last executing test programs: 6m14.722611439s ago: executing program 0 (id=1): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f0000002180)=""/1, 0x1f80}], 0x2b, &(0x7f00000021c0)=[{0xfffffffffffffffc, 0x2034afca}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="70000000100003040000800000ffffffa1007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 6m14.341542758s ago: executing program 0 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000140)={[{@quota}, {@mblk_io_submit}, {@nouid32}, {@resgid}, {@jqfmt_vfsv1}, {@errors_remount}, {@jqfmt_vfsv0}]}, 0xfe, 0x47e, &(0x7f0000000a00)="$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") chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x38, 0x66, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x18}}, @redirect={0x5, 0x2, 0x0, @loopback, {0x5, 0x4, 0x3, 0x17, 0x501, 0x66, 0x7f2, 0x48, 0x2f, 0xf, @empty, @remote}, "900088877f157a8a"}}}}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x40100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r5, 0x313}, 0x14}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x20000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff226c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r8, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r8, 0x12) waitid(0x1, r8, 0x0, 0x8100000e, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x7}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000480)={r9, 0xe738}, &(0x7f0000000580)=0x8) fcntl$lock(r4, 0x24, &(0x7f00000003c0)={0x2, 0x0, 0x5, 0x5, r8}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6m13.0788392s ago: executing program 0 (id=10): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x2c, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r6 = add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000002800)='dns_resolver\x00', &(0x7f0000002840)={'syz', 0x1}, &(0x7f0000000000)='\x00', r6) r7 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m10.362289264s ago: executing program 0 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000040500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x4c000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x6, 0xcb, 0x2}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r10, 0x20d1}, 0x8) socket(0x21, 0x803, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r11, 0x0, r11) 6m9.421732481s ago: executing program 32 (id=19): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000040500000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x8020000) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x4c000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x6, 0xcb, 0x2}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r10, 0x20d1}, 0x8) socket(0x21, 0x803, 0x0) r11 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r11, 0x0, r11) 6m2.611964725s ago: executing program 5 (id=20): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="18030000430000000000000017000201180f0000", @ANYRES32, @ANYBLOB="0000000000000001b702000014000000b5020000140000008500000083000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000024b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x4000, 0xd7) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000500)=0xc) r2 = syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x8, r2) syz_pidfd_open(r2, 0x0) rt_tgsigqueueinfo(r1, r2, 0x24, &(0x7f0000000540)={0x3b, 0x1, 0x7fffffff}) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0xa2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000080)=[@acquire_done], 0xe4, 0x0, &(0x7f00000002c0)="8fae3ffcd482f7c647752f402ec09b6a1072411db34a4cb3b46aacc35bfdaec931518d804e0d596f2cbbe66bf31fce33e08d48a827b4ba5deec19d08802797b6b7328b4a74808866771879e08184dcfca2414ba1897e48947aa0df352b29b56bb430dfdd1a3e9fa521923f56bfb84941e5df7111d1f1970d034edf7f6f785e85834b177d66fcd45181ed991ff38cec867ef295773a02d6beac553ef6a2bc60982060b57b8e0ec94251d343ebb806c27fe2feab9bea3a153731a8f9b5e793bd132e16c5712f0597715327326b7ef991c33d10c4afeb110bd4cc86f3c3b7985c10fcb5bc24"}) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002400d57f0000000010100000000000000c"], 0x34}], 0x1}, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000240)=[{0x1, 0x1, {0x2, 0xff}, {0x1, 0x1, 0x3}, 0x1, 0xfd}, {0x1, 0x1, {0x1, 0xff, 0x4}, {0x1, 0xf0, 0x1}, 0xff, 0xfd}, {0x1, 0x0, {0x1, 0xff}, {0x1, 0xf0, 0x3}, 0x2, 0x2}, {0x1, 0x1, {0x1, 0xff}, {0x1, 0xff, 0x2}, 0xfd, 0xff}], 0x80) 6m1.133336528s ago: executing program 5 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x2c020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x28, r2, 0x2197e1cd5028ae01, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c844}, 0x8086) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x13, 0x4, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x20000080) pwrite64(r0, 0x0, 0x0, 0x7fff) 5m54.597594559s ago: executing program 5 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001001e000000000024000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240000000021800008008000100647570000c00028008000140000000100900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 5m54.554299892s ago: executing program 33 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000100001001e000000000024000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000480340001800c0001007061796c6f616400240002800800014000000009080003400000004f080004400000003708000240000000021800008008000100647570000c00028008000140000000100900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 4m18.914524968s ago: executing program 1 (id=540): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)={0x14, r3, 0x1488f346e7c00843, 0x70bd24, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000048c6e7f44e26736da0321f92348107577b14ce76c1a0bc5915ebd14d7ea13698f40ab7e1b53f7de82db2d342be6eaa5f7bff4ef74ef140a755ecbca4a5ff874b69a6cab42d6d89c31a6c332eb15ff2fc3d3ab96453f9609e15d738d4411385c3eb71f36262d4e46b62b6e18946", @ANYRES16=r3, @ANYBLOB="00042cbd7000fddbdf25030000003000018008000b007369700008000b00736970000c0007000100000001000000080008000180000008000900710000002c000380140006002001000000000000000000000000000114000600fe880000000000000000000000000101"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m18.838119532s ago: executing program 1 (id=543): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffff7fffffff77b, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f00000003c0), 0xc}, 0x0, 0x35, 0x9, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x7, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) add_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000480)="10", 0x1, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) r5 = socket$netlink(0x10, 0x3, 0x0) close(0x3) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYRES16=r8, @ANYBLOB="00022abd7000fcdbdf250100000005000500f600000008000200060018d6d29077dd136d0abc424a2e53697d00d9db5a24063404256bd602f61216d164c01cbc0000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008891) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000740)={r9, @in6={{0xa, 0x3, 0x6, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30, 0x44080}], 0x1, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000600)={r9, 0xef, "b6978c1ed51f9feea86a3f4f12ecd9832bc30d325741a66e824345860d02cec7679214d4d379d0715ee2f8bbf84b5d7bfea654120d04c5455a25f73e15a47e918d86cf6a065ef3a09bce9116ea4933f904faf939ad2629f2daec58b1af65dc93581146f74069b7c7f2360d719d694dc77bb4bf02638bf5e91c2aa0fd312de161540d27eca1ebe7d142a8d1f369cf3c7856274015be2df6549edf24dbc7729f82195b563665f0baa4ac6dea3b0b8da1b3bc000400d3f41e1fb99fa412cdeda89c6fd3cfc6a6c48d3783014d0c6cab1a34f2795bcac3a146b1f15e32e3519fadeea2ea411fdc97bb842cf288d9b4195b"}, &(0x7f0000000280)=0xf7) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}], 0x1c) listen(r0, 0xfff) 4m16.936300966s ago: executing program 1 (id=559): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newsa={0x13c, 0x10, 0x1, 0x70bd2d, 0x0, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x3e}, 0x202, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67, 0x0, 0xffffffffffffffff}, {@in=@private=0xa010101, 0x4d2, 0x2b}, @in=@broadcast, {0xfffffffffffffffb, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x80ffffff, 0x9}, {0x100000000, 0x40f035e1, 0x9, 0x292}, {0x8, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x44050) 4m16.805791512s ago: executing program 1 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) socket$vsock_stream(0x28, 0x1, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x139) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r1, &(0x7f0000000000), 0x100000, 0x80000}]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa4}}, 0x0) 4m16.564739504s ago: executing program 1 (id=564): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x360, 0x228, 0x25a, 0x360, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xfe}, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0x208, 0x250, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@rt={{0x138}, {0x5, [0x7fffffff, 0x3], 0x742e, 0x4, 0x6, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @local, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x11}, @local, @private0, @local, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2], 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000200)={0x2c, r5, 0x11, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000020) sendmmsg(r3, &(0x7f00000023c0)=[{{&(0x7f0000001980)=@phonet={0x23, 0x7, 0x6, 0x1}, 0x12, 0x0}}], 0x1, 0x2000055) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000000)=0x6) syz_usbip_server_init(0x1) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r12, 0x4b45, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r13, @ANYBLOB="50002f800c0002000203aaaaaaaaaaaa0c000380080001000200"], 0x6c}, 0x1, 0x0, 0x0, 0x20008014}, 0x4880) 4m16.370243094s ago: executing program 1 (id=566): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000010000000700000002"], 0x18}], 0x1}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000270000000000000000000008"], 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="376b2aba49c61895b68ee9f2fb1dde5e03a93224ff7d9deff104e87f89216d0f5d2a9e9071ef4f11a4764ad280b28eb868cd5cad23472a0000"]) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x44}}, 0x48040) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x440d4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x2}, '7&'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x787}}]}]}}]}, 0x54}}, 0x20044085) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x6b, "b9aa093058317d60a22ecdbb40ee23d3be14ea2dd673974a31e129e73cf625390268847fff5aba8051dc5024e9533242ab09ed9e7be002aa20024d17681af627db6f45b6e53c724203f7b42b4423124c3135d2e08bc044515516feaa1b82c74dca882af814825171ad131a"}, &(0x7f0000000480)=0x73) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r10, 0x4, 0x6, [0x800, 0xff, 0xe6, 0x7ce, 0x4, 0xc]}, &(0x7f0000000780)=0x14) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x3c, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_FLOW={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1c0080c0}, 0x20000080) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m16.369866514s ago: executing program 34 (id=566): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a00010600000000010000000700000002"], 0x18}], 0x1}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000270000000000000000000008"], 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r6, 0x4, 0x42000) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="376b2aba49c61895b68ee9f2fb1dde5e03a93224ff7d9deff104e87f89216d0f5d2a9e9071ef4f11a4764ad280b28eb868cd5cad23472a0000"]) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}]}]}, 0x44}}, 0x48040) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x440d4) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x2}, '7&'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x787}}]}]}}]}, 0x54}}, 0x20044085) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x6b, "b9aa093058317d60a22ecdbb40ee23d3be14ea2dd673974a31e129e73cf625390268847fff5aba8051dc5024e9533242ab09ed9e7be002aa20024d17681af627db6f45b6e53c724203f7b42b4423124c3135d2e08bc044515516feaa1b82c74dca882af814825171ad131a"}, &(0x7f0000000480)=0x73) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000740)={r10, 0x4, 0x6, [0x800, 0xff, 0xe6, 0x7ce, 0x4, 0xc]}, &(0x7f0000000780)=0x14) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x3c, r11, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x5}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_FAMILY={0x5, 0xd, 0x28}, @GTPA_FLOW={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1c0080c0}, 0x20000080) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m15.450054787s ago: executing program 4 (id=1689): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x3) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000100)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r2, r4, 0x25, 0x2, @void}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.851169206s ago: executing program 4 (id=1694): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'hsr0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x0, 0xfff1}, {0xb, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="0287f1c1", @ANYRES16=r1, @ANYBLOB="000826bd7000fcdbdf25060000000c00018008000300000000003c00018008000300010000001400020069703667726574617030000000000000140002006970766c616e3000000000000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4004004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x100, 0xe, 0x8001, 0x5, 0x10}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r4, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x38}}, 0x20040084) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r11, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x1, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000707000/0x4000)=nil, 0x4000, 0x2000009) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r13, r13, 0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1m14.274277205s ago: executing program 4 (id=1695): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001380)={'\x00', 0xeba, 0x8, 0x6, 0x7, 0x2, 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r3}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f00000002c0)=0xc) syz_clone3(&(0x7f0000001440)={0x10800, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x12}, &(0x7f0000000100)=""/6, 0x6, &(0x7f00000001c0)=""/243, &(0x7f0000001400)=[r1, r2, r6], 0x3}, 0x58) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x240410c0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000000340)=""/4102, 0x1006}], 0x1}, 0x0) 1m14.255688316s ago: executing program 4 (id=1696): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) r1 = syz_clone(0x20020000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) get_robust_list(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x0, 0x1, [@remote]}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x154, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x0, 0x4e23, 0x7, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d3, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x61, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0xa8, 0x80, "316f74eeac053deb73fc018493cc121927a9bca207"}}]}, 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)={r4}) 1m14.053542485s ago: executing program 4 (id=1697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000"], 0x0, 0x56, 0x0, 0x0, 0x400}, 0x28) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, 0x0, 0x400, 0x404, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000640000006400000002000000000000000000000d0a00000000000000020000060400000005000040"], &(0x7f0000000f40)=""/4086, 0x7e, 0xff6, 0x8, 0x3}, 0x28) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r1, r2, 0x1000) setregid(0x0, r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r5 = syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) read$ptp(r5, &(0x7f0000000580)=""/215, 0xd7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1m13.755704421s ago: executing program 4 (id=1700): unshare(0x2040400) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000300000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) 1m13.727646641s ago: executing program 35 (id=1700): unshare(0x2040400) r0 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000300000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) 1m8.050448651s ago: executing program 7 (id=1743): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000ffffff800000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r1, @ANYBLOB="04"], 0xc4}}, 0x20004804) 1m8.048063311s ago: executing program 7 (id=1745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x1000000, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) 1m7.996272094s ago: executing program 7 (id=1747): r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'vlan0\x00', 0x4}) mknod$loop(&(0x7f0000001540)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x0) 1m7.87004678s ago: executing program 7 (id=1748): r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) 1m6.611871572s ago: executing program 7 (id=1759): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m6.45417072s ago: executing program 7 (id=1761): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_clone(0x1282c200, &(0x7f00000001c0)="f2f23da18dfcf5dae65c37a4ddbcc7ab4b0642f48f9688121ef5d52da5b993de98f2eb04cb4cf74b009ca8b26a0c72adeb3ac3e64cab07d68b15db766b9cad1b63a5", 0x42, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000380)="6a9ce42866345100584b928ee2ecf3631e05c92e5bd82471fe3e15cb2b0367f770918807b4e4365b75abc11ddb480e08bf0b2a291a449b238a2deca4f7237c4ffe10a0f52320e6bb903b4c6312abf184fe169504245d388d04dc0a60c0274dcafbef7039092f9821c6da3c4ed1525072d3e8ad4a330317630d80219e8bbc925c2042c0a03cac599596542c8c91bb7b1dd24dd4242d1d7f189ab690444c24f44a682c89f9e1cd") (async) syz_clone(0x1282c200, &(0x7f00000001c0)="f2f23da18dfcf5dae65c37a4ddbcc7ab4b0642f48f9688121ef5d52da5b993de98f2eb04cb4cf74b009ca8b26a0c72adeb3ac3e64cab07d68b15db766b9cad1b63a5", 0x42, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000380)="6a9ce42866345100584b928ee2ecf3631e05c92e5bd82471fe3e15cb2b0367f770918807b4e4365b75abc11ddb480e08bf0b2a291a449b238a2deca4f7237c4ffe10a0f52320e6bb903b4c6312abf184fe169504245d388d04dc0a60c0274dcafbef7039092f9821c6da3c4ed1525072d3e8ad4a330317630d80219e8bbc925c2042c0a03cac599596542c8c91bb7b1dd24dd4242d1d7f189ab690444c24f44a682c89f9e1cd") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0), 0x800) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) pipe(0x0) (async) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) 51.432712079s ago: executing program 36 (id=1761): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) syz_clone(0x1282c200, &(0x7f00000001c0)="f2f23da18dfcf5dae65c37a4ddbcc7ab4b0642f48f9688121ef5d52da5b993de98f2eb04cb4cf74b009ca8b26a0c72adeb3ac3e64cab07d68b15db766b9cad1b63a5", 0x42, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000380)="6a9ce42866345100584b928ee2ecf3631e05c92e5bd82471fe3e15cb2b0367f770918807b4e4365b75abc11ddb480e08bf0b2a291a449b238a2deca4f7237c4ffe10a0f52320e6bb903b4c6312abf184fe169504245d388d04dc0a60c0274dcafbef7039092f9821c6da3c4ed1525072d3e8ad4a330317630d80219e8bbc925c2042c0a03cac599596542c8c91bb7b1dd24dd4242d1d7f189ab690444c24f44a682c89f9e1cd") (async) syz_clone(0x1282c200, &(0x7f00000001c0)="f2f23da18dfcf5dae65c37a4ddbcc7ab4b0642f48f9688121ef5d52da5b993de98f2eb04cb4cf74b009ca8b26a0c72adeb3ac3e64cab07d68b15db766b9cad1b63a5", 0x42, &(0x7f0000000040), &(0x7f0000000240), &(0x7f0000000380)="6a9ce42866345100584b928ee2ecf3631e05c92e5bd82471fe3e15cb2b0367f770918807b4e4365b75abc11ddb480e08bf0b2a291a449b238a2deca4f7237c4ffe10a0f52320e6bb903b4c6312abf184fe169504245d388d04dc0a60c0274dcafbef7039092f9821c6da3c4ed1525072d3e8ad4a330317630d80219e8bbc925c2042c0a03cac599596542c8c91bb7b1dd24dd4242d1d7f189ab690444c24f44a682c89f9e1cd") r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0), 0x800) (async) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000240)={0x0, 0x0}) socket$kcm(0x11, 0x3, 0x0) (async) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) pipe(0x0) (async) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0xb0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_none}]}}) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) 5.68649749s ago: executing program 3 (id=2198): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1, 0x37f, &(0x7f0000000a40)="$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") 5.667773541s ago: executing program 8 (id=2200): syz_open_dev$usbfs(0x0, 0x205, 0x8401) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000240)}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 5.609888564s ago: executing program 3 (id=2201): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r6, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0xd, 0xa8, 0x20, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) dup3(r3, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 4.286824609s ago: executing program 8 (id=2205): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@remote, 0x800, 0x1}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x2, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xd9, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0x100000000, 0x2, 0xa51, 0x4000000000008, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x1, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0x4000000e4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x200000000c, 0x8, 0x0, 0x4, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x7, 0x7, 0x2000000000000009, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x1000100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x1]}) ioprio_set$uid(0x3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x68, &(0x7f00000009c0)=ANY=[@ANYBLOB="fffff0ffffffaaaaaaaaaa000800451b005a00000000002f907800000000e0000001248081000000000010000800000086dd007f080088be0000000010008000010000000000000008fb21eb0000000120182e74"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20030, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = getpid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200008, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x586, &(0x7f00000003c0)="$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") setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, 0x0}, 0x4800) setns(0xffffffffffffffff, 0x66020000) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x4, 0x7, 0x48}, @ipv4=@igmp={{0x5, 0x4, 0x0, 0x11, 0x1c, 0x67, 0x0, 0x30, 0x2, 0x0, @local, @remote}, {0x1e, 0xd2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}}, 0x2a) wait4(0x0, 0x0, 0x20000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="dbaa00fea001000071101d0000000000950000b05082d20e07476b4deeee0b1f0999bc0000000000"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.183428573s ago: executing program 6 (id=2213): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x18}}, 0x840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a0b0400000000000000000200000028000480240001800a000100717565756500000014000280060001400800000006000240ffff0000090001319c797a30000000000900020073797a3200000000140000001100010000000000000000000700000a5dd4240350bcffeaa55c67020078b6f0487c8f99b37b2b2deb40"], 0x7c}}, 0x40) unshare(0x40200) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) semop(0x0, &(0x7f00000005c0)=[{0x0, 0x7fff, 0x800}, {0x0, 0x9, 0x2800}, {0x2, 0x8}, {0x1, 0x8a55, 0x2000}, {0x3, 0x3}, {0x4, 0x2, 0x1000}], 0x6) semctl$SETVAL(0x0, 0x3, 0x10, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f000000bc00), 0x8000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80c10, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x400000288, 0x80000001}, 0xa216, 0x6, 0x3, 0x0, 0x9484, 0x1ffd, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x82e, 0x0, 0x0, 0x0) poll(&(0x7f000000bcc0)=[{r2, 0x40}], 0x1, 0x200) r3 = timerfd_create(0x8, 0x800) timerfd_settime(r3, 0x3, &(0x7f00000001c0)={{}, {0x0, 0x989680}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(r5, &(0x7f0000000580)='./file1\x00', 0x89901) fallocate(0xffffffffffffffff, 0x0, 0x6e67, 0x5) clock_adjtime(0x6, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40000000, 0x0, 0x4, 0x4, 0x0, 0x0, 0x200000000000000, 0x4, 0xfffffffff7ffffff, 0x2000800, 0x0, 0x0, 0x59, 0x8}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f000000c240)=0x11) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="180000181100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000000000000000000000000200018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000007100000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 3.04177005s ago: executing program 3 (id=2214): unshare(0x6a040000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x29, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xe82, 0x722}, 0x106200, 0x10004, 0x20da, 0x9, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x100) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) unshare(0x8000080) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) unshare(0x2040400) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r6, 0x0, &(0x7f0000000140)=""/18}, 0x20) r7 = socket(0x200000000000011, 0x2, 0x10) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="d10000000000ff030000000000e0000011907800000000000000004e210000000c907861040000"], 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) sendto(r3, &(0x7f00000000c0)="f3930064fd16ff82c0d5ef00178ccdc5d14d9ceb788c778ac3533dcdd68a43535bfa0e44d8711f23862390bcf57c694b96bd83f1955816430ea5670798ea059a90a89768", 0x44, 0x20000000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 3.003877222s ago: executing program 9 (id=2215): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x5}, 0x4) sendto$packet(r0, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 2.85070039s ago: executing program 9 (id=2216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a0900b09f000000000000000000020073797a310000000500000040000000000900010073797a30000000000800034000000001140000001100010000000000000000000b00000a"], 0x64}}, 0x0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r3 = socket(0x10, 0x803, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x101, 0x28000000}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, 0x0, &(0x7f0000000080)) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r8, r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSUUID(r9, 0x80111500, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async, rerun: 32) mount$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[]) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r10], 0x68}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async) r11 = socket(0x10, 0x3, 0x0) r12 = gettid() ptrace$setsig(0x4203, r12, 0x7ffffffc, &(0x7f0000000100)={0x2, 0x8, 0x800045}) (async) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.584605483s ago: executing program 2 (id=2217): syz_open_dev$usbfs(0x0, 0x205, 0x8401) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15170000bcb7040008000a00", @ANYRES32=r1, @ANYBLOB="140012800c0001006d6163767461700004000280080005"], 0x44}, 0x1, 0x0, 0x0, 0x240448d5}, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000240)="d942", 0x2}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 2.533866615s ago: executing program 9 (id=2218): r0 = syz_io_uring_setup(0x2426, &(0x7f0000000880)={0x0, 0x5885, 0x0, 0x0, 0x4}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x7fff, 0x0, &(0x7f00000003c0)="f612a0deaf2e76f7a2ba77e867f8458b7d2bc16a0457baf330e6e48aea7810b3364d00582690217e1b1feb2b9fdb3fbdcc27ac3d8d2b95a6c263fbf87a8c8e5a3a84f9d5749ad54a5ed2e975651b86cc0a7c522aef79c95e8f296794ad678c3cfced7a7ed3c12179b1aa49fea67089f5a9af2ff2668cd50437948993217dffb1e4edfcb450241d3e2a9d99305e24fe181cfa101e9d8d5a3004576297c4f0722a0945b86c3a29472707ff85e9237a2c6d6bf6f34719ee7572f853733924a0aaafc6", 0x9, 0x0, 0x1, {0x2}}) r3 = socket(0x1e, 0x4, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1820400, &(0x7f0000000100)={[{@nolazytime}, {@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x611, &(0x7f0000000d40)="$eJzs3c9vFNcdAPDv7NrGxlAbVLWlh2KpqkBqsbGBClU9wLWqLNpEueQSBxuCMGDZjhKTSBiJXCJFuURRpJxyCPkvEhSuOSWXREouOUVIKIk4RspGs7tjr+1Z/1jsHWA+H2nZN/NmeG9Yvn5vn9+bCaC0RtI/KhFHImIuiRhKllfyeqKZOdI47tHPb15MX0nUas/9mETS3JcdnzTfB5sn90fEl58ncbi6sdyFpZtXp2ZnZ+ab22OL1+bGFpZunrhyberyzOWZ6xP/nDh75vSZs+MnO7quWxt3pdV5bejtyRc//vCXZPyT7yaTOBf/aR7Yeh27ZSRG6v8mycaswbO7XVhBqs3/J60fcdJTYIXYkezz642IP8ZQVGP1wxuKt/5XaOWAPVVLImpASSXiH0oq6wc0vtv3bfgeXCmkVwJ0w8PzjQGAbGxvNf57GmOD0V8fG9j/KInWYZ0kIjobmVvrQER8cX/yzqX7k3fmD+7NOByQb/l2RPypJf77spykHv/D0R/D9fivrIn/tF9wofme7v9/h+WvHyoW/9A9jfjvz2n/V+M/2sT/Sy3x/3KH5Y+sJl8ZWBP/A51eEgAAAAAAAJTWvfMR8Y+8+T+Vlfk/kTP/ZzAizu1C+SPrtjf+/r/yYBeKAXI8PB/x78iP/2pj9u9wtfl7/oP1+QC9yaUrszMnI+J3EXE8evel2+OblHHincMftMsbac7/y15p+en76hGVBz371p4zPbU49bjXDUQ8vB3x59z5v8lK+5/ktP/pz4O5bOPbzWf/HP7b3Qvt8raOf2Cv1D6KOJbb/q/etSLZ/P4cY/X+wFjWK9joL2+8+2m78juNf7eYgMeXtv/7N4//4aT1fj0LOy/j1FJPrV1ep/3/vuT5+i1nsuUKr08tLs6PRwwk/62me9fsn9h5neFZlMVDFi9p/B//6+bjf3n9/4GIWF73dyc/rV1TnPnDr4Pft6uP/j8UJ43/6R21/20TyXJEbtbE3eHP2pW/vfb/dL2tP97cY/wPGt7PwrRv7f6cAO3Jy+p2fQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgWVCJiAORVEZX0pXK6GjEYET8PvZXZm8sLP790o1Xr0+nefXn/1eyJ/0ONbaT7Pn/wy3bE+u2T0XEoYh4rzpQ3x69eGN2uuiLBwAAAAAAAAAAAAAAAAAAgCfEYMS13ma6df1/6odqkTUDuqKn6AoAhcmJ/6+KqAfQfdp/KC/xD+Ul/qG8xD+Ul/iH8hL/UF7iH8pL/AMAAAAAwDPl0NF73yQRsfyvgfor1dfM6y20ZsBeqxRdAaAwbvED5WXqD5SX7/hAskV+f9uTtjqz3cmpuYtbnwwAAAAAAAAAAAAAZI4dsf4fysr6fygv6/+hvLL1/0cLrgfQfR1/x2+7phd4Gm22kr99uG9j/T8AAAAAAAAAAAAAsCsWlm5enZqdnZnvXuLr5kO/co8ZiIgu1ydLvFBEocUmarXarfpH8YTU5ylPZFPht39Wf34U7E0iW+u3vbMK+oEEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs8FsAAAD//yVOHNo=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="676a6ef5246fac75a09975a869698e8a15f3c57be4f43af3ab7f65fdb0cc97fd652a6b1ef91138742b7854461b200df12670880f9ebb20fef7e9a46c3c23da3b", @ANYRESOCT=r8, @ANYRES8=r5], 0x9) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xe, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c000}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x48e5}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r12}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r12}, 0x38) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)=@newtfilter={0x264, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r11, {0x5, 0x10}, {0x1, 0xffff}, {0x7, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x234, 0x2, [@TCA_BASIC_ACT={0x22c, 0x3, [@m_mirred={0x70, 0x1c, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x5, 0x8, 0x125, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xff, 0x7, 0x0, 0x9}, 0x1, r11}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0xc8, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x9e, 0x6, "ecf1fa36b567658ff1f39271cdb3d560c984cc31d83cf3e4d2d19d592bd09447eb605ce521f0ad00fd2bed8e25da0ae5cd8bbd69ecfcfa4ae22c38bb88805a42bde6b567bec64684cf7cb10e820b2e0b8726a2c4cb2d5fa843a21b6728d7dfe72cbbaa2d2c01326e0ecfb2036c876966d664f07d75230e599c7fb628793ea4b5ab706dd4fc8a0f60e48ee4ff56ed2bc9540f6825f14b8d014d6a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xf0, 0x1a, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x78}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf, 0xe, 0x1}, 0xb}}]}, {0x97, 0x6, "b3f04bb0048c6776d12865dc41406224117b4f0bb530675d657765bc37604dfc3c947b4ced844d2949c04aa533cfb6507ce33a1012aa05d631a879bd90f1a15529353cc0c96eee7463be73cee4878ea0666348c6175eab2e86511e095e1495c52fe5ce7354e96ec79134de841af58ec32ebc19689cbbaf690ce58ad3936f4af1e99f55217ac3ee3a8c661f3ac1c66e947fdb4a"}, {0xc, 0x7, {0xa27637872a82d79d, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BASIC_POLICE={0x4}]}}]}, 0x264}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) mkdirat(r13, 0x0, 0x14) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x21, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd03e, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffc0}, @exit, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x78, &(0x7f0000000680)=""/120, 0x41000, 0x15, '\x00', r11, @fallback=0x2a, r13, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r14, 0x4, 0x0, &(0x7f0000000700)=[{0x5, 0x3, 0x2, 0xb}, {0x0, 0x3, 0xc}, {0x4, 0x5, 0x6, 0x9}, {0x4, 0x5, 0xe, 0x4}], 0x10, 0x401}, 0x94) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) bind$tipc(r3, 0x0, 0x0) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.371663913s ago: executing program 6 (id=2219): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x700f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1fd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) stat(0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) 2.343650945s ago: executing program 3 (id=2220): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000000000000000000000000000000000e88c913313b4caad298d5d062fd1305f1a1f0c9c0e1ffa38b656e85f8e88f573554eec517ea388c5fb60a6cf2f5a4d82d44a036fd99276d1a46c5b1ae86cd50b60ba8a98cd57a8c49a6b7465950028faf39b12bf8c3b9006cce88750ea9903a155ef159e2874df01308aa937b32e44f76a157774372a52ce37cb9e9397b29ab41a9f2d73548501b648f65d1be2"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x32240ce, &(0x7f0000000240), 0x1, 0x569, &(0x7f00000002c0)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)='\'', 0x14}, {0x0}], 0x2}, 0x4) 2.299842907s ago: executing program 2 (id=2221): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140401, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x5}, 0x4, 0x6, 0x10000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0xa) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004) 2.206215752s ago: executing program 6 (id=2222): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x1000000007, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x106200, 0x10004, 0x4, 0x5, 0xa, 0xd, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x4, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x16f, @tick=0x7, 0x4}) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.099790937s ago: executing program 6 (id=2223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x4000000}, 0x94) 2.02746723s ago: executing program 6 (id=2224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x1e, 0x4, 0x9, &(0x7f0000000040)={0x0, 0x0}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) dup(0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x122) fcntl$notify(r6, 0x402, 