x2a60, 0x3, 0x0, 0x8, 0x7fffffff, 0xe1df, 0xae, 0x9b, 0x3ff, 0x3, 0x200, 0x81, 0xe0ab, 0x7, 0x4, 0x401, 0x1, 0x3, 0x5, 0x8c000000, 0x4, 0xc, 0xac, 0x37b9, 0x7, 0xe301, 0x8001, 0x345c, 0x6, 0x0, 0x80000001, 0x2, 0xff, 0x8, 0x7, 0x10000, 0xfffffff8, 0xf, 0x2, 0xcb, 0x9, 0x3, 0x1, 0x6, 0x0, 0x7, 0x2, 0xf, 0x2, 0xe, 0x7, 0x7, 0x9, 0x9, 0x8001, 0x9, 0x10, 0xff, 0x80000001, 0x819, 0x0, 0x2, 0x3, 0x2, 0x8000, 0x4, 0x4, 0x8, 0x8, 0x8, 0x6, 0x441c, 0xffff, 0x6, 0xffffffff, 0x3, 0x800, 0x7b, 0x401, 0x4, 0x8, 0x5, 0x101, 0xa, 0x1, 0x2, 0x4, 0x4, 0x5, 0xe00000, 0x1, 0x6, 0x6, 0x2, 0xff, 0x32d5, 0x75, 0x8, 0x8, 0x570b, 0xfffffffb, 0xc016, 0xe8, 0xe, 0x80000001, 0x3, 0x5d, 0x2, 0x9, 0xe, 0xdb55, 0x1, 0xfffffffb, 0xffff, 0x1, 0x7fff, 0x800, 0x8, 0x9, 0xff, 0x8, 0x4, 0x7, 0x3, 0x66, 0x2000000, 0x712, 0xfffffff8, 0x4, 0xb, 0x7, 0x401, 0x9, 0x2, 0xfffffffe, 0x504, 0x7772, 0x3, 0x75, 0xd, 0x80000001, 0x1000, 0x4, 0x2, 0x5, 0xb0, 0x7, 0x8, 0x3, 0x1, 0x42f, 0x8, 0x80000001, 0x5, 0x8, 0x3, 0x4, 0x8, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8001, 0x10001, 0xb, 0x80000001, 0x5, 0x7, 0x4, 0x9e46, 0x1ff, 0x9, 0x8000, 0x0, 0xf1, 0x5, 0x3, 0x6, 0x0, 0xb, 0x3, 0x7, 0x5, 0x5, 0x72a, 0x8, 0x200000, 0x3, 0x6, 0x5, 0x8000, 0x8b, 0x6, 0x3, 0xc, 0x4, 0x8f65, 0x0, 0x9, 0x9, 0x7, 0x4, 0xcf, 0x9, 0x6, 0x1000, 0x1, 0x5a1d, 0x7, 0xffffffff, 0x0, 0x1ff, 0xdb, 0x7ff, 0x0, 0x2, 0x4, 0x8, 0x5, 0x100, 0x7, 0x9, 0x8, 0x3, 0x5, 0x0, 0x40, 0xfff, 0xe1a6, 0x1, 0x6, 0x6, 0x0, 0x5, 0x9f1, 0x10001, 0x3426, 0x6, 0x26685a81, 0x8, 0x0, 0xffff, 0x2, 0x3, 0x7, 0x2, 0x6, 0x7, 0xfffffffb, 0x9, 0x8, 0x9, 0x10, 0x6, 0x1, 0x4, 0x800, 0x1, 0x1000, 0x8c8c, 0x8, 0xffffffff, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xfffffff9, 0x0, 0x8, 0x9, 0xfffffffb, 0x4, 0x4, 0x5, 0x100, 0x100, 0xf, 0x70, 0x100, 0x80000001, 0x3, 0x9, 0x2, 0xfa0, 0xb15a, 0x5, 0x10000, 0xffff, 0x518a, 0x2, 0x80000001, 0x3, 0x8, 0x8, 0x6, 0x5, 0x6000, 0x2, 0xcf2, 0x3875dc62, 0x8000, 0x4, 0x3, 0x4, 0x4, 0x7, 0x100, 0xf419, 0x9, 0x7, 0x0, 0x10000, 0xfff, 0x1, 0xdd, 0xfffffe01, 0xa158, 0x7fffffff, 0x39d5, 0x2, 0x4, 0x1, 0xde, 0x3, 0x8, 0x90fb, 0x400, 0x7ff, 0x0, 0x0, 0x4, 0x3, 0x10000, 0x1c, 0xa560, 0x1, 0x5, 0xf, 0x2e, 0x6, 0x1, 0x1ff, 0x2, 0x8, 0x514, 0x2, 0xffff, 0x74ce, 0x6, 0x6, 0x7, 0x3, 0xff, 0x9, 0x2, 0x81, 0x9, 0xe, 0xfffffff2, 0x8, 0x7, 0x6, 0xaee, 0x6, 0x40, 0x1fd20000, 0x6, 0x8, 0x8001, 0x6, 0x1000, 0x9, 0xfff, 0x8, 0x6, 0x2, 0x1, 0xe3f8, 0x9, 0x9073, 0x7f, 0x400, 0x6617, 0x3, 0x80, 0x4651, 0x15b9, 0x3, 0x5, 0x3, 0x8001, 0x8, 0x2, 0x7, 0x8, 0x7, 0x1, 0x7, 0x1ff, 0x0, 0x0, 0x5b5c, 0x4a, 0x6f8, 0xc00, 0x3, 0x9, 0x7, 0x3, 0x40, 0xf, 0x9, 0x80000001, 0xc, 0x3, 0x4b6, 0xa]}]}, @TCA_CGROUP_EMATCHES={0x10c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3, 0x8, 0x3}, {0x1, 0x6, 0x4}}}, @TCF_EM_CONTAINER={0x94, 0x3, 0x0, 0x0, {{0x700, 0x0, 0xb}, "59f72a52661624c2d6e0e6f8147e54f9bfab2f4815abe2c8200b2db1affa6eb8b438b1ac4c9e48c341bf2e5856df71b0203cedececb27a7245dedab587c80565b6e16fc11d118229a48ceb719aa937348f4b6b3f546fca4f2b1eee1755e521e0a4907c40f2bea6e5dd8d0542ec5a4a81196951b001f11a68745f45fa838ec1122a5fca29bd"}}, @TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x1af}, [@TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0xa]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x101}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}]}]}, @TCA_CGROUP_POLICE={0x858, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x10, 0x0, 0x4, 0xfffff151, 0xc, 0x6, 0x9, 0x6, 0x8, 0x2, 0x3, 0x6, 0x9, 0x3ff, 0x4, 0x8, 0x6, 0xff, 0x8, 0x9, 0x6, 0xea, 0x2, 0xd, 0x7fffffff, 0x4, 0x1, 0xffffff80, 0xfff, 0x8000, 0x3, 0x3, 0x1, 0x2, 0x9b3, 0x2, 0x9, 0x101, 0x9, 0x6, 0xffffffff, 0x7b, 0x1, 0x200, 0x4, 0x6, 0x80, 0x5, 0x8, 0x3aab, 0x5, 0x101, 0x5, 0xffff43e6, 0x9, 0x81, 0x1c000, 0x43d, 0x6, 0xae49, 0xffffff32, 0xfffffffb, 0xffffff25, 0x2, 0x29, 0x401, 0x4, 0x7, 0x4, 0x10000, 0x1, 0x8000, 0x3, 0x1, 0x784f0fa6, 0x42, 0x7, 0xfffffffc, 0xa, 0x7, 0x4, 0x3, 0xd77, 0x5, 0xfffffb50, 0xac80, 0x7fff, 0x8, 0x9, 0x4, 0x9, 0xa3d, 0x0, 0x8, 0x8, 0x2, 0x3ff, 0x3c7, 0x3, 0x7, 0x9, 0x9e3b, 0xffffffff, 0xe, 0x1, 0x81, 0xe1, 0x0, 0x101, 0x1000, 0xba9, 0x1bc, 0x3ff, 0xfff, 0x1c, 0x5, 0x200, 0xfffffffe, 0x9, 0x401, 0x10, 0x6, 0x81, 0x3, 0x0, 0x9, 0x4, 0x3, 0x800, 0x5, 0x9, 0xc, 0xc5, 0x8, 0x3, 0x1, 0x3, 0x9c, 0x791a, 0x400, 0x5, 0x4, 0x2, 0x2, 0x1, 0xe, 0x80000001, 0x2, 0xfff, 0x2, 0xfffffff7, 0xb0, 0x1ffc0000, 0x10, 0x8001, 0x6, 0x3, 0xffff8000, 0x28e6, 0x5, 0x3, 0xff, 0x7fffffff, 0x81, 0x5, 0x4, 0x2, 0x800, 0xfffffc01, 0x4, 0x3, 0x5, 0x1, 0x3, 0x5, 0x10000, 0x7f, 0x9, 0x1ff, 0x55c, 0x3, 0x1, 0x5, 0x2, 0x6, 0x8001, 0x2, 0xa, 0x0, 0x2, 0xd278, 0x400, 0x6, 0xffffffff, 0x8, 0xfffffffc, 0x4, 0x8, 0xca, 0x100000, 0x1, 0x6, 0xab7c, 0x0, 0x9, 0x10000, 0xffffffff, 0x1, 0xf, 0x8000, 0x4, 0x3, 0x1, 0x7f, 0xff, 0x1, 0xb, 0x6, 0x2, 0x0, 0x9cb, 0xb, 0x7, 0x7, 0x9, 0x0, 0x7, 0xffffffc0, 0xfffffff7, 0xdc4, 0x1, 0xe, 0x0, 0x9, 0x401, 0x9, 0x7f, 0xff, 0x5, 0x9a03, 0xffff, 0xfffffffa, 0x62d, 0x7, 0x6, 0xfffffff9, 0x6, 0x7ff, 0x6, 0x7f, 0x1000000, 0x10, 0x7, 0x70000000, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0x6, 0x9, 0x7, 0xc, {0x9, 0x1, 0xb, 0x2, 0x8000, 0x291}, {0xf1, 0x2, 0x3, 0x3, 0x8, 0x9b}, 0x5, 0x7, 0x8001}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x1, 0x8, 0x940c, 0x7fffffff, 0x0, 0xe6, 0x5a0b, 0x2, 0x8, 0x3, 0x6, 0x0, 0x2, 0x81, 0x0, 0x8, 0x2, 0x9, 0x8, 0xbf5, 0x229c03d2, 0xa, 0x4, 0x6, 0x2, 0x5, 0xf36, 0x0, 0x9, 0x8001, 0x1, 0x6e96, 0x6e7, 0x10001, 0x6, 0x1, 0xc9f, 0x80000000, 0x7, 0x8001, 0x4, 0xb, 0xfa8a, 0x100, 0x5, 0x9, 0xffffff05, 0x4, 0xb, 0xfff, 0x9bf, 0xfffffff7, 0xffffff80, 0x9, 0xf01, 0xfffffffe, 0xdf0, 0x0, 0x7fff, 0xff, 0x0, 0xf, 0xf28, 0x9, 0x9, 0x7, 0x0, 0x4, 0x3, 0x1, 0x4, 0x0, 0x1ff, 0x87f, 0x675, 0x1000, 0xa0, 0x6, 0x3, 0x8000, 0x800, 0x3, 0x7, 0x1, 0x9, 0x5, 0x4, 0xd868, 0x5, 0x0, 0x7, 0x969, 0xdbb6, 0x8, 0x9e6, 0x4, 0x10, 0x5, 0xa4b2, 0x8, 0xffff8001, 0x9, 0x80, 0x397, 0x10000, 0xebb, 0xfffffff8, 0x100, 0x3, 0x9, 0x9a, 0xb5, 0x9, 0xe6d8, 0x4d, 0x7, 0x1, 0x10, 0x689, 0x1, 0x61, 0x8, 0x0, 0xd, 0x65dc5f3d, 0x100, 0x5, 0xfffffffc, 0x7fff, 0x80, 0x0, 0x3, 0x9, 0x7ff, 0x7, 0x5, 0x2, 0x1000, 0x6, 0xf, 0x7, 0xc, 0x24c, 0x40, 0x8000, 0x0, 0x3, 0x6, 0xe53c, 0x4, 0x80000000, 0x4c, 0x7, 0x8f1f, 0x1, 0x6, 0x5, 0x0, 0x3, 0x401, 0xe, 0x8000, 0x8, 0x1, 0x280000, 0xd, 0xd8, 0x7, 0x0, 0x1, 0x4841, 0x9, 0x9, 0x8, 0xfffffff8, 0x7, 0xfffffff8, 0x3, 0x9, 0x5, 0xa9f5, 0x2, 0x0, 0x6, 0x3, 0x4, 0x6c, 0x4, 0x8000, 0xb5, 0x9, 0x9, 0x5, 0xffffffff, 0xa, 0x10001, 0xc0, 0xd, 0x9d43, 0x4, 0xb, 0x800, 0x4, 0x7, 0x6, 0x2, 0x8, 0xc27, 0x8, 0x1, 0xdcb, 0x5, 0x2, 0x6, 0x1, 0x200, 0x8000, 0x7, 0x7ff, 0x7, 0x7, 0x0, 0x9, 0x7fffffff, 0x0, 0x5, 0xf, 0x6, 0x3, 0x9, 0x1, 0x34, 0x1a3a, 0xfff, 0xf5, 0xffffffff, 0xff, 0x8, 0x2, 0xfff, 0x1, 0xe, 0x90, 0x80, 0x8, 0x6, 0xc5, 0x9fa, 0x8, 0xff, 0xf, 0x32, 0xff, 0x7f, 0x8000]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4000000}]}, @TCA_CGROUP_POLICE={0x1080, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xff, 0xe, 0x101, 0x7f, 0x6, 0x7, 0xdc9, 0x3ff, 0x2, 0x80, 0x5, 0xf, 0x100, 0x10, 0x1, 0x3, 0x6, 0x1, 0x1, 0x5, 0x3, 0x1, 0xbe, 0x4, 0x9, 0x3, 0x8, 0x0, 0x4, 0x3, 0x8, 0x8, 0x0, 0x1e08, 0x903e, 0x2, 0x66f7, 0x5, 0x2, 0x6, 0x100, 0x2, 0x36d, 0x2, 0x3, 0x4b, 0x2, 0x6, 0x1, 0x40, 0xfe, 0x8, 0xb, 0x2e41084c, 0x7fffffff, 0x2, 0x1d, 0x80000000, 0xd7d, 0xf4b5, 0xbe88, 0x1, 0xfffffff9, 0x7, 0x9, 0x0, 0xfffffffb, 0x6, 0x7f, 0x7, 0x7fff, 0x1, 0xfffffff8, 0x6, 0xbe, 0x0, 0x200, 0x3, 0x3, 0x4, 0x4, 0xced7, 0x61, 0x1, 0x0, 0xa, 0x4, 0x8, 0xed69, 0x1000, 0x3, 0x3, 0x0, 0x4, 0x1000, 0xd73, 0x5, 0x3, 0x3, 0x4, 0xfcfe, 0xa, 0x0, 0x6, 0x7, 0x6, 0x2906, 0x4, 0x8001, 0x9, 0xd5, 0x1, 0x8, 0x0, 0xfffffff9, 0xa, 0x3, 0x4, 0x7, 0x7, 0x8ad6, 0x126, 0xffffffff, 0x1, 0xc7, 0xffffff01, 0x4, 0x1, 0x9c6, 0x1, 0x8, 0x695e, 0x8000000, 0xfd, 0x8001, 0x401, 0x8000, 0xffffffc3, 0x3ff, 0x2, 0x0, 0x8d, 0x9, 0x4, 0x5, 0x6, 0x4, 0x400, 0x9, 0x6, 0x9, 0x1, 0x7ff, 0x5, 0x5, 0x7, 0xa, 0x3, 0xad, 0x1ff, 0x6, 0x80, 0x9, 0x800, 0x9f3e, 0x4, 0x6, 0x91d6, 0x2, 0xfffffffd, 0xe, 0xfe, 0x54, 0x9, 0xf, 0x0, 0x0, 0x5, 0x9, 0x7fffffff, 0x4, 0x2, 0x2, 0x0, 0x914d, 0x9, 0x6, 0xa3, 0x7e5, 0xff, 0x15, 0x7ff, 0xff, 0x5, 0xfffffffd, 0xfffffbff, 0x4, 0x5, 0x1, 0xae4, 0x100, 0x10000, 0x7e23, 0x0, 0xfffffff7, 0x7, 0x0, 0x3ff, 0xfffffbff, 0x4, 0x1, 0xe, 0x9, 0x8, 0x483, 0xffff33b3, 0x8, 0x44a6, 0x0, 0x6, 0x7, 0x10000, 0x6, 0x7, 0x7, 0xa, 0x4, 0x0, 0x1, 0x101, 0x3, 0x1, 0x10, 0x8001, 0x1, 0x1000, 0x2, 0x9, 0x3, 0x7fff, 0x3, 0x7, 0x72dd, 0x800, 0xffffffff, 0xb, 0x3, 0x3, 0x4, 0xffffffff, 0x5, 0x1, 0x8, 0x8, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x0, 0x3, 0x10001, 0x24, 0x7fffffff, 0x8, 0x4, 0x1476, 0x4003, 0x6, 0x8, 0xd1, 0xe38, 0x4, 0x6, 0x9, 0xa26, 0x200, 0xfffffffd, 0x8, 0x0, 0x81, 0x8, 0x4c06, 0xc, 0x5d7a, 0x449, 0x0, 0x6, 0xb, 0x7, 0x957, 0x823, 0x2, 0xfb, 0x200, 0x5, 0xd, 0xd, 0x1, 0x1ff, 0x6, 0x32, 0xc, 0x6, 0x0, 0x4fd, 0x0, 0x3, 0x1ac5, 0x2, 0x5, 0x81, 0xfffffff7, 0xffffffff, 0x2af8, 0x6, 0xa00, 0x1, 0x4, 0x3, 0x10000, 0x7, 0x1, 0x8, 0x6, 0xedb, 0xc, 0x7fff, 0x5, 0x0, 0x5, 0x4f, 0x18, 0x80000000, 0x6, 0x3, 0x7, 0x0, 0xc35, 0x1, 0x1, 0x6, 0xfffffffc, 0x9, 0x7, 0x6, 0x10, 0x4, 0x9, 0x9, 0x0, 0x0, 0x0, 0x332, 0x1, 0x5, 0x5, 0x8, 0x7, 0x60f3, 0x2a85, 0x7, 0x9, 0x7, 0x81, 0x0, 0x80000001, 0x2, 0x7, 0xb, 0x2, 0xc0, 0x2, 0x5a6, 0x8, 0x40, 0x8000, 0x2, 0x7, 0x4, 0x2, 0x8, 0x6, 0x66, 0x2, 0x0, 0x8, 0x0, 0xfffffffd, 0xff, 0x79ae, 0x2, 0x5, 0x8, 0x4, 0x9384, 0x0, 0x3ff, 0x81, 0x0, 0x7, 0x6baa, 0x58e, 0x7fff, 0x5, 0x3, 0x9, 0x58a, 0x6, 0xffffff01, 0x6, 0x2545, 0x80, 0x0, 0x8001, 0x2, 0xc, 0x2, 0xffffffff, 0xffffffff, 0x0, 0x7ff, 0x3, 0xa, 0xffffffff, 0x101, 0xf, 0x0, 0x2, 0x2, 0x6, 0x7e, 0x5, 0x7ff, 0x1, 0xa, 0xd, 0xfffffffb, 0xb, 0xb67b, 0x10001, 0x22, 0x1, 0xfffffffd, 0x6, 0x5, 0x0, 0x2, 0x9, 0x4, 0x7fffffff, 0x0, 0x101, 0x10000, 0x6, 0x8cd3, 0xff, 0x0, 0x6, 0xf0, 0x100, 0x1000, 0xd, 0x485e1f04, 0x1, 0x2, 0x4, 0x0, 0x7fff, 0xa4, 0xe32, 0x10000, 0x7fff, 0x400, 0x1, 0x3, 0x9, 0x2, 0x6, 0x7, 0x7, 0xdd4, 0xf, 0x2, 0x4, 0xf9, 0xffffffcd, 0x3, 0x3, 0x8, 0x10000, 0x80000000, 0x4, 0xb, 0x1000, 0x5, 0xe, 0x2, 0x5, 0x2, 0x8, 0x61ac9fca, 0x1, 0xa6, 0x9, 0xf8, 0x92, 0x1, 0x20080000, 0x1, 0x0, 0x2, 0x4c6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0x0, 0x10000, 0x688, 0x10000, 0x10, 0xa, 0x0, 0x4db, 0x7, 0x6, 0x0, 0x80000000, 0x8, 0x6, 0x10, 0x6, 0x5, 0x8, 0x0, 0xfffffff1, 0xa3, 0x1000, 0x1, 0xd, 0x9, 0x7fffffff, 0x5, 0x400, 0x7, 0x2, 0x8f97, 0x80, 0x2, 0x8, 0xfffffbff, 0x8, 0x4, 0x9, 0x8560, 0x5, 0x9, 0x5, 0x2, 0x4, 0x83, 0x7, 0x10, 0x400, 0x251b, 0x6, 0x81, 0x6, 0x5, 0x9, 0x1, 0x2, 0x7fff, 0x1, 0x703, 0x7fff, 0xfffffff8, 0x4, 0x9, 0x5, 0x5, 0xfffffffc, 0x5, 0xfa4, 0x8000, 0xffffff66, 0x401, 0x3, 0x164, 0x4, 0x101, 0xa09e, 0x81, 0xe587, 0x0, 0x9, 0xa, 0xd, 0x8001, 0x8, 0x9, 0x10, 0x3, 0x4, 0xee44, 0x1, 0x5, 0x6, 0x8, 0x9, 0x7, 0xf2, 0xd1a5, 0xe, 0x4, 0x3ff, 0xc1, 0x9, 0x4, 0x3, 0x10000, 0x3, 0x7fffffff, 0x3, 0x8, 0xffffffc0, 0xf1, 0xe, 0x0, 0x80000001, 0x4, 0xffffffff, 0x6, 0x40, 0x4, 0x3, 0x7, 0x80000000, 0xfff, 0x1000, 0x800, 0x1d, 0xd, 0xfffffeff, 0x3, 0x2, 0x3ff, 0xebb, 0x0, 0x7, 0x5, 0x1, 0xc03, 0x5, 0x6, 0x80000001, 0xd08, 0x9bd, 0x4, 0x3, 0x48000000, 0x6, 0x6, 0xfffffff7, 0x5, 0xffffffff, 0x5, 0x4, 0x2, 0xba, 0x8, 0x4000, 0x8000, 0x9, 0x81, 0x4, 0xee, 0x3, 0x3, 0x4, 0x5, 0x4, 0x3, 0x7, 0xffff, 0x10, 0xf2e, 0x32b82fda, 0xd4eb, 0xfffffffb, 0x7ff, 0x4, 0x3, 0x6, 0x7, 0x6, 0x1ff, 0xfff, 0x8, 0x3, 0x20000000, 0x7f, 0x1, 0x180, 0x8ff, 0x401, 0x0, 0x6, 0x9, 0xeab, 0x1, 0x0, 0x7, 0xc03, 0xfffffff9, 0x6, 0x5, 0x5, 0x70, 0x9, 0x2, 0xb, 0x2fe, 0x9, 0x26, 0x0, 0x0, 0x3, 0x2, 0x3, 0x1, 0x8, 0x4, 0x10001, 0xfffffff7, 0x1, 0xda, 0x7fff, 0x1, 0xb400, 0x4, 0x0, 0x0, 0x3, 0x0, 0x9, 0x98, 0xffff, 0x5, 0xa, 0x1, 0x1, 0xfc08, 0xd8e3, 0x2, 0xffff, 0x4, 0x139, 0x2, 0x1, 0x1be, 0x9, 0x8, 0x8, 0x101, 0x2, 0x9, 0x1, 0x3, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0xf, 0x3ff, 0x6, 0xde, 0x6, 0x7fffffff, 0x4, 0x80000000, 0x3, 0x3, 0x2, 0x0, 0x7, 0x0, 0x800, 0x2, 0x5, 0x7, 0x3c, 0x2, 0x10001, 0x4, 0x589, 0x0, 0xb1, 0xaa, 0x19, 0x2, 0x8d1b, 0xc0f, 0x200, 0x5, 0x8, 0x2, 0x2, 0x8, 0x7, 0x4, 0xfffffffa, 0x4, 0x3, 0x5, 0x0, 0x5, 0x2, 0xb39, 0x200, 0x9, 0x0, 0x2, 0xfffffff6, 0x4, 0x1, 0x5, 0xe1e, 0x7, 0x7, 0xef, 0x3248, 0x2, 0x3, 0x7ff, 0x4, 0x617937db, 0x4, 0x8000, 0x4, 0x1000, 0x0, 0xa17, 0x8, 0x4, 0x2, 0x1, 0xc00, 0x5381, 0x6, 0x5, 0x5, 0x74, 0x4, 0x0, 0xa, 0x5, 0x0, 0x4, 0x7, 0x0, 0x28, 0x2, 0x121, 0x8f72, 0x8000, 0xe03b, 0x0, 0x80, 0x3, 0x4, 0xc, 0x3, 0x4, 0x3, 0x3, 0x9, 0x0, 0x5, 0x5, 0x2, 0x6, 0x10000, 0x4, 0x8, 0x1, 0x8, 0xdb8000, 0xfffffff7, 0x8, 0xd, 0x7, 0x1ff, 0x3ff, 0xffffa767, 0x1, 0x10, 0xd27, 0x12, 0x5, 0x85, 0x1, 0x189f, 0x2, 0xed6, 0xc4, 0xffff71c1, 0x4a3, 0x10001, 0x8, 0x32, 0x7, 0x4, 0x5, 0x9, 0x6, 0x5, 0xa12, 0x3, 0x0, 0x4, 0xf3a3, 0x4, 0x9, 0x1, 0x5, 0xaae1, 0x0, 0x3, 0x7, 0xfffffffa, 0xffffffff, 0x4, 0x10, 0x7, 0x4, 0x5, 0x5, 0x2, 0x3, 0x7f, 0x2, 0x9, 0x1, 0x6, 0x2, 0x350, 0xfffffc01, 0x800, 0x8001, 0x7, 0xa, 0x0, 0x5, 0x3, 0xffffffff, 0xc0, 0x5, 0x6, 0x3, 0xb0e, 0x8001, 0x6, 0x10668bcf, 0x0, 0x2, 0x80, 0x0, 0x7, 0x80, 0x96c5, 0x3, 0x7, 0x2, 0x1, 0x7, 0x4, 0xcf25, 0xffff2430, 0x1, 0x0, 0x7, 0x3, 0x8, 0x800, 0x5, 0x0, 0x9, 0xa, 0xd, 0xfe, 0x200, 0xf, 0xffffc25a, 0x4, 0x1, 0x6, 0x9, 0x761, 0x4, 0x0, 0x4c188b6d, 0x7, 0x1, 0x7, 0x5, 0x8, 0x1, 0x3, 0xec, 0x9, 0x0, 0x3, 0x2, 0xa, 0x2, 0xb7, 0x1, 0x1, 0x4, 0x8, 0xf0500, 0x401, 0x1ff, 0xfff, 0xffffc191, 0x3, 0x1, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfff, 0x2, 0x3, 0x9, 0x2, {0x9, 0x0, 0xff6a, 0x0, 0x8}, {0x0, 0x2, 0x4, 0x6, 0x7, 0x4}, 0x6, 0xffffffc0, 0x3ff}}]}, @TCA_CGROUP_POLICE={0xc38, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x4, 0x40, 0x7, 0xba92, 0xe, 0x2, 0x0, 0x5, 0x8, 0x80, 0xfffffff8, 0x3ff, 0x50ba, 0x20, 0x4, 0x200, 0x3, 0x1, 0x416, 0x2897, 0x3, 0x6, 0x8, 0x5, 0x8000, 0x1000, 0xfffffffe, 0x6, 0x4, 0x33f2, 0x8, 0x2, 0x3, 0xcd1, 0x101, 0x81a, 0xc, 0x7, 0x8, 0x3ff, 0x1, 0x1, 0x101, 0x251, 0x101, 0x9, 0x0, 0x7, 0x7f, 0x9, 0x9, 0x2, 0x9, 0x2, 0x5, 0x80, 0x3, 0x7, 0x5, 0x5b7, 0x7ff, 0x400, 0xfffffffc, 0xfffffff7, 0x1, 0x4, 0x6, 0x9, 0xffff017d, 0xb992, 0x0, 0xff, 0x80, 0x8, 0x2, 0x4, 0x9, 0x6, 0x8001, 0x5, 0x7ab, 0x5f, 0x1fa0, 0x4, 0x40, 0x37, 0x0, 0x5, 0x200, 0x3733652f, 0x80, 0x3, 0x40, 0xf1c, 0x5, 0x4, 0xff, 0x2, 0x0, 0x4, 0xa91b, 0x80000001, 0xa, 0x9, 0x47, 0x1, 0xa6, 0x4, 0xb5, 0xf48, 0x4, 0xd, 0x40000000, 0x7, 0x1a, 0x7, 0x0, 0x0, 0xfba, 0x5cf3, 0x7, 0x50c, 0xb12, 0x7, 0x1, 0x6, 0x0, 0x1, 0x7ff, 0x4, 0xffffffff, 0xd, 0x3, 0x3a, 0x8, 0xfff, 0x7, 0x8f, 0x3, 0x10, 0x4, 0xbab, 0xf, 0x10, 0x5, 0x5c25, 0x9, 0x5, 0xd60d, 0x401, 0x8, 0x81, 0x714c, 0xb62, 0x401, 0x6, 0x1, 0x7, 0x4, 0xfffffff9, 0x81, 0x7, 0x400, 0x101, 0x8, 0x101, 0xfffffffd, 0x7ff, 0x6, 0x1, 0x0, 0x8, 0x5, 0x9, 0x80, 0x200, 0x8, 0x9, 0xaf, 0x4, 0x30d7, 0xec, 0xa4b, 0x1, 0x1, 0x5f8, 0x1, 0x2, 0xfffffff7, 0x4c82, 0xfffffff7, 0x1, 0x5, 0x6, 0x3, 0xfffffff8, 0xb, 0x80000001, 0x4, 0x1, 0x9, 0x6, 0x3, 0x6, 0x58f, 0xc30b, 0xe, 0x5, 0x8000, 0xe6, 0xfffff800, 0x2, 0x8, 0x9, 0x0, 0x7fff, 0x40, 0x800, 0x7, 0x200, 0x3, 0x5, 0x100, 0x6, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0xe45, 0x4, 0xffffffff, 0x8, 0x4, 0x7, 0x3, 0x8, 0x5, 0x1, 0x5, 0x8, 0x8, 0x5, 0xda, 0x6, 0xfe, 0x1, 0xfd4, 0x4, 0x1, 0x7f, 0x9, 0x9]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4fe}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x6, 0x4770, 0x80000001, 0x3, 0x9, 0x5, 0x2, 0xa0c, 0x7ff, 0x6, 0x9, 0x162, 0x7, 0x4, 0xe, 0x0, 0x7, 0x0, 0x1, 0x3, 0xdad8, 0x4, 0x1, 0xdbd, 0x811, 0x3, 0x6, 0x80000000, 0x8, 0x3, 0x40, 0x6594, 0x198, 0x7, 0x65d5, 0x4, 0x9, 0x8, 0x37, 0x6, 0xb42, 0x4, 0x80, 0x0, 0x4, 0x0, 0x9, 0x0, 0xa253, 0xffffff8f, 0x6, 0x8, 0x9, 0xe, 0x4, 0x6, 0x9, 0x1, 0x574, 0x3, 0xfff, 0x46b1, 0x1, 0x4, 0x4, 0x7, 0xbd10, 0x3ff, 0x502d53c7, 0x0, 0xf62, 0x5, 0x91c8, 0x436, 0x0, 0x6, 0x2eff, 0x9, 0xfffffb6c, 0xfffffff3, 0x180, 0x9, 0xfffffff8, 0x7, 0x7, 0x1, 0x3, 0x100, 0x7, 0x2e76, 0x4, 0x2249, 0xffffff01, 0x7, 0x8a1, 0x7fff, 0xffffffff, 0x9, 0x7, 0x7, 0x8b, 0x4, 0x4, 0xd2f, 0x0, 0x2, 0x8000, 0x8001, 0x8000, 0xaa, 0x200000, 0x7, 0x8e4, 0xf, 0x1, 0x2c940480, 0x5, 0xb7d, 0x4, 0x5, 0x3e79, 0xb, 0x1ff, 0xfe93, 0x8001, 0x6, 0x9, 0x8, 0x6, 0x9, 0x1, 0x5, 0x5, 0x3, 0x0, 0x86, 0x8001, 0x1, 0x10001, 0x23, 0x10, 0x78, 0x9, 0xfffffffc, 0x6, 0x10001, 0x8, 0x4, 0x5, 0x7, 0x3, 0x4, 0x6, 0x401, 0x7, 0x5, 0x3, 0x2, 0x9, 0x8, 0x3, 0x9, 0x2, 0x8, 0x8000, 0x2, 0x5, 0x4, 0x7ff, 0x4, 0x1, 0xc, 0x6, 0x40, 0x9, 0x7, 0x0, 0xc821, 0x7, 0x8, 0xe, 0x1, 0x3, 0x7, 0xc, 0x6, 0x93b7, 0x7, 0x0, 0x7, 0x8, 0x4, 0x1, 0x0, 0x4, 0x8001, 0x7, 0x8001, 0x7, 0x0, 0x9, 0x0, 0x9, 0x200, 0xf, 0x401, 0x0, 0x5, 0x0, 0x10, 0x3, 0xfffffffe, 0x7, 0x5, 0x9, 0xffffffff, 0x80000001, 0x7fffffff, 0x2, 0x81, 0x5, 0x1, 0x40, 0x7ff, 0x88, 0xde, 0x5, 0x800, 0x80, 0x2, 0x200, 0x2, 0x8, 0x3, 0x0, 0x6, 0x2, 0x2, 0x6, 0x2, 0x6, 0x9, 0x6, 0x2, 0x3, 0x7fffffff, 0x3, 0x1, 0x9, 0x7, 0x8001, 0x7, 0x3, 0x10, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x71, 0x4000, 0x4, 0xffff, 0x8, 0x0, 0xfffffff7, 0x3e, 0xf, 0x4, 0x4, 0x7, 0x8000, 0x5fe3, 0x401, 0x9, 0x3, 0x7, 0x1, 0xfffffffd, 0x4, 0xfffffffe, 0x9, 0x3, 0x9, 0x7ff, 0x81, 0xa1b7, 0x99c, 0x4, 0x3, 0x0, 0x6, 0x8, 