0x24) utimensat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}], 0x1, 0x8, 0xffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x20008001, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0, 0x40000000}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0xd, 0xa8, 0x20, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) dup3(r3, r2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 2.02691264s ago: executing program 8 (id=2225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000001010000000000feffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000002000000850000003300000085000000070000009500"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc641}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (fail_nth: 1) 1.961123053s ago: executing program 2 (id=2226): socket$inet6(0xa, 0x3, 0x3c) unshare(0x6a000200) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="36c9b22081bc1a093107fa128673d87b92d5c054c6368d2bd6038460844eb92b91257b6105b35a49d69d9b8df4d16010cfe51f310a87774d0e4f41f6aa7998fd2528a934806162eb56dbbe3810d45f4bd78228573601aaa33edd0724129842f95a2c7cb363024e1dee7963955a5163a0abff11e1ebadf510b0f0e8b2f6d3e441f2ac1b9be225aa0f5c1e7b66e091e3309ec3f4a919c3f3c7f5dcd74f3a2208d8", @ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) mlockall(0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.543265414s ago: executing program 9 (id=2227): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$phonet_pipe(0x23, 0x5, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x1, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0xf60e}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x4) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40049, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x3}, 0x0, 0x3a, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000001010102000000000000000002000003300001802c000180140003000000000000000000200000000000000114000400ff0100000000000000000000000000010c00198008000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x400c091}, 0x40d0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190001000000000001000000fe8800000000000000000000003253b42c0000000000000000000000000000010000001ce700"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500ac1414aa000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000000000000000000000000000040000000e0000002000000000000000000000000000000006c00000000000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000330000000a00000000000000000000000000ffff0a0101010135000005000000000000000900000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) 1.074007127s ago: executing program 8 (id=2228): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lstat(&(0x7f0000000200)='./file2/file0\x00', &(0x7f0000000240)) setregid(0xffffffffffffffff, r1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000140)={[{@resgid={'resgid', 0x3d, r1}}, {@debug}, {@nodioread_nolock}, {@user_xattr}, {@errors_remount}, {@noquota}]}, 0x9, 0x441, &(0x7f0000000580)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x8, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x2) fallocate(r3, 0x3, 0x4100, 0xc62) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) 838.536138ms ago: executing program 9 (id=2229): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="02100803030000002abd7000fedbdf2501001800"], 0x18}}, 0x8000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0x7}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4044040}, 0x40) r5 = socket$key(0xf, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0}, 0x68) sendmsg$key(r5, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00100000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@sysvgroups}, {@nomblk_io_submit}, {}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@debug}, {@errors_continue}]}, 0x0, 0x5e0, &(0x7f00000005c0)="$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") umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000001200)='./file0\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11fb, &(0x7f0000002440)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25ded9f7, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2c21}, [@IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20004800) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x9, r7}, 0x38) r8 = syz_open_procfs$userns(0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000ec0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000bc0)=@dellinkprop={0x284, 0x6d, 0x8, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5008}, [@IFLA_IFALIAS={0x14, 0x14, 'lo\x00'}, @IFLA_ADDRESS={0xa, 0x1, @random="a3da8852571b"}, @IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x20}, @IFLA_MTU={0x8, 0x4, 0xfffffffa}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_VFINFO_LIST={0x224, 0x16, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x87d, 0x5}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x200, 0x7f}}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7f, 0x9}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x40}}, @IFLA_VF_VLAN={0x10, 0x2, {0xf, 0x8c3, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xb, 0x9}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xffff, 0xfffffffffffffffd}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1000, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7fffffff}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x5, @local}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x1, 0x1}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x181, 0x7}}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0xf}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3cfafd87, 0x472}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x7f, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2, 0x6}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x2, 0xf}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffff9, 0x6}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x64e}}]}, {0xbc, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0xd}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x49, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x4, 0x92}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x1, 0x4}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0x2e5, 0x108c, 0x88a8}}, {0x14, 0x1, {0x6, 0x36c, 0x2, 0x8100}}, {0x14, 0x1, {0xfffffff8, 0xaef, 0x9, 0x88a8}}, {0x14, 0x1, {0x2, 0x8c4, 0xd2d, 0x8100}}, {0x14, 0x1, {0x0, 0xb73, 0x5, 0x8100}}, {0x14, 0x1, {0x9, 0xe97, 0x1, 0x8100}}]}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xb692, 0x6f5}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x7}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xd}}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000}, 0x5811) r10 = syz_open_procfs(0x0, &(0x7f0000000440)='oom_score_adj\x00') preadv(r10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000c40)=""/101, 0x65}], 0x2, 0x20033, 0x1ff) getdents64(r0, 0xfffffffffffffffe, 0x29) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000002b00), &(0x7f0000002b40)=0x4) 828.274849ms ago: executing program 8 (id=2230): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20001ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000001, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000300, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000440)=0x4) (async) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) (async, rerun: 32) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) (rerun: 32) sendfile(r2, r3, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r5 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xfff3}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}]}, 0x3c}}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getqdisc={0x24, 0x26, 0x300, 0x70bd29, 0xab, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff3, 0x1}, {0x3, 0x6}}, [{}, {}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async, rerun: 64) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (rerun: 64) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) (async, rerun: 32) syz_io_uring_setup(0x2, &(0x7f00000006c0)={0x0, 0x711, 0x1, 0x1, 0x323, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000240)) (rerun: 32) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e25, 0x8, @loopback, 0xd97f}}, 0x0, 0x0, 0x24, 0x0, "43cad7244bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file1\x00'}, 0x18) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 799.721061ms ago: executing program 3 (id=2231): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000280)={0x9, {{0xa, 0x4e21, 0x0, @empty, 0xffff}}, {{0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x80000000}}}, 0x108) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x20, &(0x7f0000000400)={[{@noblock_validity}, {@resuid}, {}, {@nombcache}, {@norecovery}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@nobh}]}, 0x2a, 0x656, &(0x7f0000000800)="$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") r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xd}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x600, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0xfa00, {&(0x7f0000000c00), r4}}, 0x18) 519.369995ms ago: executing program 2 (id=2232): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x700f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1fd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) stat(0x0, 0x0) fchdir(0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x90}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x18, 0x2c, 0x0, @remote, @local, {[@routing={0x2, 0x2, 0x0, 0x1, 0x0, [@private1]}]}}}}}, 0x0) 386.330471ms ago: executing program 8 (id=2233): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {0x0}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 266.983377ms ago: executing program 3 (id=2234): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}, [@mbim_extended={0x8, 0x24, 0x1c, 0xc, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xff, 0xf2, 0xfd, 0x1}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x3, 0x8}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x0, 0x100}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 220.090439ms ago: executing program 2 (id=2235): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x38}}, 0x20000000) 82.039296ms ago: executing program 2 (id=2236): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140401, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x5}, 0x4, 0x6, 0x10000, 0x0, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$rxrpc(0x21, 0x2, 0xa) truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x8007fffffffffff) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x717f, 0x100, 0x14, 0x7f}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x10b8}, 0x20008004) 81.743456ms ago: executing program 6 (id=2237): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1218e09, &(0x7f0000000100)={[{@lazytime}, {@min_batch_time={'min_batch_time', 0x3d, 0xe2ff}}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x102}}, {}, {@bh}, {@inlinecrypt}]}, 0x6, 0x600, &(0x7f0000001200)="$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") 0s ago: executing program 9 (id=2238): r0 = syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48048}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0500000000000000000000007fbdbc14e20210cb166f7b79973be48736643064742be19767a0430a96dcf0b515ae937d0766f0784068d6bfbf853d90f76bf6cad413542521645a211e634acf1327a0e96a42f4b3d8e2b2418a4276c2e2eddce5607525809deeae6cc46d26e53547056ef5303cb81c0f8f2694ad16044e6348bacb7a9c28bc03db61de13436ff3", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) syz_usb_connect(0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) readv(r0, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1) kernel console output (not intermixed with test programs): is not up; please bring it up to get a fully working HSR network [ 338.633394][T11801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.654551][T12163] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1711: bg 0: block 234: padding at end of block bitmap is not set [ 338.670224][T12176] netlink: 'syz.6.1713': attribute type 4 has an invalid length. [ 338.709982][T12163] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 117 [ 338.726477][T12176] loop6: detected capacity change from 0 to 2048 [ 338.747433][T11801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.755250][T12163] EXT4-fs (loop2): This should not happen!! Data will be lost [ 338.755250][T12163] [ 338.761304][T12176] EXT4-fs: Ignoring removed mblk_io_submit option [ 338.789209][T12176] EXT4-fs: Ignoring removed nomblk_io_submit option [ 338.808247][T12176] ext4: Unknown parameter 'uid' [ 338.896799][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.074537][T11801] veth0_vlan: entered promiscuous mode [ 339.081068][T12215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.097032][T11801] veth1_vlan: entered promiscuous mode [ 339.106278][T12215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.128220][T12223] lo speed is unknown, defaulting to 1000 [ 339.149804][T11801] veth0_macvtap: entered promiscuous mode [ 339.159013][T11801] veth1_macvtap: entered promiscuous mode [ 339.181731][T11801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.203050][T11801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.216815][T11190] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.226479][T11190] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.262265][T11190] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.352402][T11190] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.363520][T12229] lo speed is unknown, defaulting to 1000 [ 339.382591][ T28] audit: type=1400 audit(1774335911.676:2564): avc: denied { mount } for pid=11801 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 339.743102][T12292] loop2: detected capacity change from 0 to 128 [ 339.749506][ T28] audit: type=1400 audit(1774335912.026:2565): avc: denied { setattr } for pid=12291 comm="syz.8.1726" name="QIPCRTR" dev="sockfs" ino=41192 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 339.913296][T12299] bridge_slave_0: left allmulticast mode [ 339.927560][T12299] bridge_slave_0: left promiscuous mode [ 339.933740][T12299] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.953443][T12299] bridge_slave_1: left allmulticast mode [ 339.959179][T12299] bridge_slave_1: left promiscuous mode [ 339.972893][T12299] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.985520][T12299] bond0: (slave bond_slave_0): Releasing backup interface [ 339.995433][T12299] bond0: (slave bond_slave_1): Releasing backup interface [ 340.047660][T12268] loop3: detected capacity change from 0 to 1024 [ 340.055149][T12299] team0: Port device team_slave_0 removed [ 340.064774][T12299] team0: Port device team_slave_1 removed [ 340.072084][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.079632][T12299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.109185][T12268] EXT4-fs: Ignoring removed orlov option [ 340.125724][T12299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.151453][T12299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.157913][T12268] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 340.194258][T12299] net_ratelimit: 2 callbacks suppressed [ 340.194278][T12299] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 340.295712][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.337214][T12308] team0: Mode changed to "activebackup" [ 341.025832][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.174399][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.615962][ T28] audit: type=1400 audit(1774335913.906:2566): avc: denied { create } for pid=12343 comm="syz.6.1737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 341.691621][T12349] loop2: detected capacity change from 0 to 128 [ 342.215375][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.698773][T12403] loop3: detected capacity change from 0 to 128 [ 342.779068][T12410] loop3: detected capacity change from 0 to 512 [ 342.792746][T12410] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 342.814717][T12410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1751: bg 0: block 393: padding at end of block bitmap is not set [ 342.833847][T12410] loop3: lost filesystem error report for type 5 error -117 [ 342.834218][T12410] EXT4-fs (loop3): Remounting filesystem read-only [ 342.841599][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 342.841626][ C1] EXT4-fs (loop3): initial error at time 1774335915: ext4_validate_block_bitmap:441 [ 342.841671][ C1] EXT4-fs (loop3): last error at time 1774335915: ext4_validate_block_bitmap:441 [ 342.873522][T12410] EXT4-fs (loop3): 2 truncates cleaned up [ 342.879738][T12410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.908818][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.922612][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.943680][T12410] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 343.012507][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.060900][ T28] audit: type=1400 audit(1774335915.356:2567): avc: denied { getopt } for pid=12429 comm="syz.3.