0x8, 0x3, 0xa, 0x4, 0x7, 0x2, 0x4, 0x4, 0x4, 0x9, 0x9, 0x4, 0x96d, 0x8, 0xc2d3, 0x198, 0x1, 0x4, 0x53e5, 0x2400000, 0x6, 0x5, 0x8, 0x6, 0x101, 0xcbd3, 0x9, 0x6, 0x4, 0x2, 0x8, 0x5, 0x924, 0x7, 0xd, 0x40, 0x81, 0x8, 0xfff80000, 0x0, 0x4, 0x6, 0x0, 0x2, 0x8, 0x4, 0x6, 0x7, 0x1, 0x57, 0x9, 0x8001, 0x9, 0x2, 0x5, 0xfffffffa, 0x87, 0x6, 0x55800000, 0x5, 0x1, 0x600000, 0x0, 0xd, 0xff, 0x1, 0x1ff, 0x1, 0x6, 0x5, 0x5a9056bb, 0x4, 0x6, 0x5, 0x1, 0x5, 0xff, 0xffffff6a, 0x4, 0x41d, 0xa, 0x8, 0x1, 0x7, 0xa0, 0x5, 0x7, 0x7fffffff, 0x3, 0xb6f1, 0x6, 0x10, 0xb4c, 0x7, 0x2, 0xfffffffa, 0x5db, 0x8, 0x1, 0x1, 0x2, 0x7, 0x3, 0x7, 0xf4, 0xfffffffe, 0x8, 0x5, 0x0, 0xc0da, 0x9, 0x3425, 0x0, 0xffff8633, 0x6, 0x8, 0x101, 0x5, 0x1fcc, 0x8, 0xe08, 0x1, 0x5, 0x80000001, 0x81, 0x6, 0x0, 0x6, 0x2, 0x1, 0x2, 0x7fff, 0x9, 0x7, 0x18d, 0x9, 0x5, 0x5, 0xffffcc63, 0x3, 0x1, 0x6, 0x6, 0x3, 0x7, 0x100, 0x6, 0x2, 0x2, 0x3, 0x0, 0x3, 0xffff, 0x7, 0x8, 0x9, 0x7, 0x3, 0x8, 0xd800, 0xfffffffe, 0x1000, 0x68a, 0x6, 0x9040, 0x61, 0x1, 0x8, 0x642f, 0x3, 0x4, 0x8, 0x1, 0x8, 0x1f32, 0x7, 0xfffffffc, 0x3fe00, 0x8, 0x3, 0x0, 0xdae, 0x9, 0xf, 0x8, 0x7, 0xd, 0x40, 0x6, 0x7, 0x5, 0x5, 0x2, 0x0, 0x9, 0x2, 0x3, 0x8, 0x1, 0x5, 0x9, 0x5, 0x7, 0xfff, 0x800, 0x6, 0x80000001, 0xfff, 0x7fff, 0x10, 0x3e, 0x7, 0x7, 0xd860, 0x9, 0xb, 0x8, 0x6, 0x7d73562b, 0x6, 0xb]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2eb8}, 0x1, 0x0, 0x0, 0x44001}, 0x20000001) ioctl$XFS_IOC_SET_RESBLKS(r8, 0xc0105872, &(0x7f00000052c0)={0x0, 0x9}) lgetxattr(&(0x7f0000005300)='./file0\x00', &(0x7f0000005340)=@known='security.selinux\x00', &(0x7f0000005380)=""/231, 0xe7) bpf$LINK_DETACH(0x22, &(0x7f0000005480)=r0, 0x4) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f00000057c0)={&(0x7f00000054c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000005780)={&(0x7f0000005540)={0x20c, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x18}, @ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_EEE_MODES_OURS={0xa0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "71ed3a626b70a852e16d351a367c307ab8fd79a93667500205e9d8908b8eb940d234db2e6939d15c0829ffd626618c57ce6074a5900a94fe9c7ac1bb19e7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8001}, @ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "04d99c1dcb983371c947b5eb7ca460af32ed308f43c6a46206d5be006b602f27fa0428999d263b314b6b88f6308537def08c1ab8a3f951f6114908d505682096587081"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_MODES_OURS={0x130, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_VALUE={0x50, 0x4, "c9d84a974b1304d7260efd9c179473b9c3bca9bac604350e5828d51148d8a73a64d6af848dc8025c979a4db803c897a90145745d2e668f88904d19516b1a069f211ba91adef667a087888d38"}, @ETHTOOL_A_BITSET_MASK={0xd4, 0x5, "08c7b99d47dde60a49aad98d7a3873e211e0a98f5965964d34d741118387cb3c4330cefbc7203bea01f6271f67b72bff75c905577949f19642f3220519e453647eeb60c5b1d0fae107fa4f945ed16d80d2ef535de89835d758a47a07d01da93962c8a555b17cf5594cf7f5345287eec4cb78eb10184ac5f1da5d51d1da07d2a1e73527de25e3d270a14dd2f2b7e87cf3090d9faa5936d2445b9d7d5b2c4f909038c6f51c23de22c7279515377731c173237c14f25848058e6a9eaa94a1ebaba057412659b1fa31efe643877e0cc38826"}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) 448.207384ms ago: executing program 9 (id=2804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x2c, 0x0, 0x1, 0x201, 0x0, 0x1000000, {0xa, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @empty}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) 353.159419ms ago: executing program 9 (id=2806): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd29, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x300, 0x0, {0x7}, {}, {0x4, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24040844) 352.402019ms ago: executing program 5 (id=2807): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040), 0x1, 0x55e, &(0x7f0000001bc0)="$eJzs3d9rW+UbAPDnpM1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLqMJh1rHbhduBtvZAgiDsR7vfdKhv+Af8VAB0NG0QtvKic9abs1adIuWzrz+cDZ3jfnJO95cs7z9n1zTkgAA2s0+6cQ8WJEfJVEHI6IJF83HPnK0dXtlh9en8qWJFZWPv4zaWyX1Zuv1XzewbzyQkT8+kXEycLmdmuLS7PlSiWdz+tj9bkrY7XFpVOX5soz6Ux6eWJy8sybkxPvvP1Wz2J97fzf33509/0zXx5f/uan+0duJ3E2DuXrNsbxBG5srIzGaP6eFOPsYxuOr/7XizZ3haTfO8CODOV5XoysDzgcQ3nWA/99n0fECjCgEvkPA6o5DmjO7Xs0D35uPHhvdQK0Of7h1c9GYl9jbnRgOXlkZpTNd0d60H7Wxs9/3LmdLdG7zyEAOrpxMyJODw9v7v+SvP/budNdbPN4G/o/eHbuZuOf11uNfwpr459oMf452CJ3d6Jz/hfu96CZtrLx37stx79rF61GhvLa/xpjvmJy8VIlzfq2/0fEiSjuzerjW7RxZvneSrt1G8d/2ZK13xwL5vtxf3jvo8+ZLtfLTxLzRg9uRrzUcvybrB3/pMXxz96P8122cSy980q7dZ3jf7pWfoh4teXxX7+ilWx9fXKscT6MNc+Kzf66dey3du33O/7s+B/YOv6RZOP12tr22/h+3z9pu3WPxB/dn/97kk8a5T35Y9fK9fr8eMSe5MPNj0+sP7dZb26fxX/i+Nb93/r5/8va6+yPiE+7jP/W0R9f3tdN/H06/tPbOv7bL9z74LPv2rXfXf/3RqN0In+km/6vw34VY8dnMwAAAAAAAOxehYg4FEmhtFYuFEql1fs7jsaBQqVaq5+8WF24PB2N78qORLHQvNJ9eMP9EOP5/bDN+sRj9cmIOBIRXw/tb9RLU9XKdL+DBwAAAAAAAAAAAAAAAAAAgF3iYJvv/2d+H+r33gFPnZ/8hsHVMf978UtPwK7k7z8MLvkPg0v+w+CS/zC45D8MLvkPg0v+w+CS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBT58+dy5aV5YfXp7L69NXFhdnq1VPTaW22NLcwVZqqzl8pzVSrM5W0NFWd6/R6lWr1yvhELFwbq6e1+lhtcenCXHXhcv3CpbnyTHohLT6TqAAAAAAAAAAAAAAAAAAAAOD5Ultcmi1XKum8gsKOCsO7YzcUelzod88EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOv+DQAA//8Kozfs") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200060000000300060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 302.217802ms ago: executing program 2 (id=2808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000140)=@generic={0x15, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) ioprio_get$pid(0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x250, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x328, 0x3a8, 0x3a8, 0x328, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0xffffff00], [0xffffff00, 0xffffff00, 0xff000000], 'vlan1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0xfd, 0x0, 0x19}, 0x0, 0x228, 0x250, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0x8, 0x103, 0x33, 0x871004, 0x20000a, 0x80001, 0x7fffffff, 0x0, 0x0, 0xe0}}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@private1, @mcast2, [0x0, 0xffff00, 0x0, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xffffffff], 'dvmrp0\x00', 'sit0\x00', {}, {0xff}, 0x67, 0xb7, 0x1}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x5, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 301.757832ms ago: executing program 9 (id=2809): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x18c2, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000200)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "e6bff385353800ff"}, 0x10}}, 0x2004c895) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8400, &(0x7f0000000140), 0x1, 0x502, &(0x7f0000000980)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={r5, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={r5, 0x5}, &(0x7f00000000c0)=0x8) 296.529302ms ago: executing program 2 (id=2810): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) io_submit(r3, 0x3, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8, r2, &(0x7f0000000080)="062ef31c85bf484f", 0x8, 0x4, 0x0, 0x2, r2}, 0x0, 0x0]) io_submit(r3, 0x1, &(0x7f00000003c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fb, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfc}, 0x6220, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000700)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000010900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) fcntl$setstatus(r1, 0x4, 0x42000) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000006c0)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) pselect6(0x40, &(0x7f0000000040)={0x6, 0x62ca, 0x20, 0xacd7, 0x100000, 0x6, 0x53, 0xecbc}, 0x0, 0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 246.013006ms ago: executing program 9 (id=2811): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x16743, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xff, 0xffff, 0xffff, 0x9dfe, 0x0, "925d3216209134d0"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x5, 0x5, 0x7, 0xe9, 0x1, "0062007d82ea1f0098e6da83acc500000015c7"}) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) syz_io_uring_setup(0xddb, &(0x7f0000000300)={0x0, 0xd963, 0x100, 0x0, 0x36e}, &(0x7f0000000100), &(0x7f0000000240)) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0xee5, 0x401) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000000)) 190.028299ms ago: executing program 5 (id=2812): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x11, 0x800000003, 0x0) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)='9\x00\x00\x00', 0x4}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000020000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 189.550869ms ago: executing program 5 (id=2813): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0xbc0023, 0x0) unshare(0x600) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000001c00)=ANY=[@ANYBLOB="180000000000e900000000000000000081a000fe000000009500000000000000"], &(0x7f0000001c40)='syzkaller\x00', 0xf}, 0x94) setsockopt$sock_attach_bpf(r1, 0x10f, 0x8a, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/tty/ldiscs\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket(0x11, 0x800000003, 0x0) bind$packet(r7, &(0x7f0000000d00)={0x11, 0x0, r6, 0x1, 0x7f, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)='9\x00\x00\x00', 0x4}], 0x1) writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) preadv(r3, &(0x7f00000010c0)=[{&(0x7f0000000380)=""/245, 0xf5}], 0x1, 0x40000004, 0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000080)=0xffffffff) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@getqdisc={0x28, 0x26, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff2}, {0xffe0, 0x5}, {0x7, 0xffff}}, [{0x4}]}, 0x23}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300030c000000fcfffffffcdbdf2505000600002000000a004e2000002413fe8000000000000000000000000000114ead00000000000002000100000000000000070c00000080030005000000000002004e227f0600010000000000000000"], 0x60}, 0x1, 0x7}, 0x0) geteuid() 155.53774ms ago: executing program 5 (id=2814): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x401, 0x9, 0x8000, 0x32de, 0xc255}, [@TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x7fffffff, 0x0, 0x3}}]}}}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfc, 0x5, 0x0, 0x0, 0x0, 0xfe, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xffffffffffffffa3, 0x2}, 0x80, 0x7, 0x0, 0x1, 0x8, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd29, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7}, {}, {0x4, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24040844) 132.566152ms ago: executing program 5 (id=2815): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x841e, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x82, 0x4, 0x4, 0x5, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x220000, 0x80) fadvise64(r2, 0x800, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000, 0x5, 0x3, 0x1, 0x9}, 0x9, 0x1, 0x1, 0x6, 0x41, 0x11, 0x12, 0x6, 0x4, 0xfffffff8, {0xe61a, 0x8000, 0x10006, 0x1, 0x6, 0xbf5}}}}]}, 0x78}}, 0x0) 65.506276ms ago: executing program 5 (id=2816): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0x7800}, 0x0, 0x40000000, 0x7, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001a000100000000a3890000001c0000000047ac76b20000"], 0x1c}}, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) sendfile(r1, r0, 0x0, 0x3ffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod$loop(&(0x7f0000001080)='./file0/file0/..\x00', 0x0, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x248000, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x541, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x93}}, './file0/file0/..\x00'}) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') pread64(r7, &(0x7f0000000580)=""/102400, 0x19000, 0x2000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 44.193507ms ago: executing program 9 (id=2817): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1018, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x2021, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fallocate(r1, 0x10, 0x100, 0x5) mincore(&(0x7f0000ffe000/0x1000)=nil, 0x1000, &(0x7f0000000200)=""/6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@empty, @private, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f00000001c0)={@private0, r4}, 0x14) 0s ago: executing program 9 (id=2818): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000140)=0x6, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): comm syz.1.2178: invalid indirect mapped block 1 (level 1) [ 150.950602][T10128] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 150.967748][T10128] EXT4-fs (loop1): 1 truncate cleaned up [ 150.991903][T10128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.024785][T10128] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 151.085307][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.296701][T10156] loop1: detected capacity change from 0 to 128 [ 151.307316][ T9245] syz.0.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 151.317541][ T9245] CPU: 1 UID: 0 PID: 9245 Comm: syz.0.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 151.317576][ T9245] Tainted: [W]=WARN [ 151.317644][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 151.317657][ T9245] Call Trace: [ 151.317665][ T9245] [ 151.317673][ T9245] __dump_stack+0x1d/0x30 [ 151.317703][ T9245] dump_stack_lvl+0x95/0xd0 [ 151.317730][ T9245] dump_stack+0x15/0x1b [ 151.317753][ T9245] dump_header+0x80/0x240 [ 151.317777][ T9245] oom_kill_process+0x295/0x350 [ 151.317803][ T9245] out_of_memory+0x97d/0xb80 [ 151.317828][ T9245] try_charge_memcg+0x62e/0xa10 [ 151.317915][ T9245] __mem_cgroup_charge+0x65/0x150 [ 151.317946][ T9245] shmem_get_folio_gfp+0x47b/0xd60 [ 151.317980][ T9245] shmem_write_begin+0xfc/0x1f0 [ 151.318058][ T9245] generic_perform_write+0x183/0x490 [ 151.318095][ T9245] shmem_file_write_iter+0xc5/0xf0 [ 151.318167][ T9245] __kernel_write_iter+0x319/0x590 [ 151.318277][ T9245] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 151.318313][ T9245] dump_user_range+0xa7d/0xdb0 [ 151.318392][ T9245] elf_core_dump+0x21a2/0x2330 [ 151.318425][ T9245] ? 0xffffffffff600000 [ 151.318455][ T9245] coredump_write+0xacf/0xdf0 [ 151.318496][ T9245] vfs_coredump+0x26c7/0x3130 [ 151.318538][ T9245] ? __memcg_slab_free_hook+0xbc/0x230 [ 151.318579][ T9245] ? proc_coredump_connector+0x160/0x2b0 [ 151.318673][ T9245] ? kmem_cache_free+0xdf/0x380 [ 151.318703][ T9245] get_signal+0xd7b/0xf60 [ 151.318731][ T9245] arch_do_signal_or_restart+0x96/0x450 [ 151.318764][ T9245] irqentry_exit+0xf7/0x510 [ 151.318836][ T9245] ? force_sig+0x89/0xb0 [ 151.318861][ T9245] exc_general_protection+0x153/0x1e0 [ 151.318934][ T9245] asm_exc_general_protection+0x26/0x30 [ 151.318976][ T9245] RIP: 0033:0x7fdb035abf81 [ 151.318993][ T9245] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 151.319071][ T9245] RSP: 002b:0000200000000060 EFLAGS: 00010217 [ 151.319091][ T9245] RAX: 0000000000000000 RBX: 00007fdb03826090 RCX: 00007fdb035abf79 [ 151.319106][ T9245] RDX: 00002000000001c0 RSI: 0000200000000060 RDI: 0000000020008400 [ 151.319186][ T9245] RBP: 00007fdb036427e0 R08: 0000200000000f40 R09: 0000200000000f40 [ 151.319210][ T9245] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 151.319225][ T9245] R13: 00007fdb03826128 R14: 00007fdb03826090 R15: 00007ffc40a3c078 [ 151.319247][ T9245] [ 151.319256][ T9245] memory: usage 307200kB, limit 307200kB, failcnt 31012 [ 151.570475][ T9245] memory+swap: usage 431012kB, limit 9007199254740988kB, failcnt 0 [ 151.578403][ T9245] kmem: usage 9168kB, limit 9007199254740988kB, failcnt 0 [ 151.585700][ T9245] Memory cgroup stats for /syz0: [ 151.641279][ T9245] cache 304967680 [ 151.648534][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2194'. [ 151.650703][ T9245] rss 200704 [ 151.663478][ T9245] shmem 304963584 [ 151.667149][ T9245] mapped_file 1503232 [ 151.671312][ T9245] dirty 0 [ 151.674913][ T9245] writeback 0 [ 151.678209][ T9245] workingset_refault_anon 29 [ 151.682925][ T9245] workingset_refault_file 4806 [ 151.687795][ T9245] swap 126783488 [ 151.691428][ T9245] swapcached 16384 [ 151.695242][ T9245] pgpgin 404256 [ 151.698741][ T9245] pgpgout 329748 [ 151.702962][ T9245] pgfault 136733 [ 151.706650][ T9245] pgmajfault 130 [ 151.710198][ T9245] inactive_anon 158113792 [ 151.714739][ T9245] active_anon 147066880 [ 151.719003][ T9245] inactive_file 4096 [ 151.723195][ T9245] active_file 0 [ 151.726722][ T9245] unevictable 0 [ 151.730205][ T9245] hierarchical_memory_limit 314572800 [ 151.736264][ T9245] hierarchical_memsw_limit 9223372036854771712 [ 151.742618][ T9245] total_cache 304967680 [ 151.746886][ T9245] total_rss 200704 [ 151.750607][ T9245] total_shmem 304963584 [ 151.754813][ T9245] total_mapped_file 1503232 [ 151.759374][ T9245] total_dirty 0 [ 151.763422][ T9245] total_writeback 0 [ 151.767322][ T9245] total_workingset_refault_anon 29 [ 151.772519][ T9245] total_workingset_refault_file 4806 [ 151.777816][ T9245] total_swap 126783488 [ 151.781997][ T9245] total_swapcached 16384 [ 151.786243][ T9245] total_pgpgin 404256 [ 151.790233][ T9245] total_pgpgout 329748 [ 151.794812][ T9245] total_pgfault 136733 [ 151.798929][ T9245] total_pgmajfault 130 [ 151.803142][ T9245] total_inactive_anon 158113792 [ 151.808018][ T9245] total_active_anon 147066880 [ 151.812921][ T9245] total_inactive_file 4096 [ 151.817445][ T9245] total_active_file 0 [ 151.819531][T10178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10178 comm=syz.7.2194 [ 151.822035][ T9245] total_unevictable 0 [ 151.835467][T10178] netlink: 'syz.7.2194': attribute type 1 has an invalid length. [ 151.838117][ T9245] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1881,pid=9282,uid=0 [ 151.861396][ T9245] Memory cgroup out of memory: Killed process 9282 (syz.0.1881) total-vm:91476kB, anon-rss:1256kB, file-rss:54916kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 151.890785][T10151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2186'. [ 151.899850][T10151] tc_dump_action: action bad kind [ 152.079602][T10184] loop2: detected capacity change from 0 to 512 [ 152.091791][ T28] kauditd_printk_skb: 440 callbacks suppressed [ 152.091808][ T28] audit: type=1326 audit(1770739938.239:12268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.122132][ T28] audit: type=1326 audit(1770739938.239:12269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.145937][ T28] audit: type=1326 audit(1770739938.249:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.170025][ T28] audit: type=1326 audit(1770739938.249:12272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.194176][ T28] audit: type=1326 audit(1770739938.249:12273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.213196][T10184] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.255905][T10193] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2201'. [ 152.269100][T10184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.289146][T10184] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.291566][ T28] audit: type=1326 audit(1770739938.239:12270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.323308][ T28] audit: type=1326 audit(1770739938.249:12274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.347423][ T28] audit: type=1326 audit(1770739938.249:12275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.371042][ T28] audit: type=1326 audit(1770739938.249:12276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.380912][T10202] delete_channel: no stack [ 152.394891][ T28] audit: type=1326 audit(1770739938.249:12277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10187 comm="syz.1.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 152.425883][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.437559][T10202] delete_channel: no stack [ 152.465763][T10204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10204 comm=syz.2.2204 [ 152.504947][T10198] hub 2-0:1.0: USB hub found [ 152.516852][T10198] hub 2-0:1.0: 8 ports detected [ 152.549595][T10212] netlink: 'syz.2.2208': attribute type 8 has an invalid length. [ 152.837657][T10232] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2215'. [ 152.853917][T10232] macsec1: entered promiscuous mode [ 152.859183][T10232] veth1_virt_wifi: entered promiscuous mode [ 152.865930][T10232] macsec1: entered allmulticast mode [ 152.871278][T10232] veth1_virt_wifi: entered allmulticast mode [ 152.881036][T10232] veth1_virt_wifi: left allmulticast mode [ 152.886906][T10232] veth1_virt_wifi: left promiscuous mode [ 152.967312][T10239] loop2: detected capacity change from 0 to 256 [ 153.071011][ T63] Bluetooth: hci2: Frame reassembly failed (-84) [ 154.135810][ T9288] syz.0.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 154.145831][ T9288] CPU: 0 UID: 0 PID: 9288 Comm: syz.0.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.145912][ T9288] Tainted: [W]=WARN [ 154.145918][ T9288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 154.145930][ T9288] Call Trace: [ 154.145939][ T9288] [ 154.145948][ T9288] __dump_stack+0x1d/0x30 [ 154.145977][ T9288] dump_stack_lvl+0x95/0xd0 [ 154.146003][ T9288] dump_stack+0x15/0x1b [ 154.146028][ T9288] dump_header+0x80/0x240 [ 154.146058][ T9288] oom_kill_process+0x295/0x350 [ 154.146080][ T9288] out_of_memory+0x97d/0xb80 [ 154.146152][ T9288] try_charge_memcg+0x62e/0xa10 [ 154.146199][ T9288] __mem_cgroup_charge+0x65/0x150 [ 154.146229][ T9288] shmem_get_folio_gfp+0x47b/0xd60 [ 154.146258][ T9288] shmem_write_begin+0xfc/0x1f0 [ 154.146286][ T9288] generic_perform_write+0x183/0x490 [ 154.146326][ T9288] ? current_time+0x188/0x240 [ 154.146440][ T9288] shmem_file_write_iter+0xc5/0xf0 [ 154.146478][ T9288] __kernel_write_iter+0x319/0x590 [ 154.146517][ T9288] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 154.146560][ T9288] dump_user_range+0xa7d/0xdb0 [ 154.146593][ T9288] elf_core_dump+0x21a2/0x2330 [ 154.146622][ T9288] ? 0xffffffffff600000 [ 154.146709][ T9288] coredump_write+0xacf/0xdf0 [ 154.146791][ T9288] vfs_coredump+0x26c7/0x3130 [ 154.146836][ T9288] ? __memcg_slab_free_hook+0xbc/0x230 [ 154.146880][ T9288] ? proc_coredump_connector+0x160/0x2b0 [ 154.146937][ T9288] ? kmem_cache_free+0xdf/0x380 [ 154.146962][ T9288] get_signal+0xd7b/0xf60 [ 154.146989][ T9288] arch_do_signal_or_restart+0x96/0x450 [ 154.147069][ T9288] irqentry_exit+0xf7/0x510 [ 154.147103][ T9288] ? force_sig+0x89/0xb0 [ 154.147165][ T9288] exc_general_protection+0x153/0x1e0 [ 154.147268][ T9288] asm_exc_general_protection+0x26/0x30 [ 154.147296][ T9288] RIP: 0033:0x7fdb035abf81 [ 154.147316][ T9288] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 154.147338][ T9288] RSP: 002b:0000200000000060 EFLAGS: 00010217 [ 154.147360][ T9288] RAX: 0000000000000000 RBX: 00007fdb03826090 RCX: 00007fdb035abf79 [ 154.147395][ T9288] RDX: 00002000000001c0 RSI: 0000200000000060 RDI: 0000000020008400 [ 154.147409][ T9288] RBP: 00007fdb036427e0 R08: 0000200000000f40 R09: 0000200000000f40 [ 154.147424][ T9288] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 154.147448][ T9288] R13: 00007fdb03826128 R14: 00007fdb03826090 R15: 00007ffc40a3c078 [ 154.147472][ T9288] [ 154.147481][ T9288] memory: usage 307200kB, limit 307200kB, failcnt 33559 [ 154.409540][ T9288] memory+swap: usage 431000kB, limit 9007199254740988kB, failcnt 0 [ 154.417554][ T9288] kmem: usage 8616kB, limit 9007199254740988kB, failcnt 0 [ 154.425504][ T9288] Memory cgroup stats for /syz0: [ 154.425775][ T9288] cache 305676288 [ 154.434599][ T9288] rss 61440 [ 154.437809][ T9288] shmem 305664000 [ 154.441590][ T9288] mapped_file 1052672 [ 154.445751][ T9288] dirty 0 [ 154.448699][ T9288] writeback 12288 [ 154.452984][ T9288] workingset_refault_anon 30 [ 154.457599][ T9288] workingset_refault_file 9548 [ 154.462788][ T9288] swap 126771200 [ 154.466650][ T9288] swapcached 28672 [ 154.470462][ T9288] pgpgin 417767 [ 154.473979][ T9288] pgpgout 343121 [ 154.477536][ T9288] pgfault 137408 [ 154.481094][ T9288] pgmajfault 191 [ 154.485267][ T9288] inactive_anon 155189248 [ 154.489605][ T9288] active_anon 150286336 [ 154.493819][ T9288] inactive_file 12288 [ 154.497890][ T9288] active_file 0 [ 154.501423][ T9288] unevictable 0 [ 154.505089][ T9288] hierarchical_memory_limit 314572800 [ 154.510479][ T9288] hierarchical_memsw_limit 9223372036854771712 [ 154.517409][ T9288] total_cache 305676288 [ 154.521600][ T9288] total_rss 61440 [ 154.525324][ T9288] total_shmem 305664000 [ 154.529482][ T9288] total_mapped_file 1052672 [ 154.534249][ T9288] total_dirty 0 [ 154.537907][ T9288] total_writeback 12288 [ 154.542811][ T9288] total_workingset_refault_anon 30 [ 154.547950][ T9288] total_workingset_refault_file 9548 [ 154.553327][ T9288] total_swap 126771200 [ 154.557618][ T9288] total_swapcached 28672 [ 154.562062][ T9288] total_pgpgin 417767 [ 154.566143][ T9288] total_pgpgout 343121 [ 154.570306][ T9288] total_pgfault 137408 [ 154.575003][ T9288] total_pgmajfault 191 [ 154.579164][ T9288] total_inactive_anon 155189248 [ 154.584166][ T9288] total_active_anon 150286336 [ 154.588928][ T9288] total_inactive_file 12288 [ 154.593603][ T9288] total_active_file 0 [ 154.597597][ T9288] total_unevictable 0 [ 154.602199][ T9288] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1881,pid=9256,uid=0 [ 154.616959][ T9288] Memory cgroup out of memory: Killed process 9256 (syz.0.1881) total-vm:91476kB, anon-rss:1256kB, file-rss:55216kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 154.971461][ T4621] Bluetooth: hci1: command 0x1003 tx timeout [ 154.971494][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 155.131757][ T43] Bluetooth: hci2: command 0x1003 tx timeout [ 155.138002][ T3497] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 155.185334][T10285] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2232'. [ 155.313645][T10285] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2232'. [ 155.370220][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2233'. [ 155.398103][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2233'. [ 155.437065][T10287] loop1: detected capacity change from 0 to 512 [ 155.452991][T10287] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.480616][T10287] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.501288][T10287] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2233: corrupted inode contents [ 155.513413][T10287] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.539157][T10287] EXT4-fs (loop1): Remounting filesystem read-only [ 155.573780][T10287] EXT4-fs (loop1): 1 truncate cleaned up [ 155.579930][ T3320] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 155.590715][ T3320] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 155.602721][ T3320] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 155.614149][T10287] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.717150][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.767073][T10293] syzkaller0: entered promiscuous mode [ 155.772737][T10293] syzkaller0: entered allmulticast mode [ 155.784497][T10295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2237'. [ 156.094119][T10295] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 156.134484][T10299] loop2: detected capacity change from 0 to 512 [ 156.303394][T10325] syzkaller0: entered allmulticast mode [ 156.309127][T10325] syzkaller0: entered promiscuous mode [ 156.438467][T10299] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2239: couldn't read orphan inode 26 (err -116) [ 156.470733][T10299] loop2: lost filesystem error report for type 5 error -116 [ 156.520967][T10330] FAULT_INJECTION: forcing a failure. [ 156.520967][T10330] name failslab, interval 1, probability 0, space 0, times 0 [ 156.528511][T10299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.541112][T10299] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.541958][T10330] CPU: 0 UID: 0 PID: 10330 Comm: syz.7.2250 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.542074][T10330] Tainted: [W]=WARN [ 156.542082][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 156.542165][T10330] Call Trace: [ 156.542173][T10330] [ 156.542182][T10330] __dump_stack+0x1d/0x30 [ 156.542210][T10330] dump_stack_lvl+0x95/0xd0 [ 156.542233][T10330] dump_stack+0x15/0x1b [ 156.542338][T10330] should_fail_ex+0x263/0x280 [ 156.542376][T10330] should_failslab+0x8c/0xb0 [ 156.542398][T10330] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 156.542426][T10330] ? __request_module+0x1df/0x3d0 [ 156.542460][T10330] ? should_failslab+0x8c/0xb0 [ 156.542486][T10330] kstrdup+0x3e/0xd0 [ 156.542507][T10330] __request_module+0x1df/0x3d0 [ 156.542539][T10330] ? capable+0x7b/0xb0 [ 156.542637][T10330] ? security_capable+0x7b/0x90 [ 156.542671][T10330] dev_load+0x61/0xc0 [ 156.542775][T10330] devinet_ioctl+0x91/0xe00 [ 156.542813][T10330] ? _copy_from_user+0x89/0xb0 [ 156.542867][T10330] inet_ioctl+0x27c/0x3a0 [ 156.542978][T10330] sock_do_ioctl+0x73/0x230 [ 156.543011][T10330] sock_ioctl+0x41b/0x610 [ 156.543036][T10330] ? mutex_lock+0x57/0x90 [ 156.543063][T10330] ? __pfx_sock_ioctl+0x10/0x10 [ 156.543163][T10330] __se_sys_ioctl+0xce/0x140 [ 156.543291][T10330] __x64_sys_ioctl+0x43/0x50 [ 156.543320][T10330] x64_sys_call+0x14b0/0x3000 [ 156.543401][T10330] do_syscall_64+0xc0/0x2a0 [ 156.543434][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.543456][T10330] RIP: 0033:0x7ff7dfb7bf79 [ 156.543475][T10330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.543494][T10330] RSP: 002b:00007ff7de5cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.543582][T10330] RAX: ffffffffffffffda RBX: 00007ff7dfdf5fa0 RCX: 00007ff7dfb7bf79 [ 156.543596][T10330] RDX: 0000200000000840 RSI: 000000000000891b RDI: 0000000000000003 [ 156.543611][T10330] RBP: 00007ff7de5cf090 R08: 0000000000000000 R09: 0000000000000000 [ 156.543624][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.543756][T10330] R13: 00007ff7dfdf6038 R14: 00007ff7dfdf5fa0 R15: 00007ffd1f796a68 [ 156.543777][T10330] [ 156.832285][T10325] syzkaller0 (unregistering): left allmulticast mode [ 156.834606][T10299] EXT4-fs (loop2): shut down requested (0) [ 156.839405][T10325] syzkaller0 (unregistering): left promiscuous mode [ 156.975244][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.084502][T10347] netlink: 'syz.7.2257': attribute type 1 has an invalid length. [ 157.092681][T10347] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2257'. [ 157.102261][ T28] kauditd_printk_skb: 1117 callbacks suppressed [ 157.102280][ T28] audit: type=1326 audit(1770739943.259:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 157.146206][ T28] audit: type=1326 audit(1770739943.299:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10321 comm="syz.1.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 157.250557][ T51] Bluetooth: hci1: Frame reassembly failed (-84) [ 157.282942][T10358] netlink: 752 bytes leftover after parsing attributes in process `syz.2.2259'. [ 157.496032][ T9264] syz.0.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 157.506290][ T9264] CPU: 1 UID: 0 PID: 9264 Comm: syz.0.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.506336][ T9264] Tainted: [W]=WARN [ 157.506443][ T9264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 157.506454][ T9264] Call Trace: [ 157.506462][ T9264] [ 157.506522][ T9264] __dump_stack+0x1d/0x30 [ 157.506553][ T9264] dump_stack_lvl+0x95/0xd0 [ 157.506748][ T9264] dump_stack+0x15/0x1b [ 157.506820][ T9264] dump_header+0x80/0x240 [ 157.506845][ T9264] oom_kill_process+0x295/0x350 [ 157.506868][ T9264] out_of_memory+0x97d/0xb80 [ 157.506954][ T9264] try_charge_memcg+0x62e/0xa10 [ 157.506999][ T9264] __mem_cgroup_charge+0x65/0x150 [ 157.507029][ T9264] shmem_get_folio_gfp+0x47b/0xd60 [ 157.507117][ T9264] shmem_write_begin+0xfc/0x1f0 [ 157.507150][ T9264] generic_perform_write+0x183/0x490 [ 157.507183][ T9264] ? current_time+0x188/0x240 [ 157.507281][ T9264] shmem_file_write_iter+0xc5/0xf0 [ 157.507318][ T9264] __kernel_write_iter+0x319/0x590 [ 157.507353][ T9264] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 157.507387][ T9264] dump_user_range+0xa7d/0xdb0 [ 157.507454][ T9264] elf_core_dump+0x21a2/0x2330 [ 157.507567][ T9264] ? 