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 343.138621][T12436] kernel profiling enabled (shift: 9) [ 343.591276][T12440] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 343.806821][T12470] loop8: detected capacity change from 0 to 512 [ 343.816046][T12470] EXT4-fs: Ignoring removed oldalloc option [ 343.938565][T12475] loop6: detected capacity change from 0 to 128 [ 343.991837][T12470] EXT4-fs (loop8): corrupt root inode, run e2fsck [ 343.998451][T12470] EXT4-fs (loop8): mount failed [ 344.146483][T12481] loop3: detected capacity change from 0 to 512 [ 344.176162][T12481] ext4: Unknown parameter 'nouser_xattr' [ 344.850218][T12467] syz.2.1765 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 344.892724][T12467] CPU: 0 UID: 0 PID: 12467 Comm: syz.2.1765 Tainted: G W syzkaller #0 PREEMPT(full) [ 344.892765][T12467] Tainted: [W]=WARN [ 344.892888][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.892902][T12467] Call Trace: [ 344.892909][T12467] [ 344.892931][T12467] __dump_stack+0x1d/0x30 [ 344.892963][T12467] dump_stack_lvl+0x95/0xd0 [ 344.893033][T12467] dump_stack+0x15/0x1b [ 344.893064][T12467] dump_header+0x80/0x240 [ 344.893096][T12467] oom_kill_process+0x295/0x350 [ 344.893128][T12467] out_of_memory+0x97d/0xb80 [ 344.893187][T12467] try_charge_memcg+0x62e/0xa10 [ 344.893286][T12467] obj_cgroup_charge_pages+0x23/0xc0 [ 344.893319][T12467] __memcg_kmem_charge_page+0x9e/0x170 [ 344.893398][T12467] __alloc_frozen_pages_noprof+0x18a/0x360 [ 344.893437][T12467] alloc_pages_mpol+0xb3/0x260 [ 344.893512][T12467] alloc_pages_noprof+0x8f/0x130 [ 344.893548][T12467] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 344.893590][T12467] __kvmalloc_node_noprof+0x3d4/0x650 [ 344.893624][T12467] ? futex_hash_allocate+0x190/0x9d0 [ 344.893708][T12467] ? futex_hash_allocate+0x190/0x9d0 [ 344.893739][T12467] futex_hash_allocate+0x190/0x9d0 [ 344.893777][T12467] ? cap_task_prctl+0x13f/0x6e0 [ 344.893856][T12467] futex_hash_prctl+0xd8/0xf0 [ 344.893894][T12467] __se_sys_prctl+0xa3d/0x13f0 [ 344.893930][T12467] __x64_sys_prctl+0x67/0x80 [ 344.894025][T12467] x64_sys_call+0x2533/0x3020 [ 344.894061][T12467] do_syscall_64+0x12c/0x370 [ 344.894090][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.894291][T12467] RIP: 0033:0x7f2816dfc799 [ 344.894318][T12467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.894414][T12467] RSP: 002b:00007f2815857028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 344.894439][T12467] RAX: ffffffffffffffda RBX: 00007f2817075fa0 RCX: 00007f2816dfc799 [ 344.894459][T12467] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 344.894477][T12467] RBP: 00007f2816e92c99 R08: 0000000000000000 R09: 0000000000000000 [ 344.894493][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.894586][T12467] R13: 00007f2817076038 R14: 00007f2817075fa0 R15: 00007fff02d25ac8 [ 344.894654][T12467] [ 344.894714][T12467] memory: usage 307200kB, limit 307200kB, failcnt 1333 [ 345.207635][T12467] memory+swap: usage 308120kB, limit 9007199254740988kB, failcnt 0 [ 345.223908][T12467] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 345.239427][T12467] Memory cgroup stats for /syz2: [ 345.239687][T12467] cache 0 [ 345.255593][T12467] rss 4096 [ 345.258666][T12467] shmem 0 [ 345.268775][T12467] mapped_file 0 [ 345.275954][T12467] dirty 0 [ 345.282405][T12467] writeback 0 [ 345.289341][T12467] workingset_refault_anon 406 [ 345.299954][T12467] workingset_refault_file 2874 [ 345.309552][T12467] swap 942080 [ 345.316598][T12467] swapcached 1556480 [ 345.320538][T12467] pgpgin 281160 [ 345.325215][T12467] pgpgout 281140 [ 345.333522][T12467] pgfault 288355 [ 345.337169][T12467] pgmajfault 287 [ 345.347979][T12467] inactive_anon 81920 [ 345.361898][T12467] active_anon 0 [ 345.366777][T12467] inactive_file 0 [ 345.370487][T12467] active_file 0 [ 345.382140][T12467] unevictable 0 [ 345.385665][T12467] hierarchical_memory_limit 314572800 [ 345.400339][T12467] hierarchical_memsw_limit 9223372036854771712 [ 345.413432][T12467] total_cache 0 [ 345.421091][T12467] total_rss 4096 [ 345.429201][T12467] total_shmem 0 [ 345.436304][T12467] total_mapped_file 0 [ 345.448401][T12467] total_dirty 0 [ 345.455606][T12467] total_writeback 0 [ 345.466206][T12467] total_workingset_refault_anon 406 [ 345.477346][T12467] total_workingset_refault_file 2874 [ 345.490769][T12467] total_swap 942080 [ 345.495944][T12467] total_swapcached 1556480 [ 345.500447][T12467] total_pgpgin 281160 [ 345.509815][T12467] total_pgpgout 281140 [ 345.517587][T12467] total_pgfault 288355 [ 345.522248][T12467] total_pgmajfault 287 [ 345.526503][T12467] total_inactive_anon 81920 [ 345.531247][T12467] total_active_anon 0 [ 345.535314][T12467] total_inactive_file 0 [ 345.539589][T12467] total_active_file 0 [ 345.543888][T12467] total_unevictable 0 [ 345.547949][T12467] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1765,pid=12466,uid=0 [ 345.563547][T12467] Memory cgroup out of memory: Killed process 12466 (syz.2.1765) total-vm:96344kB, anon-rss:1228kB, file-rss:22396kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 345.674583][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.688069][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.078944][T12508] loop3: detected capacity change from 0 to 8192 [ 346.162136][T12514] loop3: detected capacity change from 0 to 512 [ 346.192653][T12514] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.205730][T12514] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 346.235487][T12514] FAULT_INJECTION: forcing a failure. [ 346.235487][T12514] name failslab, interval 1, probability 0, space 0, times 0 [ 346.257222][T12521] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1773'. [ 346.266639][T12514] CPU: 0 UID: 0 PID: 12514 Comm: syz.3.1772 Tainted: G W syzkaller #0 PREEMPT(full) [ 346.266797][T12514] Tainted: [W]=WARN [ 346.266805][T12514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.266817][T12514] Call Trace: [ 346.266825][T12514] [ 346.266833][T12514] __dump_stack+0x1d/0x30 [ 346.266862][T12514] dump_stack_lvl+0x95/0xd0 [ 346.266942][T12514] dump_stack+0x15/0x1b [ 346.267035][T12514] should_fail_ex+0x263/0x280 [ 346.267068][T12514] should_failslab+0x8c/0xb0 [ 346.267096][T12514] __kmalloc_noprof+0xb8/0x4e0 [ 346.267125][T12514] ? find_tree_dqentry+0x3e/0x8c0 [ 346.267201][T12514] find_tree_dqentry+0x3e/0x8c0 [ 346.267231][T12514] ? __brelse+0x32/0x60 [ 346.267262][T12514] ? from_kuid+0x151/0x340 [ 346.267323][T12514] ? ext4_quota_read+0x22b/0x260 [ 346.267362][T12514] find_tree_dqentry+0x4c9/0x8c0 [ 346.267397][T12514] qtree_read_dquot+0x35c/0x4a0 [ 346.267431][T12514] v2_read_dquot+0x97/0xd0 [ 346.267484][T12514] dquot_acquire+0xcd/0x2b0 [ 346.267515][T12514] ext4_acquire_dquot+0x15f/0x200 [ 346.267550][T12514] dqget+0x527/0x8c0 [ 346.267585][T12514] __dquot_initialize+0x27f/0x7c0 [ 346.267758][T12514] ? _raw_spin_unlock+0x9/0x30 [ 346.267793][T12514] ? d_splice_alias_ops+0xdc/0x320 [ 346.267838][T12514] dquot_initialize+0x1a/0x30 [ 346.267969][T12514] ext4_create+0x49/0x2f0 [ 346.268013][T12514] ? __pfx_ext4_create+0x10/0x10 [ 346.268053][T12514] path_openat+0xd75/0x2050 [ 346.268100][T12514] do_file_open+0x16c/0x290 [ 346.268145][T12514] do_sys_openat2+0x94/0x130 [ 346.268185][T12514] __x64_sys_openat+0xf2/0x120 [ 346.268218][T12514] x64_sys_call+0x1e39/0x3020 [ 346.268253][T12514] do_syscall_64+0x12c/0x370 [ 346.268306][T12514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.268329][T12514] RIP: 0033:0x7f7faffdc799 [ 346.268422][T12514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.268461][T12514] RSP: 002b:00007f7faea2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 346.268484][T12514] RAX: ffffffffffffffda RBX: 00007f7fb0255fa0 RCX: 00007f7faffdc799 [ 346.268503][T12514] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 346.268522][T12514] RBP: 00007f7faea2f090 R08: 0000000000000000 R09: 0000000000000000 [ 346.268580][T12514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.268594][T12514] R13: 00007f7fb0256038 R14: 00007f7fb0255fa0 R15: 00007ffcb7be8138 [ 346.268637][T12514] [ 346.268649][T12514] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 346.541466][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1776'. [ 346.550506][T12525] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1776'. [ 346.553881][T12514] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.1772: Failed to acquire dquot type 0 [ 346.592530][T12525] netlink: 'syz.8.1776': attribute type 10 has an invalid length. [ 346.603288][T12514] EXT4-fs (loop3): Remounting filesystem read-only [ 346.620903][T12525] team0: Device netdevsim1 is up. Set it down before adding it as a team port [ 346.660893][ T28] audit: type=1400 audit(1774335918.946:2568): avc: denied { create } for pid=12522 comm="syz.2.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 346.691257][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.881926][T12563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.902043][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1784'. [ 346.932669][T12563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.004098][T12577] netlink: 'syz.3.1786': attribute type 29 has an invalid length. [ 347.021719][T12577] netlink: 'syz.3.1786': attribute type 29 has an invalid length. [ 347.031527][T12577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2590 sclass=netlink_route_socket pid=12577 comm=syz.3.1786 [ 347.153842][T12558] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 347.392257][T12582] syzkaller0: entered promiscuous mode [ 347.406051][T12582] syzkaller0: entered allmulticast mode [ 347.566190][T12611] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1793'. [ 347.590462][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1793'. [ 347.618405][T12614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1794'. [ 347.671057][T12617] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1795'. [ 347.737859][T12621] loop8: detected capacity change from 0 to 128 [ 347.751117][T12621] msdos: Unknown parameter '' [ 347.848939][T12608] syzkaller0: entered promiscuous mode [ 347.854768][T12608] syzkaller0: entered allmulticast mode [ 347.865674][T12608] tipc: Enabled bearer , priority 0 [ 347.886838][T12607] tipc: Resetting bearer [ 347.903650][T12607] tipc: Disabling bearer [ 348.012892][T12628] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 348.150152][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.164265][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.192886][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1799'. [ 348.220911][T12643] usb usb8: usbfs: interface 0 claimed by hub while 'syz.6.1799' sets config #0 [ 348.471841][T12657] loop3: detected capacity change from 0 to 128 [ 348.510887][ T28] audit: type=1400 audit(1774335920.796:2569): avc: denied { read } for pid=12656 comm="syz.3.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.592359][T12672] loop6: detected capacity change from 0 to 1024 [ 348.612106][T12672] EXT4-fs: Ignoring removed mblk_io_submit option [ 348.647416][T12667] syzkaller0: entered promiscuous mode [ 348.658397][T12667] syzkaller0: entered allmulticast mode [ 348.666805][T12672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.687975][T12672] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.744836][T12693] loop8: detected capacity change from 0 to 1024 [ 348.754374][T12693] EXT4-fs (loop8): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 348.773787][ T9307] udevd[9307]: incorrect ext4 checksum on /dev/loop8 [ 348.798701][ T9307] udevd[9307]: incorrect ext4 checksum on /dev/loop8 [ 348.818543][T12701] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1807'. [ 348.861953][T12704] loop8: detected capacity change from 0 to 1024 [ 348.919503][T12704] syzkaller0: entered promiscuous mode [ 348.946926][T12704] syzkaller0: entered allmulticast mode [ 348.978784][ T28] audit: type=1326 audit(1774335921.266:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 349.006509][T12715] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 349.045791][ T28] audit: type=1326 audit(1774335921.266:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 349.076531][ T28] audit: type=1326 audit(1774335921.266:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 349.102889][ T28] audit: type=1326 audit(1774335921.296:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 349.126727][ T28] audit: type=1326 audit(1774335921.296:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 349.153045][ T28] audit: type=1326 audit(1774335921.296:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 349.193062][ T28] audit: type=1326 audit(1774335921.296:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12714 comm="syz.6.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 350.122071][T12737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1364 sclass=netlink_route_socket pid=12737 comm=syz.2.1813 [ 350.319652][T12749] loop8: detected capacity change from 0 to 256 [ 350.894818][T12779] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 351.095502][T12757] loop8: detected capacity change from 0 to 1024 [ 351.124567][T12757] EXT4-fs: Ignoring removed orlov option [ 351.152171][T12757] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 351.153217][T12796] loop6: detected capacity change from 0 to 1024 [ 351.197386][T12796] syzkaller0: entered promiscuous mode [ 351.203951][T12796] syzkaller0: entered allmulticast mode [ 351.369045][T12815] loop3: detected capacity change from 0 to 4096 [ 351.383969][T12757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.407082][T12815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.492941][T12823] loop2: detected capacity change from 0 to 256 [ 351.967842][T12823] FAT-fs (loop2): Directory bread(block 64) failed [ 351.974490][T12823] FAT-fs (loop2): Directory bread(block 65) failed [ 351.981272][T12823] FAT-fs (loop2): Directory bread(block 66) failed [ 351.987986][T12823] FAT-fs (loop2): Directory bread(block 67) failed [ 351.994658][T12823] FAT-fs (loop2): Directory bread(block 68) failed [ 352.001448][T12823] FAT-fs (loop2): Directory bread(block 69) failed [ 352.008330][T12823] FAT-fs (loop2): Directory bread(block 70) failed [ 352.014952][T12823] FAT-fs (loop2): Directory bread(block 71) failed [ 352.021618][T12823] FAT-fs (loop2): Directory bread(block 72) failed [ 352.028249][T12823] FAT-fs (loop2): Directory bread(block 73) failed [ 352.901182][T12831] netlink: 'syz.3.1827': attribute type 21 has an invalid length. [ 352.909245][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 352.909264][ T28] audit: type=1400 audit(1774335925.196:2595): avc: denied { watch watch_reads } for pid=12811 comm="syz.3.1827" path="/353/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 353.398343][T12831] __nla_validate_parse: 2 callbacks suppressed [ 353.398359][T12831] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1827'. [ 353.673158][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.722746][T12819] bond0: (slave geneve3): Releasing active interface [ 353.736534][T12819] team0: Port device bridge3 removed [ 353.752868][T10272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.868895][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.912594][T12840] syzkaller0: entered promiscuous mode [ 353.936731][T12840] syzkaller0: entered allmulticast mode [ 354.016895][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1832'. [ 354.035144][T12860] veth1_macvtap: left promiscuous mode [ 354.175226][ T28] audit: type=1400 audit(1774335926.466:2596): avc: denied { create } for pid=12875 comm="syz.6.