0xffffffffff600000 [ 157.507595][ T9264] coredump_write+0xacf/0xdf0 [ 157.507640][ T9264] vfs_coredump+0x26c7/0x3130 [ 157.507679][ T9264] ? __memcg_slab_free_hook+0xbc/0x230 [ 157.507774][ T9264] ? proc_coredump_connector+0x160/0x2b0 [ 157.507806][ T9264] ? kmem_cache_free+0xdf/0x380 [ 157.507949][ T9264] get_signal+0xd7b/0xf60 [ 157.507985][ T9264] arch_do_signal_or_restart+0x96/0x450 [ 157.508016][ T9264] irqentry_exit+0xf7/0x510 [ 157.508066][ T9264] ? force_sig+0x89/0xb0 [ 157.508087][ T9264] exc_general_protection+0x153/0x1e0 [ 157.508138][ T9264] asm_exc_general_protection+0x26/0x30 [ 157.508192][ T9264] RIP: 0033:0x7fdb035abf81 [ 157.508213][ T9264] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 157.508232][ T9264] RSP: 002b:0000200000000060 EFLAGS: 00010217 [ 157.508249][ T9264] RAX: 0000000000000000 RBX: 00007fdb03826090 RCX: 00007fdb035abf79 [ 157.508265][ T9264] RDX: 00002000000001c0 RSI: 0000200000000060 RDI: 0000000020008400 [ 157.508278][ T9264] RBP: 00007fdb036427e0 R08: 0000200000000f40 R09: 0000200000000f40 [ 157.508342][ T9264] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 157.508434][ T9264] R13: 00007fdb03826128 R14: 00007fdb03826090 R15: 00007ffc40a3c078 [ 157.508453][ T9264] [ 157.508474][ T9264] memory: usage 307200kB, limit 307200kB, failcnt 36128 [ 157.768046][ T9264] memory+swap: usage 430988kB, limit 9007199254740988kB, failcnt 0 [ 157.776379][ T9264] kmem: usage 8620kB, limit 9007199254740988kB, failcnt 0 [ 157.783757][ T9264] Memory cgroup stats for /syz0: [ 157.784032][ T9264] cache 305496064 [ 157.792780][ T9264] rss 249856 [ 157.795991][ T9264] shmem 305487872 [ 157.799650][ T9264] mapped_file 1052672 [ 157.803796][ T9264] dirty 0 [ 157.806794][ T9264] writeback 0 [ 157.810121][ T9264] workingset_refault_anon 40 [ 157.814949][ T9264] workingset_refault_file 12075 [ 157.819969][ T9264] swap 126758912 [ 157.823734][ T9264] swapcached 40960 [ 157.827774][ T9264] pgpgin 429743 [ 157.831246][ T9264] pgpgout 355098 [ 157.835011][ T9264] pgfault 138408 [ 157.838570][ T9264] pgmajfault 226 [ 157.842152][ T9264] inactive_anon 52580352 [ 157.846580][ T9264] active_anon 253157376 [ 157.850766][ T9264] inactive_file 0 [ 157.854601][ T9264] active_file 8192 [ 157.858540][ T9264] unevictable 0 [ 157.862182][ T9264] hierarchical_memory_limit 314572800 [ 157.868798][ T9264] hierarchical_memsw_limit 9223372036854771712 [ 157.875303][ T9264] total_cache 305496064 [ 157.879539][ T9264] total_rss 249856 [ 157.883530][ T9264] total_shmem 305487872 [ 157.887690][ T9264] total_mapped_file 1052672 [ 157.892333][ T9264] total_dirty 0 [ 157.895809][ T9264] total_writeback 0 [ 157.899638][ T9264] total_workingset_refault_anon 40 [ 157.904871][ T9264] total_workingset_refault_file 12075 [ 157.910258][ T9264] total_swap 126758912 [ 157.914352][ T9264] total_swapcached 40960 [ 157.918781][ T9264] total_pgpgin 429743 [ 157.922887][ T9264] total_pgpgout 355098 [ 157.926974][ T9264] total_pgfault 138408 [ 157.931031][ T9264] total_pgmajfault 226 [ 157.935117][ T9264] total_inactive_anon 52580352 [ 157.939943][ T9264] total_active_anon 253157376 [ 157.944635][ T9264] total_inactive_file 0 [ 157.948863][ T9264] total_active_file 8192 [ 157.953205][ T9264] total_unevictable 0 [ 157.957425][ T9264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1881,pid=9288,uid=0 [ 157.972239][ T9264] Memory cgroup out of memory: Killed process 9288 (syz.0.1881) total-vm:91476kB, anon-rss:1256kB, file-rss:55268kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 158.148280][ T28] audit: type=1326 audit(1770739944.299:13391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.172820][ T28] audit: type=1326 audit(1770739944.299:13392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.197175][ T28] audit: type=1326 audit(1770739944.299:13393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.221962][ T28] audit: type=1326 audit(1770739944.299:13394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.246043][ T28] audit: type=1326 audit(1770739944.299:13395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.270452][ T28] audit: type=1326 audit(1770739944.299:13396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.295570][ T28] audit: type=1326 audit(1770739944.299:13397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.337791][T10393] vlan2: entered promiscuous mode [ 158.343054][T10393] vlan2: entered allmulticast mode [ 158.348415][T10393] hsr_slave_1: entered allmulticast mode [ 158.359634][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 158.365639][ T28] audit: type=1326 audit(1770739944.339:13398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10388 comm="syz.7.2268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dfb7bf79 code=0x7ffc0000 [ 158.429860][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2270'. [ 158.494808][T10395] hub 2-0:1.0: USB hub found [ 158.500147][T10395] hub 2-0:1.0: 8 ports detected [ 158.818292][T10408] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10408 comm=syz.5.2276 [ 159.025798][T10414] netlink: 'syz.5.2277': attribute type 6 has an invalid length. [ 159.034418][T10414] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2277'. [ 159.124703][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2279'. [ 159.134359][T10427] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 159.261576][T10445] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2286'. [ 159.291864][ T3497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 159.292593][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 159.399616][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2290'. [ 159.492121][T10469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2297'. [ 159.511458][T10469] netlink: 'syz.5.2297': attribute type 1 has an invalid length. [ 159.519485][T10469] netlink: 'syz.5.2297': attribute type 2 has an invalid length. [ 159.527590][T10469] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2297'. [ 159.661728][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 159.670969][T10479] netlink: 752 bytes leftover after parsing attributes in process `syz.2.2300'. [ 159.685151][ T9291] syz.0.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 159.695242][ T9291] CPU: 0 UID: 0 PID: 9291 Comm: syz.0.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 159.695279][ T9291] Tainted: [W]=WARN [ 159.695287][ T9291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 159.695328][ T9291] Call Trace: [ 159.695337][ T9291] [ 159.695347][ T9291] __dump_stack+0x1d/0x30 [ 159.695377][ T9291] dump_stack_lvl+0x95/0xd0 [ 159.695399][ T9291] dump_stack+0x15/0x1b [ 159.695417][ T9291] dump_header+0x80/0x240 [ 159.695465][ T9291] oom_kill_process+0x295/0x350 [ 159.695589][ T9291] out_of_memory+0x97d/0xb80 [ 159.695619][ T9291] try_charge_memcg+0x62e/0xa10 [ 159.695665][ T9291] __mem_cgroup_charge+0x65/0x150 [ 159.695700][ T9291] shmem_get_folio_gfp+0x47b/0xd60 [ 159.695735][ T9291] shmem_write_begin+0xfc/0x1f0 [ 159.695768][ T9291] generic_perform_write+0x183/0x490 [ 159.695816][ T9291] ? current_time+0x188/0x240 [ 159.695859][ T9291] shmem_file_write_iter+0xc5/0xf0 [ 159.695937][ T9291] __kernel_write_iter+0x319/0x590 [ 159.696048][ T9291] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 159.696079][ T9291] dump_user_range+0xa7d/0xdb0 [ 159.696115][ T9291] elf_core_dump+0x21a2/0x2330 [ 159.696210][ T9291] ? 0xffffffffff600000 [ 159.696292][ T9291] coredump_write+0xacf/0xdf0 [ 159.696322][ T9291] vfs_coredump+0x26c7/0x3130 [ 159.696360][ T9291] ? __memcg_slab_free_hook+0xbc/0x230 [ 159.696415][ T9291] ? proc_coredump_connector+0x160/0x2b0 [ 159.696444][ T9291] ? kmem_cache_free+0xdf/0x380 [ 159.696469][ T9291] get_signal+0xd7b/0xf60 [ 159.696501][ T9291] arch_do_signal_or_restart+0x96/0x450 [ 159.696562][ T9291] irqentry_exit+0xf7/0x510 [ 159.696640][ T9291] ? force_sig+0x89/0xb0 [ 159.696666][ T9291] exc_general_protection+0x153/0x1e0 [ 159.696698][ T9291] asm_exc_general_protection+0x26/0x30 [ 159.696722][ T9291] RIP: 0033:0x7fdb035abf81 [ 159.696743][ T9291] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 159.696821][ T9291] RSP: 002b:0000200000000060 EFLAGS: 00010217 [ 159.696839][ T9291] RAX: 0000000000000000 RBX: 00007fdb03826090 RCX: 00007fdb035abf79 [ 159.696853][ T9291] RDX: 00002000000001c0 RSI: 0000200000000060 RDI: 0000000020008400 [ 159.696927][ T9291] RBP: 00007fdb036427e0 R08: 0000200000000f40 R09: 0000200000000f40 [ 159.696943][ T9291] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 159.696957][ T9291] R13: 00007fdb03826128 R14: 00007fdb03826090 R15: 00007ffc40a3c078 [ 159.696977][ T9291] [ 159.696985][ T9291] memory: usage 307200kB, limit 307200kB, failcnt 37867 [ 159.962622][ T9291] memory+swap: usage 430972kB, limit 9007199254740988kB, failcnt 0 [ 159.971042][ T9291] kmem: usage 8208kB, limit 9007199254740988kB, failcnt 0 [ 159.978530][ T9291] Memory cgroup stats for /syz0: [ 159.982242][ T9291] cache 306020352 [ 159.991038][ T9291] rss 110592 [ 159.995182][ T9291] shmem 306016256 [ 159.998837][ T9291] mapped_file 1052672 [ 160.003014][ T9291] dirty 0 [ 160.003023][ T9291] writeback 28672 [ 160.003030][ T9291] workingset_refault_anon 50 [ 160.003038][ T9291] workingset_refault_file 13496 [ 160.003046][ T9291] swap 126742528 [ 160.003053][ T9291] swapcached 57344 [ 160.003060][ T9291] pgpgin 440863 [ 160.003069][ T9291] pgpgout 366115 [ 160.003078][ T9291] pgfault 138553 [ 160.003087][ T9291] pgmajfault 250 [ 160.003096][ T9291] inactive_anon 3653632 [ 160.003139][ T9291] active_anon 302243840 [ 160.003146][ T9291] inactive_file 0 [ 160.003153][ T9291] active_file 4096 [ 160.003160][ T9291] unevictable 0 [ 160.003167][ T9291] hierarchical_memory_limit 314572800 [ 160.003175][ T9291] hierarchical_memsw_limit 9223372036854771712 [ 160.003185][ T9291] total_cache 306020352 [ 160.003194][ T9291] total_rss 110592 [ 160.003204][ T9291] total_shmem 306016256 [ 160.003213][ T9291] total_mapped_file 1052672 [ 160.003303][ T9291] total_dirty 0 [ 160.003312][ T9291] total_writeback 28672 [ 160.003478][ T9291] total_workingset_refault_anon 50 [ 160.003487][ T9291] total_workingset_refault_file 13496 [ 160.003496][ T9291] total_swap 126742528 [ 160.003504][ T9291] total_swapcached 57344 [ 160.003513][ T9291] total_pgpgin 440863 [ 160.003522][ T9291] total_pgpgout 366115 [ 160.003530][ T9291] total_pgfault 138553 [ 160.003539][ T9291] total_pgmajfault 250 [ 160.003622][ T9291] total_inactive_anon 3653632 [ 160.003632][ T9291] total_active_anon 302243840 [ 160.003713][ T9291] total_inactive_file 0 [ 160.003723][ T9291] total_active_file 4096 [ 160.003732][ T9291] total_unevictable 0 [ 160.003741][ T9291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1881,pid=9245,uid=0 [ 160.003940][ T9291] Memory cgroup out of memory: Killed process 9245 (syz.0.1881) total-vm:91476kB, anon-rss:1256kB, file-rss:55228kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 160.928596][T10510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10510 comm=syz.1.2312 [ 160.952033][T10510] C: renamed from team_slave_0 [ 160.958707][T10510] netlink: 'syz.1.2312': attribute type 3 has an invalid length. [ 160.966498][T10510] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 161.338231][T10524] netlink: 'syz.7.2317': attribute type 21 has an invalid length. [ 161.447102][T10528] FAULT_INJECTION: forcing a failure. [ 161.447102][T10528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.461519][T10528] CPU: 1 UID: 0 PID: 10528 Comm: syz.0.2288 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.461559][T10528] Tainted: [W]=WARN [ 161.461567][T10528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.461581][T10528] Call Trace: [ 161.461598][T10528] [ 161.461607][T10528] __dump_stack+0x1d/0x30 [ 161.461636][T10528] dump_stack_lvl+0x95/0xd0 [ 161.461735][T10528] dump_stack+0x15/0x1b [ 161.461790][T10528] should_fail_ex+0x263/0x280 [ 161.461832][T10528] should_fail+0xb/0x20 [ 161.461865][T10528] should_fail_usercopy+0x1a/0x20 [ 161.461889][T10528] strncpy_from_user+0x27/0x250 [ 161.461924][T10528] do_getname+0x59/0x1c0 [ 161.462007][T10528] __se_sys_linkat+0x3e/0x1d0 [ 161.462036][T10528] __x64_sys_linkat+0x67/0x80 [ 161.462063][T10528] x64_sys_call+0x2ad0/0x3000 [ 161.462092][T10528] do_syscall_64+0xc0/0x2a0 [ 161.462144][T10528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.462170][T10528] RIP: 0033:0x7fdb035abf79 [ 161.462190][T10528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.462211][T10528] RSP: 002b:00007fdb02007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 161.462304][T10528] RAX: ffffffffffffffda RBX: 00007fdb03825fa0 RCX: 00007fdb035abf79 [ 161.462321][T10528] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 161.462399][T10528] RBP: 00007fdb02007090 R08: 0000000000000000 R09: 0000000000000000 [ 161.462411][T10528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.462423][T10528] R13: 00007fdb03826038 R14: 00007fdb03825fa0 R15: 00007ffc40a3c078 [ 161.462444][T10528] [ 161.662373][T10534] loop7: detected capacity change from 0 to 1024 [ 161.691429][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 161.691465][ T3497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 161.706125][T10534] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 161.744891][T10539] loop2: detected capacity change from 0 to 512 [ 161.758072][T10539] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.771707][T10534] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.801057][T10539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.834136][T10539] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 161.859072][ T8316] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /134/file1: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=61712, size=1024 fake=0 [ 161.882411][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.915699][ T8316] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /134/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 161.924066][ T9255] syz.0.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 161.948152][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.0.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 161.948201][ T9255] Tainted: [W]=WARN [ 161.948210][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 161.948221][ T9255] Call Trace: [ 161.948229][ T9255] [ 161.948238][ T9255] __dump_stack+0x1d/0x30 [ 161.948266][ T9255] dump_stack_lvl+0x95/0xd0 [ 161.948359][ T9255] dump_stack+0x15/0x1b [ 161.948378][ T9255] dump_header+0x80/0x240 [ 161.948398][ T9255] oom_kill_process+0x295/0x350 [ 161.948423][ T9255] out_of_memory+0x97d/0xb80 [ 161.948446][ T9255] try_charge_memcg+0x62e/0xa10 [ 161.948495][ T9255] __mem_cgroup_charge+0x65/0x150 [ 161.948525][ T9255] shmem_get_folio_gfp+0x47b/0xd60 [ 161.948594][ T9255] shmem_write_begin+0xfc/0x1f0 [ 161.948628][ T9255] generic_perform_write+0x183/0x490 [ 161.948759][ T9255] ? current_time+0x188/0x240 [ 161.948791][ T9255] shmem_file_write_iter+0xc5/0xf0 [ 161.948859][ T9255] __kernel_write_iter+0x319/0x590 [ 161.948935][ T9255] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 161.948971][ T9255] dump_user_range+0xa7d/0xdb0 [ 161.949007][ T9255] elf_core_dump+0x21a2/0x2330 [ 161.949116][ T9255] ? 0xffffffffff600000 [ 161.949147][ T9255] coredump_write+0xacf/0xdf0 [ 161.949184][ T9255] vfs_coredump+0x26c7/0x3130 [ 161.949221][ T9255] ? __memcg_slab_free_hook+0xbc/0x230 [ 161.949288][ T9255] ? proc_coredump_connector+0x160/0x2b0 [ 161.949313][ T9255] ? kmem_cache_free+0xdf/0x380 [ 161.949434][ T9255] get_signal+0xd7b/0xf60 [ 161.949464][ T9255] arch_do_signal_or_restart+0x96/0x450 [ 161.949501][ T9255] irqentry_exit+0xf7/0x510 [ 161.949541][ T9255] ? force_sig+0x89/0xb0 [ 161.949567][ T9255] exc_general_protection+0x153/0x1e0 [ 161.949598][ T9255] asm_exc_general_protection+0x26/0x30 [ 161.949667][ T9255] RIP: 0033:0x7fdb035abf81 [ 161.949685][ T9255] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 161.949705][ T9255] RSP: 002b:0000200000000060 EFLAGS: 00010217 [ 161.949725][ T9255] RAX: 0000000000000000 RBX: 00007fdb03826090 RCX: 00007fdb035abf79 [ 161.949738][ T9255] RDX: 00002000000001c0 RSI: 0000200000000060 RDI: 0000000020008400 [ 161.949813][ T9255] RBP: 00007fdb036427e0 R08: 0000200000000f40 R09: 0000200000000f40 [ 161.949838][ T9255] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 161.949851][ T9255] R13: 00007fdb03826128 R14: 00007fdb03826090 R15: 00007ffc40a3c078 [ 161.949869][ T9255] [ 161.949876][ T9255] memory: usage 307200kB, limit 307200kB, failcnt 38845 [ 161.958076][ T8316] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 161.961471][ T9255] memory+swap: usage 430692kB, limit 9007199254740988kB, failcnt 0 [ 161.979728][ T8316] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /134/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 161.982773][ T9255] kmem: usage 8012kB, limit 9007199254740988kB, failcnt 0 [ 162.022933][ T8316] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 162.026708][ T9255] Memory cgroup stats for /syz0: [ 162.044712][ T8316] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /134/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 162.182930][ T9255] cache 305926144 [ 162.313605][ T8316] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 162.315143][ T9255] rss 143360 [ 162.318838][ T8316] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /134/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 162.337863][ T9255] shmem 305926144 [ 162.351764][ T8316] EXT4-fs error (device loop7): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 162.363173][ T9255] mapped_file 1052672 [ 162.389811][ T9255] dirty 0 [ 162.393405][ T9255] writeback 303104 [ 162.397267][ T9255] workingset_refault_anon 60 [ 162.402051][ T9255] workingset_refault_file 14947 [ 162.406971][ T9255] swap 126455808 [ 162.410745][ T9255] swapcached 344064 [ 162.414623][ T9255] pgpgin 452205 [ 162.418096][ T9255] pgpgout 377407 [ 162.422359][ T9255] pgfault 138812 [ 162.425916][ T9255] pgmajfault 267 [ 162.429486][ T9255] inactive_anon 51478528 [ 162.433847][ T9255] active_anon 254369792 [ 162.438030][ T9255] inactive_file 0 [ 162.441817][ T9255] active_file 0 [ 162.445349][ T9255] unevictable 0 [ 162.448832][ T9255] hierarchical_memory_limit 314572800 [ 162.454930][ T9255] hierarchical_memsw_limit 9223372036854771712 [ 162.461227][ T9255] total_cache 305926144 [ 162.463432][ T8316] EXT4-fs error (device loop7): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /134/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 162.465713][ T9255] total_rss 143360 [ 162.491417][ T9255] total_shmem 305926144 [ 162.495660][ T9255] total_mapped_file 1052672 [ 162.500172][ T9255] total_dirty 0 [ 162.503762][ T9255] total_writeback 303104 [ 162.508102][ T9255] total_workingset_refault_anon 60 [ 162.513957][ T9255] total_workingset_refault_file 14947 [ 162.519721][ T9255] total_swap 126455808 [ 162.523857][ T9255] total_swapcached 344064 [ 162.528203][ T9255] total_pgpgin 452205 [ 162.532302][ T9255] total_pgpgout 377407 [ 162.536477][ T9255] total_pgfault 138812 [ 162.540631][ T9255] total_pgmajfault 267 [ 162.545298][ T9255] total_inactive_anon 51478528 [ 162.550079][ T9255] total_active_anon 254369792 [ 162.555019][ T9255] total_inactive_file 0 [ 162.559199][ T9255] total_active_file 0 [ 162.563418][ T9255] total_unevictable 0 [ 162.567502][ T9255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1881,pid=9276,uid=0 [ 162.583107][ T9255] Memory cgroup out of memory: Killed process 9276 (syz.0.1881) total-vm:91476kB, anon-rss:1256kB, file-rss:56260kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 162.615902][ T28] kauditd_printk_skb: 543 callbacks suppressed [ 162.615920][ T28] audit: type=1326 audit(1770739948.759:13942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10520 comm="syz.5.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb3178bbf79 code=0x7ffc0000 [ 162.653713][T10567] __nla_validate_parse: 6 callbacks suppressed [ 162.653734][T10567] netlink: 752 bytes leftover after parsing attributes in process `syz.5.2333'. [ 162.681636][ T3320] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.763659][ T3320] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.790336][ T8316] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 162.818946][ T3320] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.820522][ T9257] syz.0.1881 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 162.840363][ T9257] CPU: 0 UID: 0 PID: 9257 Comm: syz.0.1881 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.840398][ T9257] Tainted: [W]=WARN [ 162.840404][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.840462][ T9257] Call Trace: [ 162.840471][ T9257] [ 162.840482][ T9257] __dump_stack+0x1d/0x30 [ 162.840512][ T9257] dump_stack_lvl+0x95/0xd0 [ 162.840575][ T9257] dump_stack+0x15/0x1b [ 162.840595][ T9257] dump_header+0x80/0x240 [ 162.840624][ T9257] oom_kill_process+0x295/0x350 [ 162.840698][ T9257] out_of_memory+0x97d/0xb80 [ 162.840725][ T9257] try_charge_memcg+0x62e/0xa10 [ 162.840767][ T9257] __mem_cgroup_charge+0x65/0x150 [ 162.840821][ T9257] shmem_get_folio_gfp+0x47b/0xd60 [ 162.840926][ T9257] shmem_write_begin+0xfc/0x1f0 [ 162.841002][ T9257] generic_perform_write+0x183/0x490 [ 162.841104][ T9257] shmem_file_write_iter+0xc5/0xf0 [ 162.841134][ T9257] __kernel_write_iter+0x319/0x590 [ 162.841211][ T9257] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 162.841242][ T9257] dump_user_range+0xa7d/0xdb0 [ 162.841272][ T9257] elf_core_dump+0x21a2/0x2330 [ 162.841378][ T9257] ? 0xffffffffff600000 [ 162.841409][ T9257] coredump_write+0xacf/0xdf0 [ 162.841446][ T9257] vfs_coredump+0x26c7/0x3130 [ 162.841536][ T9257] ? __memcg_slab_free_hook+0xbc/0x230 [ 162.841620][ T9257] ? proc_coredump_connector+0x160/0x2b0 [ 162.841719][ T9257] ? kmem_cache_free+0xdf/0x380 [ 162.841749][ T9257] get_signal+0xd7b/0xf60 [ 162.841781][ T9257] arch_do_signal_or_restart+0x96/0x450 [ 162.841816][ T9257] irqentry_exit+0xf7/0x510 [ 162.841841][ T9257] ? force_sig+0x89/0xb0 [ 162.841867][ T9257] exc_general_protection+0x153/0x1e0 [ 162.841896][ T9257] asm_exc_general_protection+0x26/0x30 [ 162.841994][ T9257] RIP: 0033:0x7fdb035abf81 [ 162.842015][ T9257] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 162.842035][ T9257] RSP: 002b:0000200000000060 EFLAGS: 00010217 [ 162.842134][ T9257] RAX: 0000000000000000 RBX: 00007fdb03826090 RCX: 00007fdb035abf79 [ 162.842149][ T9257] RDX: 00002000000001c0 RSI: 0000200000000060 RDI: 0000000020008400 [ 162.842164][ T9257] RBP: 00007fdb036427e0 R08: 0000200000000f40 R09: 0000200000000f40 [ 162.842177][ T9257] R10: 0000200000000200 R11: 0000000000000206 R12: 0000000000000000 [ 162.842190][ T9257] R13: 00007fdb03826128 R14: 00007fdb03826090 R15: 00007ffc40a3c078 [ 162.842208][ T9257] [ 163.087109][ T9257] memory: usage 297124kB, limit 307200kB, failcnt 39127 [ 163.094716][ T9257] memory+swap: usage 413132kB, limit 9007199254740988kB, failcnt 0 [ 163.102836][ T9257] kmem: usage 7772kB, limit 9007199254740988kB, failcnt 0 [ 163.110438][ T9257] Memory cgroup stats for /syz0: [ 163.147966][ T3320] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.181733][T10578] loop2: detected capacity change from 0 to 512 [ 163.306752][ T3320] bridge_slave_1: left allmulticast mode [ 163.312545][ T3320] bridge_slave_1: left promiscuous mode [ 163.318275][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.343023][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 163.350821][ T3320] bridge_slave_0: left allmulticast mode [ 163.356589][ T3320] bridge_slave_0: left promiscuous mode [ 163.362541][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.372710][ T9257] cache 271949824 [ 163.376383][ T9257] rss 135168 [ 163.379645][ T9257] shmem 271949824 [ 163.383365][ T9257] mapped_file 1052672 [ 163.387383][ T9257] dirty 0 [ 163.390512][ T9257] writeback 946176 [ 163.394314][ T9257] workingset_refault_anon 60 [ 163.399131][ T9257] workingset_refault_file 14947 [ 163.404030][ T9257] swap 123871232 [ 163.407590][ T9257] swapcached 987136 [ 163.411552][ T9257] pgpgin 452303 [ 163.415140][ T9257] pgpgout 385645 [ 163.418698][ T9257] pgfault 138812 [ 163.422299][ T9257] pgmajfault 267 [ 163.426424][ T9257] inactive_anon 8933376 [ 163.430980][ T9257] active_anon 263737344 [ 163.435397][ T9257] inactive_file 0 [ 163.439613][ T9257] active_file 0 [ 163.443186][ T9257] unevictable 0 [ 163.446896][ T9257] hierarchical_memory_limit 314572800 [ 163.452426][ T9257] hierarchical_memsw_limit 9223372036854771712 [ 163.453008][T10595] netlink: 752 bytes leftover after parsing attributes in process `syz.1.2344'. [ 163.459137][ T9257] total_cache 271949824 [ 163.472610][ T9257] total_rss 135168 [ 163.476440][ T9257] total_shmem 271949824 [ 163.481428][ T9257] total_mapped_file 1052672 [ 163.486048][ T9257] total_dirty 0 [ 163.489701][ T9257] total_writeback 946176 [ 163.494162][ T9257] total_workingset_refault_anon 60 [ 163.499370][ T9257] total_workingset_refault_file 14947 [ 163.504829][ T9257] total_swap 123871232 [ 163.508922][ T9257] total_swapcached 987136 [ 163.508935][ T9257] total_pgpgin 452303 [ 163.508944][ T9257] total_pgpgout 385645 [ 163.521673][ T9257] total_pgfault 138812 [ 163.521685][ T9257] total_pgmajfault 267 [ 163.521694][ T9257] total_inactive_anon 8933376 [ 163.521704][ T9257] total_active_anon 263737344 [ 163.521713][ T9257] total_inactive_file 0 [ 163.544221][ T9257] total_active_file 0 [ 163.548301][ T9257] total_unevictable 0 [ 163.552420][ T9257] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1881,pid=9257,uid=0 [ 163.567110][ T9257] Memory cgroup out of memory: Killed process 9257 (syz.0.1881) total-vm:91476kB, anon-rss:1256kB, file-rss:55220kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 163.733837][ T3320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.745140][ T3320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.755305][ T3320] bond0 (unregistering): Released all slaves [ 163.763210][ T3320] bond1 (unregistering): Released all slaves [ 163.780130][T10605] wireguard0: entered promiscuous mode [ 163.785817][T10605] wireguard0: entered allmulticast mode [ 163.833986][ T3320] hsr_slave_0: left promiscuous mode [ 163.844116][ T3320] hsr_slave_1: left promiscuous mode [ 163.857705][ T3320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.865826][ T3320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.873626][ T3320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.881069][ T3320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.897180][ T3320] veth0_macvtap: left promiscuous mode [ 163.902870][ T3320] veth1_vlan: left promiscuous mode [ 163.908258][ T3320] veth0_vlan: left promiscuous mode [ 163.992433][ T3320] team0 (unregistering): Port device team_slave_1 removed [ 164.005816][ T3320] team0 (unregistering): Port device team_slave_0 removed [ 164.170767][T10582] chnl_net:caif_netlink_parms(): no params data found [ 164.352429][T10582] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.359623][T10582] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.472710][T10582] bridge_slave_0: entered allmulticast mode [ 164.479474][T10582] bridge_slave_0: entered promiscuous mode [ 164.493512][T10582] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.500661][T10582] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.522298][T10582] bridge_slave_1: entered allmulticast mode [ 164.529803][T10582] bridge_slave_1: entered promiscuous mode [ 164.572664][T10582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.598185][T10582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.629986][T10582] team0: Port device team_slave_0 added [ 164.643202][T10582] team0: Port device team_slave_1 added [ 164.669970][T10582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.677767][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.704622][T10582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.742419][T10582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.749584][T10582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.776516][T10582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.805142][T10582] hsr_slave_0: entered promiscuous mode [ 164.811310][T10582] hsr_slave_1: entered promiscuous mode [ 164.821637][T10582] debugfs: 'hsr0' already exists in 'hsr' [ 164.827922][T10582] Cannot create hsr debugfs directory [ 164.914308][T10676] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 164.942798][T10676] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2353'. [ 164.994514][T10582] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 165.012310][T10687] netlink: 'syz.5.2355': attribute type 10 has an invalid length. [ 165.013987][T10582] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 165.044984][T10582] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 165.061142][T10582] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 165.101591][T10687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.109926][T10687] .`: (slave batadv0): Enslaving as an active interface with an up link [ 165.194228][T10582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.239023][T10582] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.250841][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.258218][ T2104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.277164][ T28] audit: type=1400 audit(1770739951.429:13943): avc: denied { connect } for pid=10717 comm="syz.5.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 165.311538][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.318688][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.371659][ T43] Bluetooth: hci1: command 0x1003 tx timeout [ 165.372338][ T3497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 165.486865][T10582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.557954][T10736] vlan2: entered allmulticast mode [ 165.582413][T10736] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2364'. [ 165.707978][T10582] veth0_vlan: entered promiscuous mode [ 165.716197][T10582] veth1_vlan: entered promiscuous mode [ 165.744872][T10582] veth0_macvtap: entered promiscuous mode [ 165.753913][T10582] veth1_macvtap: entered promiscuous mode [ 165.768472][T10582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.796880][T10582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.806700][ T3320] IPVS: stop unused estimator thread 0... [ 165.825882][ T2104] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.861622][ T2104] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.922516][ T2104] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.970893][ T2104] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.066779][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.082999][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.151555][T10765] loop2: detected capacity change from 0 to 128 [ 166.517342][T10775] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 166.525962][T10775] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 166.568558][T10779] loop2: detected capacity change from 0 to 1024 [ 166.600221][T10779] EXT4-fs: Ignoring removed bh option [ 166.617697][T10782] netlink: 'syz.5.2375': attribute type 4 has an invalid length. [ 166.644590][T10784] loop8: detected capacity change from 0 to 256 [ 166.665807][T10784] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 166.687217][T10779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.700626][T10784] FAULT_INJECTION: forcing a failure. [ 166.700626][T10784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.713988][T10784] CPU: 1 UID: 0 PID: 10784 Comm: syz.8.2376 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 166.714026][T10784] Tainted: [W]=WARN [ 166.714034][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 166.714113][T10784] Call Trace: [ 166.714120][T10784] [ 166.714129][T10784] __dump_stack+0x1d/0x30 [ 166.714157][T10784] dump_stack_lvl+0x95/0xd0 [ 166.714184][T10784] dump_stack+0x15/0x1b [ 166.714203][T10784] should_fail_ex+0x263/0x280 [ 166.714280][T10784] should_fail+0xb/0x20 [ 166.714312][T10784] should_fail_usercopy+0x1a/0x20 [ 166.714332][T10784] _copy_to_user+0x20/0xa0 [ 166.714354][T10784] simple_read_from_buffer+0xb5/0x130 [ 166.714473][T10784] proc_fail_nth_read+0x10e/0x150 [ 166.714590][T10784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.714618][T10784] vfs_read+0x1ab/0x7f0 [ 166.714649][T10784] ? __rcu_read_unlock+0x4e/0x70 [ 166.714681][T10784] ? __fget_files+0x184/0x1c0 [ 166.714774][T10784] ? mutex_lock+0x57/0x90 [ 166.714906][T10784] ksys_read+0xdc/0x1a0 [ 166.714935][T10784] __x64_sys_read+0x40/0x50 [ 166.714970][T10784] x64_sys_call+0x2889/0x3000 [ 166.715027][T10784] do_syscall_64+0xc0/0x2a0 [ 166.715066][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.715092][T10784] RIP: 0033:0x7f1811c5c84e [ 166.715119][T10784] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 166.715187][T10784] RSP: 002b:00007f18106eefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.715240][T10784] RAX: ffffffffffffffda RBX: 00007f18106ef6c0 RCX: 00007f1811c5c84e [ 166.715254][T10784] RDX: 000000000000000f RSI: 00007f18106ef0a0 RDI: 0000000000000005 [ 166.715267][T10784] RBP: 00007f18106ef090 R08: 0000000000000000 R09: 0000000000000000 [ 166.715359][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.715371][T10784] R13: 00007f1811f16038 R14: 00007f1811f15fa0 R15: 00007fffd2521238 [ 166.715389][T10784] [ 167.069362][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.106854][T10802] netlink: 'syz.5.2382': attribute type 4 has an invalid length. [ 167.125357][T10800] bridge_slave_0: default FDB implementation only supports local addresses [ 167.202514][ T28] audit: type=1400 audit(1770739953.359:13944): avc: denied { unmount } for pid=10582 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.254784][T10822] loop8: detected capacity change from 0 to 512 [ 167.308856][T10822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.316789][T10822] ext3: Unknown parameter 'pcr' [ 167.422027][T10841] team0: entered promiscuous mode [ 167.427244][T10841] C: entered promiscuous mode [ 167.432183][T10841] team_slave_1: entered promiscuous mode [ 167.438146][T10841] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 167.524744][T10847] loop2: detected capacity change from 0 to 8192 [ 167.588550][T10860] FAULT_INJECTION: forcing a failure. [ 167.588550][T10860] name failslab, interval 1, probability 0, space 0, times 0 [ 167.588588][T10860] CPU: 0 UID: 0 PID: 10860 Comm: syz.1.2402 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 167.588631][T10860] Tainted: [W]=WARN [ 167.588639][T10860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 167.588722][T10860] Call Trace: [ 167.588730][T10860] [ 167.588738][T10860] __dump_stack+0x1d/0x30 [ 167.588768][T10860] dump_stack_lvl+0x95/0xd0 [ 167.588795][T10860] dump_stack+0x15/0x1b [ 167.588817][T10860] should_fail_ex+0x263/0x280 [ 167.588960][T10860] should_failslab+0x8c/0xb0 [ 167.588983][T10860] __kmalloc_cache_noprof+0x64/0x4a0 [ 167.589009][T10860] ? unix_prepare_fpl+0x82/0x3c0 [ 167.589034][T10860] unix_prepare_fpl+0x82/0x3c0 [ 167.589108][T10860] unix_scm_to_skb+0x1a9/0x250 [ 167.589140][T10860] unix_dgram_sendmsg+0x3b2/0x1060 [ 167.589311][T10860] ? selinux_socket_sendmsg+0x192/0x1c0 [ 167.589341][T10860] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 167.589386][T10860] ____sys_sendmsg+0x5af/0x600 [ 167.589416][T10860] ___sys_sendmsg+0x195/0x1e0 [ 167.589494][T10860] __x64_sys_sendmsg+0xd4/0x160 [ 167.589544][T10860] x64_sys_call+0x17ba/0x3000 [ 167.589574][T10860] do_syscall_64+0xc0/0x2a0 [ 167.589729][T10860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.589755][T10860] RIP: 0033:0x7fee005cbf79 [ 167.589773][T10860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.589795][T10860] RSP: 002b:00007fedff027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.589819][T10860] RAX: ffffffffffffffda RBX: 00007fee00845fa0 RCX: 00007fee005cbf79 [ 167.589882][T10860] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000001 [ 167.590037][T10860] RBP: 00007fedff027090 R08: 0000000000000000 R09: 0000000000000000 [ 167.590053][T10860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.590068][T10860] R13: 00007fee00846038 R14: 00007fee00845fa0 R15: 00007ffdb7f93d38 [ 167.590090][T10860] [ 167.731591][T10874] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2406'. [ 167.734217][T10874] vlan3: entered allmulticast mode [ 167.860305][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2412'. [ 167.881206][T10891] loop2: detected capacity change from 0 to 512 [ 168.018279][T10891] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.064738][T10891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.088256][T10891] ext4 filesystem being mounted at /472/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 168.130991][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.141947][T10900] macsec0: entered promiscuous mode [ 168.147683][T10900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 168.182864][T10900] macsec0 (unregistering): left promiscuous mode [ 168.219990][T10904] loop8: detected capacity change from 0 to 512 [ 168.251308][T10904] EXT4-fs: Ignoring removed orlov option [ 168.257892][T10904] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.285899][T10904] EXT4-fs: Mount option(s) incompatible with ext3 [ 168.308730][ T28] audit: type=1400 audit(1770739954.459:13945): avc: denied { setopt } for pid=10903 comm="syz.8.