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 354.327363][T12880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.386777][T12880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.488027][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.727395][T12915] syzkaller0: entered promiscuous mode [ 354.733234][T12915] syzkaller0: entered allmulticast mode [ 354.750231][T12924] wg2: Caught tx_queue_len zero misconfig [ 355.029523][T12959] lo speed is unknown, defaulting to 1000 [ 355.100863][T12988] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1852'. [ 355.729190][T13010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 355.809544][T13013] syzkaller0: entered promiscuous mode [ 355.815172][T13013] syzkaller0: entered allmulticast mode [ 355.906035][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.917316][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.233860][T13044] loop2: detected capacity change from 0 to 512 [ 356.243915][T13044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 356.260982][T13044] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1862: iget: bad i_size value: 38620345925642 [ 356.274174][T13044] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 356.274371][T13044] EXT4-fs (loop2): Remounting filesystem read-only [ 356.283599][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 356.283626][ C1] EXT4-fs (loop2): initial error at time 1774335928: ext4_orphan_get:1391: inode 15 [ 356.283664][ C1] EXT4-fs (loop2): last error at time 1774335928: ext4_orphan_get:1391: inode 15 [ 356.316288][T13044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.338387][T13049] loop8: detected capacity change from 0 to 256 [ 356.387095][T13049] FAT-fs (loop8): Directory bread(block 64) failed [ 356.393897][T13049] FAT-fs (loop8): Directory bread(block 65) failed [ 356.400489][T13049] FAT-fs (loop8): Directory bread(block 66) failed [ 356.407384][T13049] FAT-fs (loop8): Directory bread(block 67) failed [ 356.414052][T13049] FAT-fs (loop8): Directory bread(block 68) failed [ 356.420653][T13049] FAT-fs (loop8): Directory bread(block 69) failed [ 356.427445][T13049] FAT-fs (loop8): Directory bread(block 70) failed [ 356.434008][T13049] FAT-fs (loop8): Directory bread(block 71) failed [ 356.440667][T13049] FAT-fs (loop8): Directory bread(block 72) failed [ 356.447446][T13049] FAT-fs (loop8): Directory bread(block 73) failed [ 356.539866][T13049] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.755269][T13055] loop6: detected capacity change from 0 to 128 [ 356.798984][T13055] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 356.882181][T13055] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.011567][T13055] netlink: 'syz.6.1864': attribute type 1 has an invalid length. [ 357.096414][T13055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.173388][T13059] bond1: (slave geneve3): making interface the new active one [ 357.208649][T13059] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 357.290431][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.337853][ T3820] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 357.467683][T13099] tmpfs: Bad value for 'mpol' [ 358.106182][T13109] syzkaller0: entered promiscuous mode [ 358.142092][T13109] syzkaller0: entered allmulticast mode [ 358.217746][T13137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1870'. [ 359.013666][T13167] lo speed is unknown, defaulting to 1000 [ 359.260936][T13167] chnl_net:caif_netlink_parms(): no params data found [ 359.402047][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.409325][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.420107][T13167] bridge_slave_0: entered allmulticast mode [ 359.436058][T13167] bridge_slave_0: entered promiscuous mode [ 359.443899][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.451193][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.458478][T13167] bridge_slave_1: entered allmulticast mode [ 359.465361][T13167] bridge_slave_1: entered promiscuous mode [ 359.506260][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.517374][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.545565][T13311] loop8: detected capacity change from 0 to 1024 [ 359.548827][T13167] team0: Port device team_slave_0 added [ 359.566820][T13311] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 359.583946][T13311] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 359.592724][T13311] EXT4-fs (loop8): orphan cleanup on readonly fs [ 359.599165][T13311] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.1878: Freeing blocks not in datazone - block = 0, count = 4096 [ 359.615421][T13311] loop8: lost filesystem error report for type 5 error -117 [ 359.615717][T13311] EXT4-fs (loop8): 1 orphan inode deleted [ 359.623152][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 359.623197][ C1] EXT4-fs (loop8): initial error at time 1774335931: ext4_free_blocks:6724 [ 359.623227][ C1] EXT4-fs (loop8): last error at time 1774335931: ext4_free_blocks:6724 [ 359.653463][T13311] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 359.691869][T13167] team0: Port device team_slave_1 added [ 359.745797][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.796351][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.828983][T13349] loop2: detected capacity change from 0 to 1024 [ 359.836436][T13349] EXT4-fs: test_dummy_encryption option not supported [ 359.858407][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.870143][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.877475][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.906949][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.047640][T13167] hsr_slave_0: entered promiscuous mode [ 360.053921][T13167] hsr_slave_1: entered promiscuous mode [ 360.059920][T13167] debugfs: 'hsr0' already exists in 'hsr' [ 360.085692][T13167] Cannot create hsr debugfs directory [ 360.250398][T13380] loop2: detected capacity change from 0 to 512 [ 360.370401][T13380] EXT4-fs (loop2): 1 orphan inode deleted [ 360.388078][T13380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.409012][T13380] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.446966][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 360.573486][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:1: Failed to release dquot type 1 [ 360.589842][T13393] loop6: detected capacity change from 0 to 1024 [ 360.663751][T13393] EXT4-fs: test_dummy_encryption option not supported [ 360.716763][T13393] netlink: 4348 bytes leftover after parsing attributes in process `syz.6.1881'. [ 360.766624][T13393] netlink: 4348 bytes leftover after parsing attributes in process `syz.6.1881'. [ 360.791712][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.081854][T13469] loop6: detected capacity change from 0 to 512 [ 361.132914][T13469] EXT4-fs (loop6): 1 orphan inode deleted [ 361.145404][T13469] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.161813][T13469] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 361.196111][ T12] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 361.219926][T13167] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 361.274806][ T12] EXT4-fs error (device loop6): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 1 [ 361.306451][T13167] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 361.364986][T13167] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 361.396793][T13167] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 361.595768][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.619581][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.642753][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.650374][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.720071][T13167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 361.763771][T13167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 361.775302][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.786933][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.794099][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.857329][T13506] lo speed is unknown, defaulting to 1000 [ 361.947827][T13167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.985808][ T28] audit: type=1400 audit(1774335934.276:2597): avc: denied { connect } for pid=13504 comm="syz.8.1887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.053457][T13546] loop3: detected capacity change from 0 to 2048 [ 362.072921][T13546] msdos: Unknown parameter '0x0000000000000000' [ 362.117241][T13546] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1889'. [ 362.310243][T13167] veth0_vlan: entered promiscuous mode [ 362.334422][T13167] veth1_vlan: entered promiscuous mode [ 362.378212][T13167] veth0_macvtap: entered promiscuous mode [ 362.404197][T13167] veth1_macvtap: entered promiscuous mode [ 362.437343][T13167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.464547][T13167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.495758][T11166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.516526][T11166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.545818][T11166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.590738][T11166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.734804][T13572] loop9: detected capacity change from 0 to 512 [ 362.776599][T13572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.868985][T13572] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.880307][ T28] audit: type=1400 audit(1774335935.176:2598): avc: denied { create } for pid=13571 comm="syz.9.1876" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 362.902745][T13572] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1876: corrupted inode contents [ 362.917316][T13572] EXT4-fs error (device loop9): ext4_dirty_inode:6450: inode #2: comm syz.9.1876: mark_inode_dirty error [ 362.931367][T13572] EXT4-fs error (device loop9): ext4_do_update_inode:5569: inode #2: comm syz.9.1876: corrupted inode contents [ 362.982939][T13572] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.1876: mark_inode_dirty error [ 363.071100][T13572] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.190229][T13589] vlan0: entered promiscuous mode [ 363.376439][T13598] loop3: detected capacity change from 0 to 256 [ 363.386814][T13601] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.393998][T13601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.457904][T13574] loop2: detected capacity change from 0 to 512 [ 363.481904][T13607] program syz.3.1900 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.494220][T13608] loop3: detected capacity change from 0 to 128 [ 363.513307][T13614] xt_hashlimit: size too large, truncated to 1048576 [ 363.520805][ T28] audit: type=1400 audit(1774335935.806:2599): avc: denied { remount } for pid=13606 comm="syz.3.1900" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 363.570802][T13607] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1900'. [ 363.588310][T13608] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1900'. [ 363.600968][T13609] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1900'. [ 363.613552][T13574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 363.663296][T13574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 363.674614][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.676588][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.788626][T13574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 363.817505][T13574] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 363.850152][T13574] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 363.873709][T13574] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #13: comm syz.2.1892: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 363.912014][T13574] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 363.913035][T13574] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1892: couldn't read orphan inode 13 (err -117) [ 363.922815][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 363.922875][ C1] EXT4-fs (loop2): last error at time 1774335936: ext4_ext_check_inode:521: inode 13 [ 363.956172][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1904'. [ 363.970983][T13574] loop2: lost filesystem error report for type 5 error -117 [ 363.994120][T13574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 364.123150][T13646] loop9: detected capacity change from 0 to 128 [ 364.148119][ T28] audit: type=1400 audit(1774335936.436:2600): avc: denied { unmount } for pid=13645 comm="syz.9.1906" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 364.334387][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.344669][ T28] audit: type=1400 audit(1774335936.606:2601): avc: denied { cmd } for pid=13649 comm="syz.8.1907" path="socket:[47551]" dev="sockfs" ino=47551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 364.537379][ T28] audit: type=1400 audit(1774335936.826:2602): avc: denied { read } for pid=13664 comm="syz.2.1911" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 364.575664][T13667] usb usb7: usbfs: process 13667 (syz.2.1911) did not claim interface 0 before use [ 364.585252][ T28] audit: type=1400 audit(1774335936.826:2603): avc: denied { open } for pid=13664 comm="syz.2.1911" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 364.601302][T13662] lo speed is unknown, defaulting to 1000 [ 365.014408][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.085368][T13694] loop6: detected capacity change from 0 to 1024 [ 365.106439][T13680] loop3: detected capacity change from 0 to 4096 [ 365.139008][T13694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.187226][T13680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.203494][T13694] EXT4-fs error (device loop6): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.6.1915: path /332/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 365.282337][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.337662][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.378426][T13720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.391778][T13720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.657779][T13741] loop2: detected capacity change from 0 to 1024 [ 366.661866][T13763] netlink: 'syz.8.1926': attribute type 10 has an invalid length. [ 366.704211][T13741] EXT4-fs: Ignoring removed orlov option [ 366.708051][T13763] team0: Port device vxcan1 added [ 366.836788][T13741] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 366.944300][T13741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.417963][T13762] loop3: detected capacity change from 0 to 512 [ 367.449844][T13762] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 367.573528][T13778] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.688085][T13776] lo speed is unknown, defaulting to 1000 [ 367.745077][T13762] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 367.786700][T13762] EXT4-fs (loop3): orphan cleanup on readonly fs [ 367.850162][T13762] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 367.971720][T13762] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 368.026650][T13762] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.1927: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 368.143464][T13762] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 368.149493][T13762] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1927: couldn't read orphan inode 13 (err -117) [ 368.159158][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 368.159269][ C0] EXT4-fs (loop3): last error at time 1774335940: ext4_ext_check_inode:521: inode 13 [ 368.314299][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.423135][T13762] loop3: lost filesystem error report for type 5 error -117 [ 368.556595][T13762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 370.702271][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.712064][ T3423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.460839][T13828] loop6: detected capacity change from 0 to 4096 [ 371.572884][T13828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.605297][T13841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1934'. [ 371.626760][T13845] loop8: detected capacity change from 0 to 1024 [ 371.632599][T13841] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 371.737657][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.764792][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.910156][T13868] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 371.916297][T13868] syzkaller0: linktype set to 769 [ 371.954098][T13876] lo speed is unknown, defaulting to 1000 [ 372.070768][T13907] loop8: detected capacity change from 0 to 128 [ 372.154742][T13876] lo speed is unknown, defaulting to 1000 [ 372.196822][T13922] loop3: detected capacity change from 0 to 128 [ 372.212186][T13911] loop6: detected capacity change from 0 to 8192 [ 372.220131][T13907] syz.8.1945: attempt to access beyond end of device [ 372.220131][T13907] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 372.235007][T13907] syz.8.1945: attempt to access beyond end of device [ 372.235007][T13907] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 372.248787][T13907] syz.8.1945: attempt to access beyond end of device [ 372.248787][T13907] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 372.263157][T13911] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 372.274683][T13907] syz.8.1945: attempt to access beyond end of device [ 372.274683][T13907] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 372.292455][T13907] syz.8.1945: attempt to access beyond end of device [ 372.292455][T13907] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 372.307059][T13907] syz.8.1945: attempt to access beyond end of device [ 372.307059][T13907] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 372.324989][T13907] syz.8.1945: attempt to access beyond end of device [ 372.324989][T13907] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 372.338919][T13907] syz.8.1945: attempt to access beyond end of device [ 372.338919][T13907] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 372.354538][ T28] audit: type=1400 audit(1774335944.646:2604): avc: denied { write } for pid=13910 comm="syz.6.1946" path="socket:[50899]" dev="sockfs" ino=50899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 372.383625][T13907] syz.8.1945: attempt to access beyond end of device [ 372.383625][T13907] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 372.396685][T13911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=28861 sclass=netlink_route_socket pid=13911 comm=syz.6.1946 [ 372.398069][ T28] audit: type=1400 audit(1774335944.676:2605): avc: denied { mount } for pid=13910 comm="syz.6.1946" name="/" dev="hugetlbfs" ino=50900 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 372.433957][T13907] syz.8.1945: attempt to access beyond end of device [ 372.433957][T13907] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 372.577600][T13955] loop6: detected capacity change from 0 to 256 [ 372.627933][T13921] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 372.664996][ T28] audit: type=1400 audit(1774335944.956:2606): avc: denied { connect } for pid=13960 comm="syz.6.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 372.853825][T13971] lo speed is unknown, defaulting to 1000 [ 372.913374][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 372.930830][T13986] loop6: detected capacity change from 0 to 128 [ 373.115338][T13978] lo speed is unknown, defaulting to 1000 [ 373.135215][T14018] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1961'. [ 373.159422][T14021] loop8: detected capacity change from 0 to 512 [ 373.186347][T14021] FAT-fs (loop8): Directory bread(block 199916) failed [ 373.205858][T14021] FAT-fs (loop8): Directory bread(block 199917) failed [ 373.221067][T14021] FAT-fs (loop8): Directory bread(block 199918) failed [ 373.238256][T14021] FAT-fs (loop8): Directory bread(block 199919) failed [ 373.253275][T14021] FAT-fs (loop8): Directory bread(block 199920) failed [ 373.269876][T14021] FAT-fs (loop8): Directory bread(block 199921) failed [ 373.284386][T14021] FAT-fs (loop8): Directory bread(block 199922) failed [ 373.298968][T14021] FAT-fs (loop8): Directory bread(block 199923) failed [ 373.994324][T14092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 374.100377][T14092] loop8: detected capacity change from 0 to 1024 [ 374.146012][T14098] loop2: detected capacity change from 0 to 4096 [ 374.162353][T14092] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 374.189928][T14092] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 374.200172][T14098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.210879][T14092] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 374.230886][T14092] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 374.240079][T14092] EXT4-fs (loop8): filesystem has both journal inode and journal device! [ 374.261696][T14098] netlink: 'syz.2.1973': attribute type 21 has an invalid length. [ 374.280240][T14098] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1973'. [ 374.295647][ T28] audit: type=1400 audit(1774335946.586:2607): avc: denied { read } for pid=14097 comm="syz.2.1973" path="socket:[50170]" dev="sockfs" ino=50170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.456272][T14115] wireguard0: entered promiscuous mode [ 374.474204][T14115] wireguard0: entered allmulticast mode [ 374.521703][ T28] audit: type=1400 audit(1774335946.816:2608): avc: denied { listen } for pid=14097 comm="syz.2.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.558429][ T28] audit: type=1400 audit(1774335946.816:2609): avc: denied { accept } for pid=14097 comm="syz.2.1973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.766837][T14134] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1977'. [ 374.788174][T14105] loop6: detected capacity change from 0 to 1024 [ 374.845801][T14105] EXT4-fs: Ignoring removed orlov option [ 374.888739][T14105] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 374.946711][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.994881][T14105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.171831][T14155] syz.3.1981 (14155): /proc/14154/oom_adj is deprecated, please use /proc/14154/oom_score_adj instead. [ 375.210632][ T28] audit: type=1400 audit(1774335947.496:2610): avc: denied { bind } for pid=14154 comm="syz.3.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.449561][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.556100][T14171] lo speed is unknown, defaulting to 1000 [ 375.819854][T14210] loop3: detected capacity change from 0 to 512 [ 375.965616][T14219] loop3: detected capacity change from 0 to 4096 [ 376.022332][T14219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.060441][T14219] xt_hashlimit: overflow, rate too high: 0 [ 376.111285][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.159313][ T1033] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 376.168799][ T1033] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 376.425590][T14253] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1997'. [ 376.435215][T14238] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1994'. [ 376.535562][T14238] bond3 (unregistering): Released all slaves [ 376.571584][T14296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.601126][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 376.651150][T14292] lo speed is unknown, defaulting to 1000 [ 376.667146][ T28] audit: type=1326 audit(1774860236.945:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14295 comm="syz.6.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 376.693974][T14329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1999'. [ 376.705372][ T28] audit: type=1326 audit(1774860236.945:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14295 comm="syz.6.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 376.710898][ C0] Adjusting tsc more than 11% (6668950 vs 8464875) [ 376.729866][ T28] audit: type=1326 audit(1774860236.945:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14295 comm="syz.6.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 376.987823][T14346] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2002'. [ 377.410108][T14346] loop3: detected capacity change from 0 to 8192 [ 377.587000][T14346] loop3: p1 < > p2 p4 < p5 > [ 377.603011][T14346] loop3: partition table partially beyond EOD, truncated [ 377.627938][T14346] loop3: p1 start 134217728 is beyond EOD, truncated [ 377.644594][T14346] loop3: p2 size 591360 extends beyond EOD, truncated [ 377.663824][T14346] loop3: p5 size 591360 extends beyond EOD, truncated [ 378.158442][T14404] macvtap1: entered promiscuous mode [ 378.166186][T14404] macvtap1: entered allmulticast mode [ 378.172721][T14404] batadv0: entered promiscuous mode [ 378.179141][T14404] batadv0: entered allmulticast mode [ 378.189237][T14404] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 378.197498][T14404] team0: Device macvtap1 failed to register rx_handler [ 378.218482][T14404] batadv0: left allmulticast mode [ 378.230250][T14404] batadv0: left promiscuous mode [ 378.398121][T14426] loop2: detected capacity change from 0 to 512 [ 378.561555][T14426] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2013: invalid indirect mapped block 256 (level 2) [ 378.597480][T14426] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 378.604675][T14426] EXT4-fs (loop2): 2 truncates cleaned up [ 378.613999][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 378.614026][ C1] EXT4-fs (loop2): initial error at time 1774860238: ext4_free_branches:1023: inode 11 [ 378.614073][ C1] EXT4-fs (loop2): last error at time 1774860238: ext4_free_branches:1023: inode 11 [ 378.657665][T14426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.754834][T14438] bridge_slave_0: left allmulticast mode [ 378.760623][T14438] bridge_slave_0: left promiscuous mode [ 378.766619][T14438] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.020272][T14438] bridge_slave_1: left allmulticast mode [ 379.026190][T14438] bridge_slave_1: left promiscuous mode [ 379.032048][T14438] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.204092][T14438] bond0: (slave bond_slave_0): Releasing backup interface [ 379.219904][T14438] bond0: (slave bond_slave_1): Releasing backup interface [ 379.259279][T14426] autofs4:pid:14426:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 379.464529][T14438] team0: Port device team_slave_0 removed [ 379.542078][T14426] autofs4:pid:14426:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 379.675114][T14438] team0: Port device team_slave_1 removed [ 379.685247][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.692752][T14438] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.704337][T14438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.711831][T14438] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.724610][T14438] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 380.086916][T14426] IPVS: set_ctl: invalid protocol: 4 100.1.1.1:20004 [ 380.502146][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.626336][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 380.626354][ T28] audit: type=1400 audit(1774860240.494:2632): avc: denied { ioctl } for pid=14450 comm="syz.8.2017" path="socket:[51508]" dev="sockfs" ino=51508 ioctlcmd=0x5875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 380.938610][T14458] netlink: 'syz.6.2019': attribute type 10 has an invalid length. [ 381.214656][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.278221][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.310982][T14473] macvtap1: entered promiscuous mode [ 381.316334][T14473] macvtap1: entered allmulticast mode [ 381.330863][T14473] batadv0: entered promiscuous mode [ 381.337440][T14473] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 381.338293][ T28] audit: type=1326 audit(1774860241.235:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.345647][T14473] team0: Device macvtap1 failed to register rx_handler [ 381.381885][T14473] batadv0: left promiscuous mode [ 381.540408][ T28] audit: type=1326 audit(1774860241.274:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.581177][ T28] audit: type=1326 audit(1774860241.274:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.608068][ T28] audit: type=1326 audit(1774860241.274:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.628525][T14485] loop8: detected capacity change from 0 to 4096 [ 381.634019][ T28] audit: type=1326 audit(1774860241.274:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.680195][T14485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.762667][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.772489][ T28] audit: type=1326 audit(1774860241.274:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.824519][ T28] audit: type=1326 audit(1774860241.274:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.867607][ T28] audit: type=1326 audit(1774860241.274:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.891933][ T28] audit: type=1326 audit(1774860241.274:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14469 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10052dc799 code=0x7ffc0000 [ 381.937015][T14500] netlink: 'syz.8.2026': attribute type 4 has an invalid length. [ 382.046446][T14509] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2030'. [ 382.134714][T14512] lo speed is unknown, defaulting to 1000 [ 382.176802][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2029'. [ 382.176806][T14521] loop3: detected capacity change from 0 to 512 [ 382.210629][T14521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.242670][T14521] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.277532][T14523] lo speed is unknown, defaulting to 1000 [ 382.296251][T14516] netlink: 'syz.8.2026': attribute type 4 has an invalid length. [ 382.327947][T14532] loop2: detected capacity change from 0 to 128 [ 382.418183][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.819214][T14559] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 383.053262][T14590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2039'. [ 383.178219][T14618] loop2: detected capacity change from 0 to 512 [ 383.220958][T14618] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 383.239265][T14618] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #13: comm syz.2.2042: iget: bad i_size value: 12154757448730 [ 383.262399][T14618] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 383.262745][T14618] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2042: couldn't read orphan inode 13 (err -117) [ 383.272023][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 383.272048][ C0] EXT4-fs (loop2): initial error at time 1774860243: ext4_orphan_get:1391: inode 13 [ 383.272083][ C0] EXT4-fs (loop2): last error at time 1774860243: ext4_orphan_get:1391: inode 13 [ 383.327543][T14618] loop2: lost filesystem error report for type 5 error -117 [ 384.619608][T14618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.647227][T14588] loop6: detected capacity change from 0 to 1024 [ 385.650523][T14631] loop8: detected capacity change from 0 to 256 [ 385.752079][T14632] loop3: detected capacity change from 0 to 256 [ 387.065402][T14618] EXT4-fs warning (device loop2): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 387.118227][T14631] FAT-fs (loop8): Directory bread(block 64) failed [ 387.124851][T14631] FAT-fs (loop8): Directory bread(block 65) failed [ 387.131599][T14631] FAT-fs (loop8): Directory bread(block 66) failed [ 387.138246][T14631] FAT-fs (loop8): Directory bread(block 67) failed [ 387.144794][T14631] FAT-fs (loop8): Directory bread(block 68) failed [ 387.151503][T14631] FAT-fs (loop8): Directory bread(block 69) failed [ 387.158125][T14631] FAT-fs (loop8): Directory bread(block 70) failed [ 387.164905][T14631] FAT-fs (loop8): Directory bread(block 71) failed [ 387.171505][T14631] FAT-fs (loop8): Directory bread(block 72) failed [ 387.178148][T14631] FAT-fs (loop8): Directory bread(block 73) failed [ 387.494025][T14437] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 387.724102][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 387.724134][ T28] audit: type=1400 audit(1774860247.494:2671): avc: denied { ioctl } for pid=14650 comm="syz.3.2048" path="socket:[53476]" dev="sockfs" ino=53476 ioctlcmd=0x583d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 387.784552][T14664] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 387.957221][ T28] audit: type=1400 audit(1774860247.554:2672): avc: denied { mac_admin } for pid=14662 comm="syz.8.2047" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 387.994657][T14667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2042'. [ 388.014033][ T28] audit: type=1400 audit(1774860247.594:2673): avc: denied { shutdown } for pid=14650 comm="syz.3.2048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 388.054168][T14651] wireguard0: entered promiscuous mode [ 388.059729][T14651] wireguard0: entered allmulticast mode [ 388.075842][T14670] loop3: detected capacity change from 0 to 1024 [ 388.099941][ T28] audit: type=1400 audit(1774860247.653:2674): avc: denied { relabelto } for pid=14662 comm="syz.8.2047" name="cgroup.procs" dev="cgroup" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 388.120699][T14670] netlink: 'syz.3.2049': attribute type 16 has an invalid length. [ 388.135486][ T28] audit: type=1400 audit(1774860247.653:2675): avc: denied { associate } for pid=14662 comm="syz.8.2047" name="cgroup.procs" dev="cgroup" ino=690 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:netutils_exec_t:s0" [ 388.154751][T14670] netlink: 572 bytes leftover after parsing attributes in process `syz.3.2049'. [ 388.196220][T14653] lo speed is unknown, defaulting to 1000 [ 388.551104][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.587830][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2047'. [ 388.622332][T14711] loop3: detected capacity change from 0 to 512 [ 388.632913][T14707] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 388.669955][T14711] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2052: invalid indirect mapped block 256 (level 2) [ 388.703684][T14716] lo speed is unknown, defaulting to 1000 [ 388.797735][T14711] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 388.798116][T14711] EXT4-fs (loop3): 2 truncates cleaned up [ 388.798539][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 388.819593][ C0] EXT4-fs (loop3): initial error at time 1774860248: ext4_free_branches:1023: inode 11 [ 388.829322][ C0] EXT4-fs (loop3): last error at time 1774860248: ext4_free_branches:1023: inode 11 [ 388.841139][T14711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.859897][T14730] loop2: detected capacity change from 0 to 128 [ 388.940783][T14711] autofs4:pid:14711:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 388.977405][T14711] autofs4:pid:14711:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 389.125403][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.157032][T14736] lo speed is unknown, defaulting to 1000 [ 389.213847][ T28] audit: type=1326 audit(1774860248.965:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.6.