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 168.308920][T10904] Cannot find add_set index 0 as target [ 168.337314][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2421'. [ 168.471071][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2427'. [ 168.616091][ T28] audit: type=1400 audit(1770739954.769:13946): avc: denied { setattr } for pid=10936 comm="syz.8.2430" path="pipe:[32577]" dev="pipefs" ino=32577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 168.686333][ T28] audit: type=1400 audit(1770739954.799:13947): avc: denied { bind } for pid=10936 comm="syz.8.2430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.759698][T10963] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.886696][ T28] audit: type=1400 audit(1770739955.039:13948): avc: denied { accept } for pid=10973 comm="syz.5.2443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 169.594461][T11021] loop8: detected capacity change from 0 to 512 [ 169.653117][T11021] EXT4-fs: inline encryption not supported [ 169.699176][T11021] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 169.788363][T11021] loop8: detected capacity change from 0 to 1024 [ 169.804787][ T28] audit: type=1400 audit(1770739955.909:13949): avc: denied { accept } for pid=11018 comm="syz.8.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 169.854042][T11021] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 169.889930][T11021] System zones: 0-1, 3-8 [ 169.916040][T11021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 169.954015][T11035] 9p: Bad value for 'rfdno' [ 169.959614][T11021] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.017009][T11041] tipc: Started in network mode [ 170.021988][T11041] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 170.030902][T11041] tipc: Enabling of bearer rejected, failed to enable media [ 170.039387][ T28] audit: type=1400 audit(1770739956.169:13950): avc: denied { append } for pid=11018 comm="syz.8.2460" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 170.104705][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.166764][T11056] loop8: detected capacity change from 0 to 512 [ 170.178701][T11056] EXT4-fs: Ignoring removed oldalloc option [ 170.207450][T11056] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.2473: Parent and EA inode have the same ino 15 [ 170.220003][T11056] loop8: lost filesystem error report for type 5 error -117 [ 170.230719][T11056] EXT4-fs error (device loop8): ext4_xattr_inode_iget:437: comm syz.8.2473: Parent and EA inode have the same ino 15 [ 170.250769][T11056] loop8: lost filesystem error report for type 5 error -117 [ 170.253383][T11056] EXT4-fs (loop8): 1 orphan inode deleted [ 170.271829][T11056] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.329396][ T28] audit: type=1326 audit(1770739956.479:13951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11062 comm="syz.5.2477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3178bbf79 code=0x0 [ 170.409317][ T3485] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.425057][T11075] 9p: Bad value for 'rfdno' [ 170.430083][ T3485] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.451053][ T3485] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.461625][ T3485] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.474453][T11078] netlink: 'syz.1.2482': attribute type 1 has an invalid length. [ 170.509680][T11078] bond3: entered promiscuous mode [ 170.525110][T11078] 8021q: adding VLAN 0 to HW filter on device bond3 [ 170.554904][T11078] bond3: (slave bridge3): making interface the new active one [ 170.562933][T11078] bridge3: entered promiscuous mode [ 170.572638][T11078] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 170.618232][T11089] vlan2: entered promiscuous mode [ 170.623545][T11089] bond0: entered promiscuous mode [ 170.628669][T11089] bond_slave_0: entered promiscuous mode [ 170.634539][T11089] bond_slave_1: entered promiscuous mode [ 170.640401][T11089] batadv0: entered promiscuous mode [ 170.652723][T11091] bond0: (slave macvlan4): Opening slave failed [ 170.685966][ T28] audit: type=1400 audit(1770739956.839:13952): avc: denied { write } for pid=11090 comm="syz.1.2487" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 171.226801][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.258856][T11121] netlink: 'syz.8.2496': attribute type 14 has an invalid length. [ 171.266897][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2496'. [ 171.278077][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2496'. [ 171.340462][T11124] netlink: 304 bytes leftover after parsing attributes in process `syz.5.2495'. [ 171.589176][T11149] tmpfs: Bad value for 'nr_inodes' [ 171.598881][ T28] audit: type=1400 audit(1770739957.749:13953): avc: denied { bind } for pid=11148 comm="syz.0.2506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.612886][T11149] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 171.618836][ T28] audit: type=1400 audit(1770739957.749:13954): avc: denied { name_bind } for pid=11148 comm="syz.0.2506" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 171.926265][T11175] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2513'. [ 171.935510][T11175] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2513'. [ 172.312670][T11206] loop8: detected capacity change from 0 to 1024 [ 172.325066][T11206] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.822216][T11239] netlink: 752 bytes leftover after parsing attributes in process `syz.5.2533'. [ 172.962343][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.044942][T11257] tipc: Failed to remove unknown binding: 66,0,0/0:4171801057/4171801058 [ 173.055449][T11257] tipc: Failed to remove unknown binding: 66,0,0/0:4171801057/4171801058 [ 173.119178][T11269] sit0: entered promiscuous mode [ 173.134041][T11259] hub 2-0:1.0: USB hub found [ 173.138585][T11269] netlink: 'syz.8.2545': attribute type 1 has an invalid length. [ 173.146860][T11259] hub 2-0:1.0: 8 ports detected [ 173.147212][T11269] netlink: 1 bytes leftover after parsing attributes in process `syz.8.2545'. [ 173.452656][ T6960] IPVS: starting estimator thread 0... [ 173.522407][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2553'. [ 173.552107][T11291] IPVS: using max 2544 ests per chain, 127200 per kthread [ 173.817796][ T63] Bluetooth: hci1: Frame reassembly failed (-84) [ 173.826324][T11321] loop8: detected capacity change from 0 to 128 [ 173.839612][T11316] netlink: 752 bytes leftover after parsing attributes in process `syz.1.2562'. [ 173.884461][T11321] FAT-fs (loop8): Directory bread(block 524322) failed [ 173.915384][T11321] FAT-fs (loop8): Directory bread(block 524323) failed [ 173.924205][T11324] No such timeout policy "syz1" [ 173.944463][T11321] FAT-fs (loop8): Directory bread(block 524324) failed [ 173.989320][T11321] FAT-fs (loop8): Directory bread(block 524325) failed [ 173.997495][T11321] FAT-fs (loop8): Directory bread(block 524326) failed [ 174.014888][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 174.014906][ T28] audit: type=1400 audit(1770739960.169:13960): avc: denied { setopt } for pid=11335 comm="syz.0.2572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.014981][T11321] FAT-fs (loop8): Directory bread(block 524327) failed [ 174.015006][T11321] FAT-fs (loop8): Directory bread(block 524328) failed [ 174.032480][T11337] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2572'. [ 174.066293][T11339] loop2: detected capacity change from 0 to 512 [ 174.074293][T11321] FAT-fs (loop8): Directory bread(block 524329) failed [ 174.092048][T11339] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 34)! [ 174.103277][T11339] EXT4-fs (loop2): group descriptors corrupted! [ 174.137182][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 174.172428][T11321] FAT-fs (loop8): Directory bread(block 524322) failed [ 174.195969][T11345] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2576'. [ 174.253174][T11353] syzkaller0: entered promiscuous mode [ 174.258904][T11353] syzkaller0: entered allmulticast mode [ 174.263337][T11321] FAT-fs (loop8): Directory bread(block 524323) failed [ 174.569066][T11349] chnl_net:caif_netlink_parms(): no params data found [ 174.718631][T11349] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.725787][T11349] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.746155][T11349] bridge_slave_0: entered allmulticast mode [ 174.768172][T11349] bridge_slave_0: entered promiscuous mode [ 174.778543][T11349] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.786263][T11349] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.796875][ T28] audit: type=1400 audit(1770739960.949:13961): avc: denied { shutdown } for pid=11382 comm="syz.0.2584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.801609][T11349] bridge_slave_1: entered allmulticast mode [ 174.832039][T11349] bridge_slave_1: entered promiscuous mode [ 174.871298][ T28] audit: type=1400 audit(1770739961.019:13962): avc: denied { create } for pid=11391 comm="syz.8.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.881395][T11349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.902948][T11388] loop2: detected capacity change from 0 to 256 [ 174.904685][T11349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.909637][T11388] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 174.951875][T11349] team0: Port device team_slave_0 added [ 174.987487][T11349] team0: Port device team_slave_1 added [ 175.038233][T11349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.045848][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.072593][T11349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.096183][ T28] audit: type=1326 audit(1770739961.249:13963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.136535][ T28] audit: type=1326 audit(1770739961.279:13964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.161069][ T28] audit: type=1326 audit(1770739961.279:13965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.185857][ T28] audit: type=1326 audit(1770739961.279:13966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.210086][ T28] audit: type=1326 audit(1770739961.279:13967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.233931][ T28] audit: type=1326 audit(1770739961.279:13968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.258084][ T28] audit: type=1326 audit(1770739961.279:13969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.0.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 175.286544][T11349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.293769][T11349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.319975][T11349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.370597][T11349] hsr_slave_0: entered promiscuous mode [ 175.380612][T11349] hsr_slave_1: entered promiscuous mode [ 175.387066][T11349] debugfs: 'hsr0' already exists in 'hsr' [ 175.392926][T11349] Cannot create hsr debugfs directory [ 175.439214][T11409] netlink: 'syz.8.2592': attribute type 29 has an invalid length. [ 175.511902][T11413] loop2: detected capacity change from 0 to 2048 [ 175.565960][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2595'. [ 175.587441][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2595'. [ 175.680564][T11349] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 175.694335][T11349] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 175.703760][T11349] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 175.716099][T11349] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 175.782001][T11349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.810270][T11349] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.821108][ T2104] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.828505][ T2104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.851431][ T3497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 175.867580][ T2104] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.874965][ T2104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.934998][T11349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.955438][T11443] loop8: detected capacity change from 0 to 512 [ 175.968659][T11443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 176.003755][T11443] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.036355][T11443] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.060654][T11349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.080861][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.306813][T11349] veth0_vlan: entered promiscuous mode [ 176.326779][T11349] veth1_vlan: entered promiscuous mode [ 176.363132][T11349] veth0_macvtap: entered promiscuous mode [ 176.372734][T11349] veth1_macvtap: entered promiscuous mode [ 176.397241][T11349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.422800][T11349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.477646][ T2104] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.512564][ T2104] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.550848][T11501] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 176.561674][ T2104] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.571869][ T2104] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.604317][T11505] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.616656][T11505] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.623938][T11505] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.673607][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2608'. [ 176.807505][T11517] netlink: 'syz.0.2612': attribute type 1 has an invalid length. [ 176.823871][T11516] loop5: detected capacity change from 0 to 256 [ 176.839367][T11517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 176.865101][T11516] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.889243][T11524] netlink: 'syz.8.2614': attribute type 1 has an invalid length. [ 176.918556][T11527] bond3: (slave gretap1): making interface the new active one [ 176.928170][T11516] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 176.936211][T11516] FAT-fs (loop5): Filesystem has been set read-only [ 176.949228][T11530] random: crng reseeded on system resumption [ 176.957845][T11527] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 176.984866][T11524] bond1: entered promiscuous mode [ 177.002642][T11524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 177.025893][T11535] netlink: 'syz.1.2617': attribute type 3 has an invalid length. [ 177.034589][T11534] bond1: entered allmulticast mode [ 177.076701][T11524] bond1: (slave bridge1): making interface the new active one [ 177.084573][T11524] bridge1: entered promiscuous mode [ 177.090698][T11524] bridge1: entered allmulticast mode [ 177.138612][T11524] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 177.148035][ T63] Bluetooth: hci1: Frame reassembly failed (-84) [ 177.192387][T11552] 9p: Bad value for 'rfdno' [ 177.387626][T11569] loop5: detected capacity change from 0 to 2048 [ 177.433909][T11569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.597386][T11584] loop2: detected capacity change from 0 to 512 [ 177.625308][T11584] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 177.660353][T11584] EXT4-fs (loop2): orphan cleanup on readonly fs [ 177.682833][T11600] FAULT_INJECTION: forcing a failure. [ 177.682833][T11600] name failslab, interval 1, probability 0, space 0, times 0 [ 177.696333][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.0.2634 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 177.696369][T11600] Tainted: [W]=WARN [ 177.696376][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 177.696389][T11600] Call Trace: [ 177.696397][T11600] [ 177.696482][T11600] __dump_stack+0x1d/0x30 [ 177.696552][T11600] dump_stack_lvl+0x95/0xd0 [ 177.696576][T11600] dump_stack+0x15/0x1b [ 177.696693][T11600] should_fail_ex+0x263/0x280 [ 177.696725][T11600] should_failslab+0x8c/0xb0 [ 177.696745][T11600] __kmalloc_cache_noprof+0x64/0x4a0 [ 177.696773][T11600] ? __hw_addr_add_ex+0x15b/0x3b0 [ 177.696853][T11600] __hw_addr_add_ex+0x15b/0x3b0 [ 177.696940][T11600] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 177.696979][T11600] dev_addr_init+0xb1/0x120 [ 177.697013][T11600] alloc_netdev_mqs+0x1ca/0xa40 [ 177.697052][T11600] rtnl_create_link+0x239/0x720 [ 177.697075][T11600] rtnl_newlink_create+0x174/0x650 [ 177.697232][T11600] ? security_capable+0x7b/0x90 [ 177.697275][T11600] ? netlink_ns_capable+0x86/0xa0 [ 177.697311][T11600] rtnl_newlink+0x10a0/0x1330 [ 177.697383][T11600] ? __rcu_read_unlock+0x4e/0x70 [ 177.697408][T11600] ? xa_load+0xb1/0xe0 [ 177.697447][T11600] ? __rcu_read_unlock+0x4e/0x70 [ 177.697475][T11600] ? avc_has_perm_noaudit+0xab/0x130 [ 177.697597][T11600] ? cred_has_capability+0x224/0x2a0 [ 177.697629][T11600] ? selinux_capable+0x31/0x40 [ 177.697697][T11600] ? security_capable+0x7b/0x90 [ 177.697759][T11600] ? ns_capable+0x7c/0xb0 [ 177.697853][T11600] ? __pfx_rtnl_newlink+0x10/0x10 [ 177.697882][T11600] rtnetlink_rcv_msg+0x64b/0x720 [ 177.697910][T11600] ? avc_has_perm_noaudit+0xab/0x130 [ 177.697967][T11600] netlink_rcv_skb+0x123/0x220 [ 177.697988][T11600] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.698078][T11600] rtnetlink_rcv+0x1c/0x30 [ 177.698104][T11600] netlink_unicast+0x5c0/0x690 [ 177.698127][T11600] netlink_sendmsg+0x5c8/0x6f0 [ 177.698205][T11600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.698229][T11600] ____sys_sendmsg+0x5af/0x600 [ 177.698258][T11600] ___sys_sendmsg+0x195/0x1e0 [ 177.698353][T11600] __x64_sys_sendmsg+0xd4/0x160 [ 177.698378][T11600] x64_sys_call+0x17ba/0x3000 [ 177.698404][T11600] do_syscall_64+0xc0/0x2a0 [ 177.698464][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.698489][T11600] RIP: 0033:0x7fdb035abf79 [ 177.698507][T11600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.698576][T11600] RSP: 002b:00007fdb02007028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.698599][T11600] RAX: ffffffffffffffda RBX: 00007fdb03825fa0 RCX: 00007fdb035abf79 [ 177.698629][T11600] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 177.698644][T11600] RBP: 00007fdb02007090 R08: 0000000000000000 R09: 0000000000000000 [ 177.698658][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.698672][T11600] R13: 00007fdb03826038 R14: 00007fdb03825fa0 R15: 00007ffc40a3c078 [ 177.698693][T11600] [ 178.004337][T11584] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.2631: bad orphan inode 15 [ 178.014673][T11584] loop2: lost filesystem error report for type 5 error -117 [ 178.041476][T11584] ext4_test_bit(bit=14, block=18) = 1 [ 178.054571][T11584] is_bad_inode(inode)=0 [ 178.058755][T11584] NEXT_ORPHAN(inode)=1023 [ 178.063135][T11584] max_ino=32 [ 178.066376][T11584] i_nlink=0 [ 178.069887][T11584] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2631: bg 0: block 161: padding at end of block bitmap is not set [ 178.085357][T11584] loop2: lost filesystem error report for type 5 error -117 [ 178.088468][T11584] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6688: Corrupt filesystem [ 178.105115][T11584] loop2: lost filesystem error report for type 5 error -117 [ 178.107894][T11584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 178.120090][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.164220][T11584] ext2: Unknown parameter 'ƍ5oLl' [ 178.173769][T11584] EXT4-fs error (device loop2): ext4_lookup:1789: inode #2: comm syz.2.2631: deleted inode referenced: 15 [ 178.216829][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.304806][T11628] loop8: detected capacity change from 0 to 1024 [ 178.319150][T11629] loop5: detected capacity change from 0 to 2048 [ 178.328308][T11628] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 178.342308][T11628] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.361857][T11628] __nla_validate_parse: 9 callbacks suppressed [ 178.361868][T11628] netlink: 304 bytes leftover after parsing attributes in process `syz.8.2646'. [ 178.372145][ T3291] Alternate GPT is invalid, using primary GPT. [ 178.384480][ T3291] loop5: p1 p2 p3 [ 178.393904][T10582] EXT4-fs error (device loop8): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /52/file1: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=61712, size=1024 fake=0 [ 178.394291][T11629] Alternate GPT is invalid, using primary GPT. [ 178.416548][T10582] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /52/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 178.422333][T11629] loop5: p1 p2 p3 [ 178.444778][T10582] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 178.470076][T10582] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /52/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 178.494875][T10582] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 178.521132][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 178.521827][ T3544] udevd[3544]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 178.544142][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 178.558919][T10582] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /52/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 178.583708][T10582] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 178.588988][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 178.605258][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 178.626364][ T3544] udevd[3544]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 178.639251][T10582] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /52/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 178.662286][T10582] EXT4-fs error (device loop8): ext4_empty_dir:3118: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 178.682674][T10582] EXT4-fs error (device loop8): ext4_readdir:265: inode #11: block 37: comm syz-executor: path /52/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 178.858749][T11648] loop5: detected capacity change from 0 to 512 [ 178.865484][T11648] EXT4-fs: Ignoring removed orlov option [ 178.872226][T11648] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 178.881245][T11648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 178.890371][T11648] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2653: corrupted in-inode xattr: e_value size too large [ 178.904767][T11648] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 178.905055][T11648] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2653: couldn't read orphan inode 15 (err -117) [ 178.927284][T11648] loop5: lost filesystem error report for type 5 error -117 [ 178.928028][T11648] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.960157][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.006879][ T63] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.048607][T11657] loop5: detected capacity change from 0 to 1024 [ 179.069888][ T63] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.140776][ T63] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.211714][ T43] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 179.256540][ T63] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.275462][ T28] kauditd_printk_skb: 302 callbacks suppressed [ 179.275481][ T28] audit: type=1326 audit(1770739965.419:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11656 comm="syz.5.2657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f432f91bf79 code=0x0 [ 179.305497][ T28] audit: type=1326 audit(1770739965.429:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.1.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x0 [ 179.332848][T10582] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 179.342701][ T28] audit: type=1400 audit(1770739965.489:14274): avc: denied { setattr } for pid=11672 comm="syz.0.2663" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 179.370400][T11680] FAULT_INJECTION: forcing a failure. [ 179.370400][T11680] name failslab, interval 1, probability 0, space 0, times 0 [ 179.383317][T11680] CPU: 1 UID: 0 PID: 11680 Comm: syz.2.2665 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 179.383342][T11680] Tainted: [W]=WARN [ 179.383347][T11680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 179.383355][T11680] Call Trace: [ 179.383360][T11680] [ 179.383366][T11680] __dump_stack+0x1d/0x30 [ 179.383448][T11680] dump_stack_lvl+0x95/0xd0 [ 179.383558][T11680] dump_stack+0x15/0x1b [ 179.383581][T11680] should_fail_ex+0x263/0x280 [ 179.383603][T11680] should_failslab+0x8c/0xb0 [ 179.383672][T11680] __kmalloc_cache_noprof+0x64/0x4a0 [ 179.383688][T11680] ? v9fs_get_tree+0x49/0x5e0 [ 179.383702][T11680] v9fs_get_tree+0x49/0x5e0 [ 179.383715][T11680] ? security_capable+0x7b/0x90 [ 179.383741][T11680] vfs_get_tree+0x57/0x1d0 [ 179.383761][T11680] do_new_mount+0x288/0x8d0 [ 179.383775][T11680] ? security_capable+0x7b/0x90 [ 179.383865][T11680] path_mount+0x4d0/0xbc0 [ 179.383879][T11680] __se_sys_mount+0x28c/0x2e0 [ 179.383903][T11680] ? fput+0x8f/0xc0 [ 179.383920][T11680] __x64_sys_mount+0x67/0x80 [ 179.383987][T11680] x64_sys_call+0x2cca/0x3000 [ 179.384002][T11680] do_syscall_64+0xc0/0x2a0 [ 179.384024][T11680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.384089][T11680] RIP: 0033:0x7efdb71dbf79 [ 179.384101][T11680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.384114][T11680] RSP: 002b:00007efdb5c2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.384129][T11680] RAX: ffffffffffffffda RBX: 00007efdb7455fa0 RCX: 00007efdb71dbf79 [ 179.384219][T11680] RDX: 0000200000000640 RSI: 0000200000000000 RDI: 0000000000000000 [ 179.384228][T11680] RBP: 00007efdb5c2f090 R08: 0000200000000200 R09: 0000000000000000 [ 179.384237][T11680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.384245][T11680] R13: 00007efdb7456038 R14: 00007efdb7455fa0 R15: 00007ffeca941e68 [ 179.384304][T11680] [ 179.663708][ T63] bridge_slave_1: left allmulticast mode [ 179.669441][ T63] bridge_slave_1: left promiscuous mode [ 179.675828][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.687195][ T63] bridge_slave_0: left allmulticast mode [ 179.691723][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2669'. [ 179.693067][ T63] bridge_slave_0: left promiscuous mode [ 179.707810][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.764502][T11689] hub 2-0:1.0: USB hub found [ 179.769251][T11689] hub 2-0:1.0: 8 ports detected [ 179.782806][ T63] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 179.791048][ T63] bridge1 (unregistering): left promiscuous mode [ 179.797466][ T63] bridge1 (unregistering): left allmulticast mode [ 179.843986][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.854157][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.863972][ T63] bond0 (unregistering): Released all slaves [ 179.871896][ T63] bond1 (unregistering): Released all slaves [ 179.917951][ T63] hsr_slave_0: left promiscuous mode [ 179.929600][ T63] hsr_slave_1: left promiscuous mode [ 179.935992][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.943447][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.952604][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.960093][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.981702][ T63] veth1_macvtap: left promiscuous mode [ 179.987253][ T63] veth0_macvtap: left promiscuous mode [ 179.994263][ T63] veth1_vlan: left promiscuous mode [ 179.999616][ T63] veth0_vlan: left promiscuous mode [ 180.090734][ T63] team0 (unregistering): Port device team_slave_1 removed [ 180.103849][ T63] team0 (unregistering): Port device team_slave_0 removed [ 180.161271][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'. [ 180.176447][T11725] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 180.282318][T11684] chnl_net:caif_netlink_parms(): no params data found [ 180.343031][T11684] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.350145][T11684] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.358058][T11684] bridge_slave_0: entered allmulticast mode [ 180.366581][T11684] bridge_slave_0: entered promiscuous mode [ 180.380144][T11684] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.387377][T11684] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.394942][T11684] bridge_slave_1: entered allmulticast mode [ 180.401686][T11684] bridge_slave_1: entered promiscuous mode [ 180.425508][T11684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.436318][T11684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.477901][T11684] team0: Port device team_slave_0 added [ 180.488482][T11684] team0: Port device team_slave_1 added [ 180.524444][T11684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.531487][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.558256][T11684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.580383][ T28] audit: type=1326 audit(1770739966.729:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb71dbf79 code=0x7ffc0000 [ 180.598392][T11684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.605044][ T28] audit: type=1326 audit(1770739966.729:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb71dbf79 code=0x7ffc0000 [ 180.611503][T11684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.635655][ T28] audit: type=1326 audit(1770739966.729:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efdb719c84e code=0x7ffc0000 [ 180.661288][T11684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.698168][ T28] audit: type=1326 audit(1770739966.739:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efdb71d5d97 code=0x7ffc0000 [ 180.722411][ T28] audit: type=1326 audit(1770739966.739:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efdb717d399 code=0x7ffc0000 [ 180.746315][ T28] audit: type=1326 audit(1770739966.739:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efdb71dbf79 code=0x7ffc0000 [ 180.770828][ T28] audit: type=1326 audit(1770739966.739:14281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11752 comm="syz.2.2680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdb71dbf79 code=0x7ffc0000 [ 180.820754][T11684] hsr_slave_0: entered promiscuous mode [ 180.837134][T11684] hsr_slave_1: entered promiscuous mode [ 180.851751][T11684] debugfs: 'hsr0' already exists in 'hsr' [ 180.857800][T11684] Cannot create hsr debugfs directory [ 180.883064][T11773] Cannot find add_set index 0 as target [ 180.925025][T11773] SELinux: failed to load policy [ 181.048315][T11684] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 181.058174][T11684] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 181.068931][T11684] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 181.083930][T11684] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 181.144930][T11684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.163034][T11684] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.193333][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.200505][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.212070][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.219299][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.285564][T11823] netlink: 'syz.0.2689': attribute type 1 has an invalid length. [ 181.293759][T11823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2689'. [ 181.313149][T11684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.335286][T11828] netlink: 'syz.0.2690': attribute type 10 has an invalid length. [ 181.447960][T11684] veth0_vlan: entered promiscuous mode [ 181.456747][T11684] veth1_vlan: entered promiscuous mode [ 181.475946][T11684] veth0_macvtap: entered promiscuous mode [ 181.484741][T11684] veth1_macvtap: entered promiscuous mode [ 181.497469][T11684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.509037][T11684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.520802][ T63] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.530559][ T63] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.547881][ T63] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.558340][ T63] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.971367][T11861] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2697'. [ 181.982235][T11860] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2696'. [ 182.180409][T11877] wireguard0: entered promiscuous mode [ 182.186150][T11877] wireguard0: entered allmulticast mode [ 182.825339][T11905] netlink: 'syz.0.2710': attribute type 11 has an invalid length. [ 182.833364][T11905] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2710'. [ 183.025266][T11911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11911 comm=syz.2.2712 [ 183.038732][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2712'. [ 183.047738][T11911] C: renamed from team_slave_0 [ 183.055564][T11911] netlink: 'syz.2.2712': attribute type 3 has an invalid length. [ 183.063450][T11911] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2712'. [ 183.072635][T11911] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 183.294014][T11929] loop5: detected capacity change from 0 to 128 [ 183.580223][T11944] netlink: 1 bytes leftover after parsing attributes in process `syz.9.2721'. [ 183.669078][T11943] dvmrp0: entered allmulticast mode [ 183.675188][T11943] dvmrp0: left allmulticast mode [ 183.794795][T11956] FAULT_INJECTION: forcing a failure. [ 183.794795][T11956] name