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 389.225079][T14730] syz.2.2051 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 389.301330][T14730] CPU: 1 UID: 0 PID: 14730 Comm: syz.2.2051 Tainted: G W syzkaller #0 PREEMPT(full) [ 389.301371][T14730] Tainted: [W]=WARN [ 389.301397][T14730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 389.301416][T14730] Call Trace: [ 389.301426][T14730] [ 389.301437][T14730] __dump_stack+0x1d/0x30 [ 389.301473][T14730] dump_stack_lvl+0x95/0xd0 [ 389.301499][T14730] dump_stack+0x15/0x1b [ 389.301522][T14730] dump_header+0x80/0x240 [ 389.301575][T14730] oom_kill_process+0x295/0x350 [ 389.301668][T14730] out_of_memory+0x97d/0xb80 [ 389.301701][T14730] try_charge_memcg+0x62e/0xa10 [ 389.301751][T14730] obj_cgroup_charge_pages+0x23/0xc0 [ 389.301831][T14730] __memcg_kmem_charge_page+0x9e/0x170 [ 389.301901][T14730] __alloc_frozen_pages_noprof+0x18a/0x360 [ 389.301947][T14730] alloc_pages_mpol+0xb3/0x260 [ 389.301992][T14730] alloc_pages_noprof+0x8f/0x130 [ 389.302036][T14730] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 389.302078][T14730] __kvmalloc_node_noprof+0x3d4/0x650 [ 389.302140][T14730] ? futex_hash_allocate+0x190/0x9d0 [ 389.302210][T14730] ? futex_hash_allocate+0x190/0x9d0 [ 389.302298][T14730] futex_hash_allocate+0x190/0x9d0 [ 389.302391][T14730] ? cap_task_prctl+0x13f/0x6e0 [ 389.302458][T14730] futex_hash_prctl+0xd8/0xf0 [ 389.302498][T14730] __se_sys_prctl+0xa3d/0x13f0 [ 389.302548][T14730] __x64_sys_prctl+0x67/0x80 [ 389.302585][T14730] x64_sys_call+0x2533/0x3020 [ 389.302693][T14730] do_syscall_64+0x12c/0x370 [ 389.302721][T14730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.302819][T14730] RIP: 0033:0x7f2816dfc799 [ 389.302841][T14730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.302891][T14730] RSP: 002b:00007f2815815028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 389.302918][T14730] RAX: ffffffffffffffda RBX: 00007f2817076180 RCX: 00007f2816dfc799 [ 389.302984][T14730] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 389.302998][T14730] RBP: 00007f2816e92c99 R08: 0000000000000000 R09: 0000000000000000 [ 389.303012][T14730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.303027][T14730] R13: 00007f2817076218 R14: 00007f2817076180 R15: 00007fff02d25ac8 [ 389.303055][T14730] [ 389.303065][T14730] memory: usage 229976kB, limit 307200kB, failcnt 1779 [ 389.462777][ T28] audit: type=1326 audit(1774860248.965:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.6.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 389.566502][T14730] memory+swap: usage 230948kB, limit 9007199254740988kB, failcnt 0 [ 389.635974][ T28] audit: type=1326 audit(1774860248.965:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.6.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 389.660512][ T28] audit: type=1326 audit(1774860248.965:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.6.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 389.703908][T14730] kmem: usage 171080kB, limit 9007199254740988kB, failcnt 0 [ 389.711350][T14730] Memory cgroup stats for /syz2: [ 389.712206][T14730] cache 0 [ 389.727731][T14730] rss 204800 [ 389.731002][T14730] shmem 0 [ 389.754333][T14730] mapped_file 0 [ 389.757878][T14730] dirty 0 [ 389.779609][T14730] writeback 0 [ 389.794811][T14775] loop3: detected capacity change from 0 to 512 [ 389.806180][T14775] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.815464][T14775] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 389.920356][T14730] workingset_refault_anon 448 [ 389.930090][T14775] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 389.938333][T14775] System zones: 0-2, 18-18, 34-35 [ 389.945057][T14775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 390.008333][T14730] workingset_refault_file 3020 [ 390.037547][T14730] swap 995328 [ 390.047077][T14730] swapcached 1777664 [ 390.062054][T14730] pgpgin 304405 [ 390.072027][ T28] audit: type=1326 audit(1774860248.965:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14763 comm="syz.6.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2683d8c799 code=0x7ffc0000 [ 390.114895][T14730] pgpgout 304339 [ 390.142029][T14730] pgfault 333089 [ 390.164661][T14730] pgmajfault 312 [ 390.398747][T14730] inactive_anon 65536 [ 390.420796][T14730] active_anon 4096 [ 390.444653][T14730] inactive_file 0 [ 390.484114][T14730] active_file 0 [ 390.507902][T14764] loop6: detected capacity change from 0 to 1024 [ 390.520450][T14730] unevictable 200704 [ 390.524428][T14730] hierarchical_memory_limit 314572800 [ 390.561931][T14764] EXT4-fs: inline encryption not supported [ 390.581338][T14730] hierarchical_memsw_limit 9223372036854771712 [ 390.608739][T14730] total_cache 0 [ 390.657473][T14730] total_rss 204800 [ 390.661303][T14730] total_shmem 0 [ 390.664862][T14730] total_mapped_file 0 [ 390.680861][T14764] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.779945][T14730] total_dirty 0 [ 390.783703][T14730] total_writeback 0 [ 390.816484][T14730] total_workingset_refault_anon 448 [ 390.835184][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.855770][T14730] total_workingset_refault_file 3020 [ 390.870085][T14722] lo speed is unknown, defaulting to 1000 [ 390.881254][T14730] total_swap 995328 [ 390.885099][T14730] total_swapcached 1777664 [ 390.937530][T14730] total_pgpgin 304405 [ 390.947688][T14730] total_pgpgout 304339 [ 390.957836][T14792] loop8: detected capacity change from 0 to 1024 [ 390.966116][T14730] total_pgfault 333089 [ 390.982393][T14792] EXT4-fs: Ignoring removed orlov option [ 390.989782][T14730] total_pgmajfault 312 [ 391.010280][T14730] total_inactive_anon 65536 [ 391.022649][T14792] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 391.043884][T14730] total_active_anon 4096 [ 391.056356][T14730] total_inactive_file 0 [ 391.066687][T14730] total_active_file 0 [ 391.084794][T14730] total_unevictable 200704 [ 391.109645][T14730] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2051,pid=14715,uid=0 [ 391.127612][T14792] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.141479][T14744] lo speed is unknown, defaulting to 1000 [ 391.171427][T14730] Memory cgroup out of memory: Killed process 14716 (syz.2.2051) total-vm:94296kB, anon-rss:1424kB, file-rss:22560kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 391.507205][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.918066][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.013556][T14909] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2068'. [ 392.024409][T14909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.058145][T14909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.149671][T14918] loop2: detected capacity change from 0 to 512 [ 392.194775][T14918] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 392.232123][T14918] EXT4-fs (loop2): 1 truncate cleaned up [ 392.238059][T14924] macvtap1: entered promiscuous mode [ 392.252754][T14918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.270690][T14924] macvtap1: entered allmulticast mode [ 392.291758][T14924] batadv0: entered allmulticast mode [ 392.307923][T14924] batadv0: entered promiscuous mode [ 392.322519][T14924] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 392.338837][T14924] team0: Device macvtap1 failed to register rx_handler [ 392.355704][T14932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 392.369464][T14924] batadv0: left allmulticast mode [ 392.376689][T14924] batadv0: left promiscuous mode [ 392.404147][T14918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=14918 comm=syz.2.2070 [ 392.436421][T14896] syz.8.2065 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 392.472806][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.502334][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.8.2065 Tainted: G W syzkaller #0 PREEMPT(full) [ 392.502483][T14896] Tainted: [W]=WARN [ 392.502490][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 392.502506][T14896] Call Trace: [ 392.502516][T14896] [ 392.502586][T14896] __dump_stack+0x1d/0x30 [ 392.502631][T14896] dump_stack_lvl+0x95/0xd0 [ 392.502672][T14896] dump_stack+0x15/0x1b [ 392.502724][T14896] dump_header+0x80/0x240 [ 392.502760][T14896] oom_kill_process+0x295/0x350 [ 392.502792][T14896] out_of_memory+0x97d/0xb80 [ 392.502824][T14896] try_charge_memcg+0x62e/0xa10 [ 392.502874][T14896] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 392.502916][T14896] __swap_cache_prepare_and_add+0x386/0x530 [ 392.502998][T14896] swap_cache_alloc_folio+0xa2/0x120 [ 392.503039][T14896] swap_cluster_readahead+0x26e/0x3d0 [ 392.503134][T14896] swapin_readahead+0xde/0x840 [ 392.503173][T14896] ? _raw_spin_unlock+0x9/0x30 [ 392.503215][T14896] ? swap_put_entries_cluster+0x385/0x3a0 [ 392.503257][T14896] ? swap_put_entries_cluster+0x81/0x3a0 [ 392.503299][T14896] ? __rcu_read_unlock+0x4e/0x70 [ 392.503384][T14896] ? swap_cache_get_folio+0x26f/0x280 [ 392.503457][T14896] do_swap_page+0x30d/0x2220 [ 392.503499][T14896] ? css_rstat_updated+0xbb/0x280 [ 392.503549][T14896] ? __rcu_read_lock+0x36/0x50 [ 392.503574][T14896] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 392.503618][T14896] handle_mm_fault+0xb46/0x3020 [ 392.503701][T14896] ? vma_start_read+0x1c7/0x2c0 [ 392.503734][T14896] do_user_addr_fault+0x62f/0x1050 [ 392.503771][T14896] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 392.503841][T14896] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 392.503888][T14896] ? trace_page_fault_user+0x1f/0xe0 [ 392.504001][T14896] exc_page_fault+0x62/0xa0 [ 392.504040][T14896] asm_exc_page_fault+0x26/0x30 [ 392.504141][T14896] RIP: 0033:0x7f10052978f8 [ 392.504162][T14896] Code: 75 40 a8 10 75 3c 41 51 4c 8d 9b 08 03 00 00 49 89 c9 48 89 f1 41 50 48 8b 74 24 20 49 89 d0 48 89 fa 4c 89 df e8 a8 56 00 00 <8b> 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 [ 392.504187][T14896] RSP: 002b:00007fff8a684d80 EFLAGS: 00010246 [ 392.504248][T14896] RAX: 0000000000000000 RBX: 000055556c1e9500 RCX: 00007f100529cfce [ 392.504267][T14896] RDX: 00007fff8a684dd0 RSI: 0000000000000000 RDI: 0000000000000000 [ 392.504285][T14896] RBP: 00007f1005557da0 R08: 0000000000000000 R09: 0000000000000000 [ 392.504303][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000005fa82 [ 392.504321][T14896] R13: 00007f100555618c R14: 000000000005f84e R15: 00007f1005556180 [ 392.504348][T14896] [ 392.504359][T14896] memory: usage 245992kB, limit 307200kB, failcnt 199 [ 392.811595][T14929] loop6: detected capacity change from 0 to 1024 [ 392.840149][T14929] EXT4-fs: Ignoring removed orlov option [ 392.852749][T14896] memory+swap: usage 202332kB, limit 9007199254740988kB, failcnt 0 [ 392.913234][T14896] kmem: usage 195960kB, limit 9007199254740988kB, failcnt 0 [ 392.959387][T14945] syzkaller0: entered promiscuous mode [ 392.983727][T14896] Memory cgroup stats for /syz8: [ 392.984098][T14896] cache 0 [ 392.992214][T14945] syzkaller0: entered allmulticast mode [ 393.038803][T14929] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 393.051434][T14896] rss 8192 [ 393.057475][T14896] shmem 0 [ 393.060579][T14896] mapped_file 0 [ 393.109527][T14929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.173138][T14896] dirty 0 [ 393.213944][T14896] writeback 0 [ 393.217347][T14896] workingset_refault_anon 74 [ 393.243388][T14896] workingset_refault_file 0 [ 393.294051][T14896] swap 401408 [ 393.297447][T14896] swapcached 434176 [ 393.301282][T14896] pgpgin 46133 [ 393.314024][T14896] pgpgout 46127 [ 393.317529][T14896] pgfault 58522 [ 393.331197][T14896] pgmajfault 26 [ 393.334750][T14896] inactive_anon 24576 [ 393.338749][T14896] active_anon 0 [ 393.352497][T14896] inactive_file 0 [ 393.356308][T14896] active_file 0 [ 393.359845][T14896] unevictable 0 [ 393.363380][T14896] hierarchical_memory_limit 314572800 [ 393.368901][T14896] hierarchical_memsw_limit 9223372036854771712 [ 393.375200][T14896] total_cache 0 [ 393.378697][T14896] total_rss 8192 [ 393.382272][T14896] total_shmem 0 [ 393.387607][T14896] total_mapped_file 0 [ 393.391637][T14896] total_dirty 0 [ 393.406639][T14896] total_writeback 0 [ 393.410554][T14896] total_workingset_refault_anon 74 [ 393.416036][T14896] total_workingset_refault_file 0 [ 393.421272][T14896] total_swap 401408 [ 393.425414][T14896] total_swapcached 434176 [ 393.427033][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.429835][T14896] total_pgpgin 46133 [ 393.442998][T14896] total_pgpgout 46127 [ 393.447209][T14896] total_pgfault 58522 [ 393.451253][T14896] total_pgmajfault 26 [ 393.466559][T14896] total_inactive_anon 24576 [ 393.471476][T14896] total_active_anon 0 [ 393.475910][T14896] total_inactive_file 0 [ 393.480289][T14896] total_active_file 0 [ 393.494016][T14896] total_unevictable 0 [ 393.507427][T14896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2065,pid=14896,uid=0 [ 393.541783][T14896] Memory cgroup out of memory: Killed process 14896 (syz.8.2065) total-vm:96344kB, anon-rss:1224kB, file-rss:22400kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 393.600654][T15003] loop6: detected capacity change from 0 to 512 [ 393.609975][T15003] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 393.696329][T15003] EXT4-fs (loop6): 1 truncate cleaned up [ 393.702772][T15003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.723634][T15011] macvtap1: entered promiscuous mode [ 393.730630][T15011] macvtap1: entered allmulticast mode [ 393.751263][T15011] batadv0: entered allmulticast mode [ 393.759618][T15011] batadv0: entered promiscuous mode [ 393.795615][T15011] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 393.803242][T15024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2084'. [ 393.823742][T15011] team0: Device macvtap1 failed to register rx_handler [ 393.851784][T15011] batadv0: left allmulticast mode [ 393.857170][T15011] batadv0: left promiscuous mode [ 393.871247][T15003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=15003 comm=syz.6.2084 [ 393.899340][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.958238][ T28] kauditd_printk_skb: 157 callbacks suppressed [ 393.958254][ T28] audit: type=1400 audit(1774860253.701:2838): avc: denied { write } for pid=15036 comm="syz.8.2091" name="cgroup.procs" dev="cgroup" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 394.052712][T15050] loop2: detected capacity change from 0 to 512 [ 394.099672][ T28] audit: type=1400 audit(1774860253.730:2839): avc: denied { open } for pid=15036 comm="syz.8.2091" name="cgroup.procs" dev="cgroup" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 394.145072][T15050] EXT4-fs (loop2): 1 truncate cleaned up [ 394.161936][T15050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.183542][T15040] syzkaller0: entered promiscuous mode [ 394.189133][T15040] syzkaller0: entered allmulticast mode [ 394.227288][ T28] audit: type=1400 audit(1774860253.970:2840): avc: denied { getopt } for pid=15047 comm="syz.2.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 394.288114][ T28] audit: type=1400 audit(1774860254.000:2841): avc: denied { connect } for pid=15047 comm="syz.2.2095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 394.338163][ T30] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 394.353151][ T30] EXT4-fs (loop2): Remounting filesystem read-only [ 394.360738][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.430490][T15042] loop3: detected capacity change from 0 to 1024 [ 394.452206][T15042] EXT4-fs: Ignoring removed orlov option [ 394.480521][T15042] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 394.486030][T15085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=15085 comm=syz.2.2100 [ 394.545377][T15089] loop2: detected capacity change from 0 to 512 [ 394.563044][T15089] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 394.609672][T15089] EXT4-fs (loop2): 1 truncate cleaned up [ 394.611365][T15042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.616140][T15089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.670108][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.725981][ T28] audit: type=1400 audit(1774860254.469:2842): avc: denied { ioctl } for pid=15096 comm="syz.9.2103" path="socket:[56055]" dev="sockfs" ino=56055 ioctlcmd=0x4947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 394.780395][T15103] loop2: detected capacity change from 0 to 512 [ 394.787660][T15103] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 394.805820][T15103] EXT4-fs (loop2): 1 truncate cleaned up [ 394.824000][T15103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.871125][ T28] audit: type=1400 audit(1774860254.619:2843): avc: denied { map } for pid=15109 comm="syz.8.2105" path="socket:[56491]" dev="sockfs" ino=56491 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 394.898016][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.021861][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.149142][T15142] netlink: 'syz.8.2111': attribute type 16 has an invalid length. [ 395.158527][T15138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.177505][T15142] netlink: 572 bytes leftover after parsing attributes in process `syz.8.2111'. [ 395.209973][T15138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.373787][T15158] loop6: detected capacity change from 0 to 256 [ 395.427900][T15158] FAT-fs (loop6): Directory bread(block 64) failed [ 395.434650][T15158] FAT-fs (loop6): Directory bread(block 65) failed [ 395.447421][T15158] FAT-fs (loop6): Directory bread(block 66) failed [ 395.464242][T15158] FAT-fs (loop6): Directory bread(block 67) failed [ 395.475986][T15158] FAT-fs (loop6): Directory bread(block 68) failed [ 395.600524][T15158] FAT-fs (loop6): Directory bread(block 69) failed [ 395.607298][T15158] FAT-fs (loop6): Directory bread(block 70) failed [ 395.614770][T15158] FAT-fs (loop6): Directory bread(block 71) failed [ 395.623222][T15158] FAT-fs (loop6): Directory bread(block 72) failed [ 395.631350][T15158] FAT-fs (loop6): Directory bread(block 73) failed [ 395.727464][T15168] netlink: 'syz.8.2118': attribute type 3 has an invalid length. [ 395.779055][T15168] usb usb8: usbfs: process 15168 (syz.8.2118) did not claim interface 0 before use [ 396.197944][T15218] loop8: detected capacity change from 0 to 128 [ 396.206813][T15173] loop3: detected capacity change from 0 to 1024 [ 396.232259][ T28] audit: type=1400 audit(1774860255.977:2844): avc: denied { module_load } for pid=15216 comm="syz.8.2128" path="/82/bus/file0" dev="loop8" ino=69 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 396.237803][T15173] EXT4-fs: Ignoring removed orlov option [ 396.269710][T15218] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2128'. [ 396.291765][ T28] audit: type=1400 audit(1774860256.027:2845): avc: denied { map } for pid=15209 comm="syz.2.2127" path="/proc/1256/coredump_filter" dev="proc" ino=56607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 396.319014][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2128'. [ 396.327955][T15173] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 396.341627][T15218] netlink: 'syz.8.2128': attribute type 1 has an invalid length. [ 396.414746][T15233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.433083][T15233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.442638][T15236] loop2: detected capacity change from 0 to 256 [ 396.457596][T15173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.460483][T15236] FAT-fs (loop2): Directory bread(block 64) failed [ 396.476623][T15236] FAT-fs (loop2): Directory bread(block 65) failed [ 396.483461][T15236] FAT-fs (loop2): Directory bread(block 66) failed [ 396.490291][T15236] FAT-fs (loop2): Directory bread(block 67) failed [ 396.496888][T15236] FAT-fs (loop2): Directory bread(block 68) failed [ 396.504085][T15236] FAT-fs (loop2): Directory bread(block 69) failed [ 396.510847][T15236] FAT-fs (loop2): Directory bread(block 70) failed [ 396.517461][T15236] FAT-fs (loop2): Directory bread(block 71) failed [ 396.524318][T15236] FAT-fs (loop2): Directory bread(block 72) failed [ 396.545428][T15236] FAT-fs (loop2): Directory bread(block 73) failed [ 396.661361][T15256] loop2: detected capacity change from 0 to 512 [ 396.703151][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2138'. [ 396.714792][ T9307] udevd[9307]: incorrect ext4 checksum on /dev/loop2 [ 396.724526][ T28] audit: type=1400 audit(1774860256.467:2846): avc: denied { create } for pid=15255 comm="syz.2.