failslab, interval 1, probability 0, space 0, times 0 [ 183.807518][T11956] CPU: 0 UID: 0 PID: 11956 Comm: syz.5.2725 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 183.807591][T11956] Tainted: [W]=WARN [ 183.807599][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 183.807654][T11956] Call Trace: [ 183.807661][T11956] [ 183.807740][T11956] __dump_stack+0x1d/0x30 [ 183.807769][T11956] dump_stack_lvl+0x95/0xd0 [ 183.807795][T11956] dump_stack+0x15/0x1b [ 183.807818][T11956] should_fail_ex+0x263/0x280 [ 183.807907][T11956] should_failslab+0x8c/0xb0 [ 183.808010][T11956] kmem_cache_alloc_noprof+0x68/0x490 [ 183.808033][T11956] ? fasync_helper+0x46/0xc0 [ 183.808069][T11956] ? lock_sock_nested+0x132/0x160 [ 183.808129][T11956] fasync_helper+0x46/0xc0 [ 183.808189][T11956] sock_fasync+0x58/0xc0 [ 183.808219][T11956] ? __pfx_sock_fasync+0x10/0x10 [ 183.808240][T11956] do_vfs_ioctl+0xbb1/0xe70 [ 183.808252][T11956] ? selinux_file_ioctl+0x8aa/0xcb0 [ 183.808327][T11956] ? __rcu_read_unlock+0x4e/0x70 [ 183.808385][T11956] ? __rcu_read_unlock+0x4e/0x70 [ 183.808404][T11956] __se_sys_ioctl+0x82/0x140 [ 183.808424][T11956] __x64_sys_ioctl+0x43/0x50 [ 183.808482][T11956] x64_sys_call+0x14b0/0x3000 [ 183.808507][T11956] do_syscall_64+0xc0/0x2a0 [ 183.808544][T11956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.808574][T11956] RIP: 0033:0x7f432f91bf79 [ 183.808691][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.808704][T11956] RSP: 002b:00007f432e34e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.808783][T11956] RAX: ffffffffffffffda RBX: 00007f432fb96090 RCX: 00007f432f91bf79 [ 183.808872][T11956] RDX: 0000200000000180 RSI: 0000000000005452 RDI: 0000000000000004 [ 183.808881][T11956] RBP: 00007f432e34e090 R08: 0000000000000000 R09: 0000000000000000 [ 183.808889][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.808898][T11956] R13: 00007f432fb96128 R14: 00007f432fb96090 R15: 00007ffeb3cac1b8 [ 183.808955][T11956] [ 184.033596][T11925] FAULT_INJECTION: forcing a failure. [ 184.033596][T11925] name fail_futex, interval 1, probability 0, space 0, times 1 [ 184.046585][T11925] CPU: 1 UID: 0 PID: 11925 Comm: syz.1.2716 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.046610][T11925] Tainted: [W]=WARN [ 184.046615][T11925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 184.046685][T11925] Call Trace: [ 184.046690][T11925] [ 184.046695][T11925] __dump_stack+0x1d/0x30 [ 184.046721][T11925] dump_stack_lvl+0x95/0xd0 [ 184.046735][T11925] dump_stack+0x15/0x1b [ 184.046748][T11925] should_fail_ex+0x263/0x280 [ 184.046895][T11925] should_fail+0xb/0x20 [ 184.046914][T11925] get_futex_key+0x12f/0xbe0 [ 184.046936][T11925] futex_wake+0x84/0x380 [ 184.046959][T11925] ? perf_lock_task_context+0x260/0x2d0 [ 184.046978][T11925] do_futex+0x323/0x380 [ 184.046993][T11925] mm_release+0xa1/0x190 [ 184.047039][T11925] exit_mm_release+0x25/0x30 [ 184.047076][T11925] exit_mm+0x37/0x180 [ 184.047093][T11925] do_exit+0x3fa/0x1590 [ 184.047109][T11925] do_group_exit+0xfe/0x140 [ 184.047125][T11925] ? get_signal+0xe47/0xf60 [ 184.047141][T11925] get_signal+0xe4f/0xf60 [ 184.047224][T11925] arch_do_signal_or_restart+0x96/0x450 [ 184.047243][T11925] exit_to_user_mode_loop+0x6a/0x6f0 [ 184.047263][T11925] do_syscall_64+0x1d3/0x2a0 [ 184.047364][T11925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.047388][T11925] RIP: 0033:0x7fee005cbf79 [ 184.047406][T11925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.047425][T11925] RSP: 002b:00007fedff027028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.047458][T11925] RAX: fffffffffffffffc RBX: 00007fee00845fa0 RCX: 00007fee005cbf79 [ 184.047473][T11925] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 184.047560][T11925] RBP: 00007fedff027090 R08: 0000000000000000 R09: 0000000000000000 [ 184.047569][T11925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.047577][T11925] R13: 00007fee00846038 R14: 00007fee00845fa0 R15: 00007ffdb7f93d38 [ 184.047591][T11925] [ 184.353044][T11962] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 184.361209][T11962] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 184.524290][T11971] loop9: detected capacity change from 0 to 256 [ 184.545135][T11971] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 184.657779][T11987] loop9: detected capacity change from 0 to 256 [ 184.674260][T11987] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 184.970933][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2741'. [ 184.995826][T12010] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2744'. [ 185.237378][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 185.237397][ T28] audit: type=1326 audit(1770739971.389:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.278966][ T28] audit: type=1326 audit(1770739971.399:14301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 185.303636][ T28] audit: type=1326 audit(1770739971.399:14302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.0.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb035abf79 code=0x7ffc0000 [ 185.327635][ T28] audit: type=1326 audit(1770739971.419:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.352255][ T28] audit: type=1326 audit(1770739971.419:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.375975][ T28] audit: type=1326 audit(1770739971.419:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.400517][ T28] audit: type=1326 audit(1770739971.419:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.425049][ T28] audit: type=1326 audit(1770739971.419:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.449047][ T28] audit: type=1326 audit(1770739971.419:14308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.449098][ T28] audit: type=1326 audit(1770739971.419:14309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12030 comm="syz.1.2754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee005cbf79 code=0x7ffc0000 [ 185.566942][T12033] hub 2-0:1.0: USB hub found [ 185.572326][T12033] hub 2-0:1.0: 8 ports detected [ 185.615799][T12036] hub 2-0:1.0: USB hub found [ 185.624198][T12036] hub 2-0:1.0: 8 ports detected [ 185.634793][T12038] vlan2: entered allmulticast mode [ 185.640049][T12038] bond0: entered allmulticast mode [ 185.691058][T12037] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2755'. [ 185.719246][T12037] bond0 (unregistering): Released all slaves [ 185.863052][T12056] loop9: detected capacity change from 0 to 128 [ 185.876586][T12056] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 185.893381][T12056] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 185.907414][T12056] netlink: 'syz.9.2760': attribute type 8 has an invalid length. [ 185.928135][T11684] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.138904][T12074] netlink: 'syz.9.2765': attribute type 4 has an invalid length. [ 186.175499][T12076] loop9: detected capacity change from 0 to 512 [ 186.187165][T12076] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 186.207742][ T3649] udevd[3649]: incorrect ext4 checksum on /dev/loop9 [ 186.223167][T12078] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2767'. [ 186.226112][T12078] gtp0: entered promiscuous mode [ 186.226131][T12078] gtp0: entered allmulticast mode [ 186.235781][T12072] hub 2-0:1.0: USB hub found [ 186.236784][T12072] hub 2-0:1.0: 8 ports detected [ 186.500892][T12093] netlink: 'syz.1.2773': attribute type 21 has an invalid length. [ 186.509031][T12093] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2773'. [ 186.518193][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 186.786316][T12102] loop5: detected capacity change from 0 to 1024 [ 186.823120][T12102] EXT4-fs: inline encryption not supported [ 186.883349][T12102] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.928140][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.261109][T12122] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.268717][T12122] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.345328][T12122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.368140][T12122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.438181][ T3485] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.458775][ T3485] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.483995][ T3485] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.511301][ T3485] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.629883][T12130] loop9: detected capacity change from 0 to 512 [ 187.648463][T12130] EXT4-fs (loop9): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 187.683750][ T3649] udevd[3649]: incorrect ext4 checksum on /dev/loop9 [ 188.079245][T12151] syz.0.2795 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 188.090450][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.0.2795 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.090492][T12151] Tainted: [W]=WARN [ 188.090509][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 188.090586][T12151] Call Trace: [ 188.090594][T12151] [ 188.090602][T12151] __dump_stack+0x1d/0x30 [ 188.090658][T12151] dump_stack_lvl+0x95/0xd0 [ 188.090684][T12151] dump_stack+0x15/0x1b [ 188.090708][T12151] dump_header+0x80/0x240 [ 188.090760][T12151] oom_kill_process+0x295/0x350 [ 188.090783][T12151] out_of_memory+0x97d/0xb80 [ 188.090864][T12151] try_charge_memcg+0x62e/0xa10 [ 188.090900][T12151] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 188.090963][T12151] __read_swap_cache_async+0x17b/0x2d0 [ 188.090997][T12151] swap_cluster_readahead+0x362/0x3c0 [ 188.091091][T12151] swapin_readahead+0xde/0x840 [ 188.091123][T12151] ? __rcu_read_unlock+0x33/0x70 [ 188.091156][T12151] ? __rcu_read_unlock+0x4e/0x70 [ 188.091209][T12151] ? swap_cache_get_folio+0x26f/0x280 [ 188.091236][T12151] do_swap_page+0x59b/0x2a50 [ 188.091270][T12151] ? __rcu_read_lock+0x36/0x50 [ 188.091351][T12151] ? __pfx_default_wake_function+0x10/0x10 [ 188.091387][T12151] handle_mm_fault+0xb40/0x3030 [ 188.091419][T12151] ? vma_start_read+0x1c7/0x2c0 [ 188.091447][T12151] do_user_addr_fault+0x62f/0x1050 [ 188.091569][T12151] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 188.091597][T12151] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 188.091629][T12151] ? irqentry_exit+0x3c/0x510 [ 188.091662][T12151] exc_page_fault+0x62/0xa0 [ 188.091753][T12151] asm_exc_page_fault+0x26/0x30 [ 188.091777][T12151] RIP: 0033:0x7fdb03479a3e [ 188.091798][T12151] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 e8 b8 ff ff 48 39 dd 75 df 0f 1f 00 8b 05 76 e3 3a 00 85 c0 0f 8e 53 fd ff ff 6d 87 fe ff 49 39 c4 73 88 48 8d 1d 51 c5 3a 00 83 3d 56 e3 3a [ 188.091859][T12151] RSP: 002b:00007ffc40a3c1e0 EFLAGS: 00010202 [ 188.091876][T12151] RAX: 0000000000000001 RBX: 00007fdb03827da0 RCX: 0000555585672808 [ 188.091889][T12151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.091904][T12151] RBP: 00007fdb03827da0 R08: 0000000000000000 R09: 0000000000000000 [ 188.091944][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000002e141 [ 188.091958][T12151] R13: 00007fdb03825fac R14: 000000000002de41 R15: 00007ffc40a3c2e0 [ 188.091976][T12151] [ 188.130060][T12154] loop5: detected capacity change from 0 to 512 [ 188.132991][T12151] memory: usage 307200kB, limit 307200kB, failcnt 40447 [ 188.133011][T12151] memory+swap: usage 369232kB, limit 9007199254740988kB, failcnt 0 [ 188.133027][T12151] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 188.133097][T12151] Memory cgroup stats for /syz0: [ 188.210732][T12151] cache 0 [ 188.410762][T12151] rss 4096 [ 188.410773][T12151] shmem 0 [ 188.410780][T12151] mapped_file 0 [ 188.410786][T12151] dirty 0 [ 188.410808][T12151] writeback 0 [ 188.410817][T12151] workingset_refault_anon 109 [ 188.410827][T12151] workingset_refault_file 15900 [ 188.410838][T12151] swap 63520768 [ 188.410846][T12151] swapcached 16384 [ 188.410854][T12151] pgpgin 514914 [ 188.410861][T12151] pgpgout 514910 [ 188.410868][T12151] pgfault 175849 [ 188.410874][T12151] pgmajfault 304 [ 188.410958][T12151] inactive_anon 16384 [ 188.411023][T12151] active_anon 0 [ 188.411030][T12151] inactive_file 0 [ 188.411037][T12151] active_file 0 [ 188.411044][T12151] unevictable 0 [ 188.411051][T12151] hierarchical_memory_limit 314572800 [ 188.411059][T12151] hierarchical_memsw_limit 9223372036854771712 [ 188.488595][T12151] total_cache 0 [ 188.492113][T12151] total_rss 4096 [ 188.495673][T12151] total_shmem 0 [ 188.499139][T12151] total_mapped_file 0 [ 188.503266][T12151] total_dirty 0 [ 188.506739][T12151] total_writeback 0 [ 188.510565][T12151] total_workingset_refault_anon 109 [ 188.515827][T12151] total_workingset_refault_file 15900 [ 188.521207][T12151] total_swap 63520768 [ 188.524444][T12154] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2796: couldn't read orphan inode 26 (err -116) [ 188.525235][T12151] total_swapcached 16384 [ 188.525316][T12151] total_pgpgin 514914 [ 188.525326][T12151] total_pgpgout 514910 [ 188.525335][T12151] total_pgfault 175849 [ 188.525343][T12151] total_pgmajfault 304 [ 188.525352][T12151] total_inactive_anon 16384 [ 188.525361][T12151] total_active_anon 0 [ 188.525371][T12151] total_inactive_file 0 [ 188.525379][T12151] total_active_file 0 [ 188.525388][T12151] total_unevictable 0 [ 188.525397][T12151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2795,pid=12151,uid=0 [ 188.525552][T12151] Memory cgroup out of memory: Killed process 12151 (syz.0.2795) total-vm:94024kB, anon-rss:1348kB, file-rss:22284kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 188.561095][T12154] loop5: lost filesystem error report for type 5 error -116 [ 188.645430][T12152] syz.0.2795 (12152) used greatest stack depth: 6816 bytes left [ 188.690306][T12168] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 188.779887][T12154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.833219][T12154] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.882340][T12154] EXT4-fs (loop5): shut down requested (0) [ 188.897062][T12175] loop9: detected capacity change from 0 to 512 [ 188.910408][T12175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.925398][T12175] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.958151][T12175] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.014234][T11684] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.024053][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.145366][T12190] xt_hashlimit: size too large, truncated to 1048576 [ 189.149279][T12192] loop9: detected capacity change from 0 to 512 [ 189.152299][T12190] xt_hashlimit: max too large, truncated to 1048576 [ 189.156801][T12189] loop5: detected capacity change from 0 to 1024 [ 189.185423][T12192] EXT4-fs warning (device loop9): ext4_enable_quotas:7226: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.200985][T12192] EXT4-fs (loop9): mount failed [ 189.217001][T12189] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.246803][T11349] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.267803][T12204] netlink: 'syz.5.2812': attribute type 4 has an invalid length. [ 189.293593][T12206] option changes via remount are deprecated (pid=12205 comm=syz.5.2813) [ 189.305120][T12206] netlink: 'syz.5.2813': attribute type 4 has an invalid length. [ 189.511497][T12214] ================================================================== [ 189.519822][T12214] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 189.527225][T12214] [ 189.529553][T12214] write to 0xffff8881018bcc90 of 4 bytes by task 12213 on cpu 0: [ 189.537267][T12214] touch_atime+0x1d7/0x330 [ 189.541782][T12214] shmem_file_read_iter+0x477/0x540 [ 189.546994][T12214] copy_splice_read+0x471/0x6c0 [ 189.551849][T12214] splice_direct_to_actor+0x28f/0x670 [ 189.557400][T12214] do_splice_direct+0x119/0x1a0 [ 189.562265][T12214] do_sendfile+0x382/0x650 [ 189.566694][T12214] __x64_sys_sendfile64+0x105/0x150 [ 189.571993][T12214] x64_sys_call+0x2db1/0x3000 [ 189.577029][T12214] do_syscall_64+0xc0/0x2a0 [ 189.581809][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.587706][T12214] [ 189.590126][T12214] read to 0xffff8881018bcc90 of 4 bytes by task 12214 on cpu 1: [ 189.597935][T12214] atime_needs_update+0x25f/0x3e0 [ 189.603319][T12214] touch_atime+0x4a/0x330 [ 189.607758][T12214] shmem_file_read_iter+0x477/0x540 [ 189.612981][T12214] copy_splice_read+0x471/0x6c0 [ 189.617925][T12214] splice_direct_to_actor+0x28f/0x670 [ 189.623496][T12214] do_splice_direct+0x119/0x1a0 [ 189.628448][T12214] do_sendfile+0x382/0x650 [ 189.632867][T12214] __x64_sys_sendfile64+0x105/0x150 [ 189.638074][T12214] x64_sys_call+0x2db1/0x3000 [ 189.642761][T12214] do_syscall_64+0xc0/0x2a0 [ 189.647294][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.653374][T12214] [ 189.655924][T12214] value changed: 0x27537730 -> 0x27ec0db0 [ 189.661640][T12214] [ 189.663962][T12214] Reported by Kernel Concurrency Sanitizer on: [ 189.670298][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.5.2816 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.681857][T12214] Tainted: [W]=WARN [ 189.685658][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.695713][T12214] ==================================================================