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 396.754726][T15250] syzkaller0: entered promiscuous mode [ 396.761444][T15250] syzkaller0: entered allmulticast mode [ 396.841952][T15269] loop2: detected capacity change from 0 to 512 [ 396.870627][T15269] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2136: inode has both inline data and extents flags [ 396.899025][T15269] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 396.901690][T15269] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2136: couldn't read orphan inode 15 (err -117) [ 396.910916][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 396.910938][ C1] EXT4-fs (loop2): initial error at time 1774860256: ext4_orphan_get:1391: inode 15 [ 396.910971][ C1] EXT4-fs (loop2): last error at time 1774860256: ext4_orphan_get:1391: inode 15 [ 396.965695][T15269] loop2: lost filesystem error report for type 5 error -117 [ 396.966409][T15269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.499334][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.532406][T15278] netlink: 'syz.9.2141': attribute type 8 has an invalid length. [ 397.542002][T15278] sch_fq: defrate 0 ignored. [ 397.551049][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.674629][T15306] loop2: detected capacity change from 0 to 256 [ 397.699576][T15306] FAT-fs (loop2): Directory bread(block 64) failed [ 397.723819][T15306] FAT-fs (loop2): Directory bread(block 65) failed [ 397.737746][T15306] FAT-fs (loop2): Directory bread(block 66) failed [ 397.751379][T15306] FAT-fs (loop2): Directory bread(block 67) failed [ 397.758092][T15306] FAT-fs (loop2): Directory bread(block 68) failed [ 397.766735][T15306] FAT-fs (loop2): Directory bread(block 69) failed [ 397.774672][T15306] FAT-fs (loop2): Directory bread(block 70) failed [ 397.781567][T15306] FAT-fs (loop2): Directory bread(block 71) failed [ 397.788590][T15306] FAT-fs (loop2): Directory bread(block 72) failed [ 397.795582][T15306] FAT-fs (loop2): Directory bread(block 73) failed [ 397.809895][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2148'. [ 397.869789][ T28] audit: type=1326 audit(1774860257.606:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15317 comm="syz.3.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7faffdc799 code=0x7ffc0000 [ 397.907743][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2149'. [ 397.916757][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2149'. [ 397.946638][T15319] netlink: 'syz.3.2149': attribute type 13 has an invalid length. [ 397.954859][T15319] netlink: 'syz.3.2149': attribute type 12 has an invalid length. [ 397.986464][T15325] loop3: detected capacity change from 0 to 512 [ 397.998231][T15326] loop2: detected capacity change from 0 to 1024 [ 398.005736][T15325] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 398.037152][T15325] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.2149: invalid indirect mapped block 6684672 (level 2) [ 398.051552][T15325] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 398.056067][T15325] EXT4-fs (loop3): 1 truncate cleaned up [ 398.065300][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 398.065325][ C1] EXT4-fs (loop3): initial error at time 1774860257: ext4_free_branches:1023: inode 11 [ 398.065371][ C1] EXT4-fs (loop3): last error at time 1774860257: ext4_free_branches:1023: inode 11 [ 398.102121][T15325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.211645][T15338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.220912][T15338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.248280][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.323213][T15324] 9p: Bad value for 'wfdno' [ 398.363430][T15351] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 398.439652][T15354] syzkaller0: entered promiscuous mode [ 398.445281][T15354] syzkaller0: entered allmulticast mode [ 398.494855][T15373] FAT-fs (loop19): unable to read boot sector [ 398.499682][T15368] lo speed is unknown, defaulting to 1000 [ 398.513179][T15373] netlink: 'syz.9.2159': attribute type 10 has an invalid length. [ 398.549992][T15373] team0: Port device wg1 added [ 398.595449][T15385] loop6: detected capacity change from 0 to 128 [ 398.607471][T15376] lo speed is unknown, defaulting to 1000 [ 398.834699][T15450] FAULT_INJECTION: forcing a failure. [ 398.834699][T15450] name failslab, interval 1, probability 0, space 0, times 0 [ 398.881025][T15450] CPU: 1 UID: 0 PID: 15450 Comm: syz.8.2168 Tainted: G W syzkaller #0 PREEMPT(full) [ 398.881067][T15450] Tainted: [W]=WARN [ 398.881077][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 398.881094][T15450] Call Trace: [ 398.881111][T15450] [ 398.881121][T15450] __dump_stack+0x1d/0x30 [ 398.881223][T15450] dump_stack_lvl+0x95/0xd0 [ 398.881255][T15450] dump_stack+0x15/0x1b [ 398.881285][T15450] should_fail_ex+0x263/0x280 [ 398.881371][T15450] should_failslab+0x8c/0xb0 [ 398.881401][T15450] kmem_cache_alloc_noprof+0x66/0x400 [ 398.881432][T15450] ? __anon_vma_prepare+0xcd/0x2f0 [ 398.881612][T15450] __anon_vma_prepare+0xcd/0x2f0 [ 398.881655][T15450] do_wp_page+0x196b/0x2590 [ 398.881759][T15450] ? css_rstat_updated+0xbb/0x280 [ 398.881786][T15450] ? __rcu_read_lock+0x36/0x50 [ 398.881816][T15450] handle_mm_fault+0x8cb/0x3020 [ 398.881912][T15450] ? vma_start_read+0x1c7/0x2c0 [ 398.881990][T15450] do_user_addr_fault+0x62f/0x1050 [ 398.882034][T15450] ? ksys_mmap_pgoff+0xc1/0x310 [ 398.882069][T15450] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 398.882136][T15450] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 398.882253][T15450] ? trace_page_fault_user+0x1f/0xe0 [ 398.882297][T15450] exc_page_fault+0x62/0xa0 [ 398.882404][T15450] asm_exc_page_fault+0x26/0x30 [ 398.882433][T15450] RIP: 0033:0x7f1005193a63 [ 398.882454][T15450] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 398.882503][T15450] RSP: 002b:00007f1003d36470 EFLAGS: 00010202 [ 398.882524][T15450] RAX: 0000000000000400 RBX: 00007f1003d36530 RCX: 00007f0ffb917000 [ 398.882543][T15450] RDX: 00007f1003d366d0 RSI: 0000000000000001 RDI: 00007f1003d365d0 [ 398.882557][T15450] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000ac [ 398.882570][T15450] R10: 00000000000000c0 R11: 00007f1003d36530 R12: 0000000000000001 [ 398.882587][T15450] R13: 00007f1005392620 R14: 0000000000000020 R15: 00007f1003d365d0 [ 398.882687][T15450] [ 398.882772][T15450] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 399.099976][T15450] loop8: detected capacity change from 0 to 1024 [ 399.108873][T15450] EXT4-fs: inline encryption not supported [ 399.136329][T15441] 9p: Bad value for 'wfdno' [ 399.143349][T15450] EXT4-fs: Ignoring removed bh option [ 399.148868][T15450] EXT4-fs: inline encryption not supported [ 399.169354][T15450] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.184583][T15450] EXT4-fs (loop8): orphan cleanup on readonly fs [ 399.206739][T15450] EXT4-fs error (device loop8): ext4_quota_enable:7192: comm syz.8.2168: inode #2304: comm syz.8.2168: iget: illegal inode # [ 399.231127][T15450] loop8: lost filesystem error report for type 5 error -117 [ 399.231238][T15450] EXT4-fs error (device loop8): ext4_quota_enable:7195: comm syz.8.2168: Bad quota inode: 2304, type: 2 [ 399.249829][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 399.249857][ C0] EXT4-fs (loop8): initial error at time 1774860258: ext4_quota_enable:7192 [ 399.249897][ C0] EXT4-fs (loop8): last error at time 1774860258: ext4_quota_enable:7192 [ 399.441486][T15450] loop8: lost filesystem error report for type 5 error -117 [ 399.441699][T15450] EXT4-fs warning (device loop8): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 399.521601][T15450] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 399.529831][T15450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.716813][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.387973][T15500] lo speed is unknown, defaulting to 1000 [ 400.393803][T15500] lo speed is unknown, defaulting to 1000 [ 400.399805][T15500] lo speed is unknown, defaulting to 1000 [ 400.407375][T15500] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 400.477282][T15501] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 400.544914][T15500] lo speed is unknown, defaulting to 1000 [ 400.551770][T15500] lo speed is unknown, defaulting to 1000 [ 400.558408][T15500] lo speed is unknown, defaulting to 1000 [ 400.565178][T15500] lo speed is unknown, defaulting to 1000 [ 400.571863][T15500] lo speed is unknown, defaulting to 1000 [ 400.578933][T15500] lo speed is unknown, defaulting to 1000 [ 400.585470][T15500] lo speed is unknown, defaulting to 1000 [ 400.592196][T15500] lo speed is unknown, defaulting to 1000 [ 400.599222][T15500] lo speed is unknown, defaulting to 1000 [ 400.664509][T15495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.984422][T15495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.197653][ T3314] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 401.214289][ T3314] CPU: 1 UID: 0 PID: 3314 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 401.214349][ T3314] Tainted: [W]=WARN [ 401.214359][ T3314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.214375][ T3314] Call Trace: [ 401.214383][ T3314] [ 401.214393][ T3314] __dump_stack+0x1d/0x30 [ 401.214430][ T3314] dump_stack_lvl+0x95/0xd0 [ 401.214539][ T3314] dump_stack+0x15/0x1b [ 401.214569][ T3314] dump_header+0x80/0x240 [ 401.214644][ T3314] oom_kill_process+0x295/0x350 [ 401.214675][ T3314] out_of_memory+0x97d/0xb80 [ 401.214713][ T3314] try_charge_memcg+0x62e/0xa10 [ 401.214768][ T3314] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 401.214882][ T3314] __swap_cache_prepare_and_add+0x386/0x530 [ 401.214942][ T3314] swap_cache_alloc_folio+0xa2/0x120 [ 401.214977][ T3314] swap_cluster_readahead+0x36b/0x3d0 [ 401.215061][ T3314] swapin_readahead+0xde/0x840 [ 401.215137][ T3314] ? __perf_event_task_sched_in+0xa65/0xad0 [ 401.215171][ T3314] ? __pfx_perf_event_switch_output+0x10/0x10 [ 401.215290][ T3314] ? xfd_validate_state+0x45/0xf0 [ 401.215332][ T3314] ? __rcu_read_unlock+0x4e/0x70 [ 401.215361][ T3314] ? swap_cache_get_folio+0x26f/0x280 [ 401.215401][ T3314] do_swap_page+0x30d/0x2220 [ 401.215489][ T3314] ? __schedule+0x93c/0xd40 [ 401.215526][ T3314] ? __rcu_read_lock+0x36/0x50 [ 401.215619][ T3314] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 401.215659][ T3314] handle_mm_fault+0xb46/0x3020 [ 401.215704][ T3314] ? vma_start_read+0x1c7/0x2c0 [ 401.215742][ T3314] do_user_addr_fault+0x62f/0x1050 [ 401.215813][ T3314] ? trace_page_fault_user+0x1f/0xe0 [ 401.215857][ T3314] exc_page_fault+0x62/0xa0 [ 401.215957][ T3314] asm_exc_page_fault+0x26/0x30 [ 401.215985][ T3314] RIP: 0033:0x7f2816db7917 [ 401.216008][ T3314] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 401.216032][ T3314] RSP: 002b:00007fff02d25dc0 EFLAGS: 00010202 [ 401.216162][ T3314] RAX: 0000000000000000 RBX: 000055556d507500 RCX: 00007f2816db7917 [ 401.216181][ T3314] RDX: 00007fff02d25e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 401.216200][ T3314] RBP: 00007fff02d25e6c R08: 0000000000000000 R09: 0000000000000000 [ 401.216217][ T3314] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 401.216231][ T3314] R13: 00000000000927c0 R14: 0000000000061ad8 R15: 00007fff02d25ec0 [ 401.216258][ T3314] [ 401.216268][ T3314] memory: usage 307200kB, limit 307200kB, failcnt 1928 [ 401.576558][ T3314] memory+swap: usage 308312kB, limit 9007199254740988kB, failcnt 0 [ 401.606181][ T3314] kmem: usage 297672kB, limit 9007199254740988kB, failcnt 0 [ 401.736753][T15536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.778570][ T3314] Memory cgroup stats for /syz2: [ 401.778815][ T3314] cache 0 [ 401.812636][ T3314] rss 4096 [ 401.828630][ T3314] shmem 0 [ 401.840506][ T3314] mapped_file 0 [ 401.857738][ T3314] dirty 0 [ 401.870325][ T3314] writeback 0 [ 401.884518][ T3314] workingset_refault_anon 513 [ 401.905612][ T3314] workingset_refault_file 3021 [ 401.927226][ T3314] swap 1130496 [ 401.943523][ T3314] swapcached 1978368 [ 401.966588][ T3314] pgpgin 312359 [ 401.980541][ T3314] pgpgout 312341 [ 401.995485][ T3314] pgfault 342485 [ 402.011261][ T3314] pgmajfault 366 [ 402.025623][ T3314] inactive_anon 0 [ 402.043184][ T3314] active_anon 69632 [ 402.058600][ T3314] inactive_file 0 [ 402.076788][ T3314] active_file 0 [ 402.094098][ T3314] unevictable 0 [ 402.108103][ T3314] hierarchical_memory_limit 314572800 [ 402.132565][ T3314] hierarchical_memsw_limit 9223372036854771712 [ 402.158029][ T3314] total_cache 0 [ 402.173765][ T3314] total_rss 4096 [ 402.189578][ T3314] total_shmem 0 [ 402.203166][ T3314] total_mapped_file 0 [ 402.219984][ T3314] total_dirty 0 [ 402.235972][ T3314] total_writeback 0 [ 402.250209][T15540] 9p: Bad value for 'wfdno' [ 402.256106][ T3314] total_workingset_refault_anon 513 [ 402.272843][ T3314] total_workingset_refault_file 3021 [ 402.296894][ T3314] total_swap 1130496 [ 402.311256][ T3314] total_swapcached 1978368 [ 402.331401][ T3314] total_pgpgin 312359 [ 402.364037][ T3314] total_pgpgout 312341 [ 402.369487][ T3314] total_pgfault 342485 [ 402.383305][ T3314] total_pgmajfault 366 [ 402.398699][ T3314] total_inactive_anon 0 [ 402.413072][ T3314] total_active_anon 69632 [ 402.417512][ T3314] total_inactive_file 0 [ 402.440183][ T3314] total_active_file 0 [ 402.447900][T15548] lo speed is unknown, defaulting to 1000 [ 402.453960][ T3314] total_unevictable 0 [ 402.474124][ T3314] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2175,pid=15479,uid=0 [ 402.520989][ T3314] Memory cgroup out of memory: Killed process 15479 (syz.2.2175) total-vm:94296kB, anon-rss:1324kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 402.552706][T15591] set_capacity_and_notify: 1 callbacks suppressed [ 402.552725][T15591] loop8: detected capacity change from 0 to 128 [ 402.610310][T15587] lo speed is unknown, defaulting to 1000 [ 402.627825][T15548] lo speed is unknown, defaulting to 1000 [ 402.996636][T15587] lo speed is unknown, defaulting to 1000 [ 403.488144][T15632] loop3: detected capacity change from 0 to 128 [ 403.495130][T15632] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 403.515157][T15632] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 403.762728][T15637] loop6: detected capacity change from 0 to 512 [ 403.858234][T15637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 404.123959][T15637] EXT4-fs (loop6): 1 truncate cleaned up [ 404.130794][T15637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.203384][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.370884][T15672] loop3: detected capacity change from 0 to 512 [ 404.390830][T15668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.403766][T15672] vfat: Unknown parameter 'nhortname' [ 404.470331][T15695] macvtap1: entered promiscuous mode [ 404.505761][T15668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.520014][T15695] macvtap1: entered allmulticast mode [ 404.541627][T15695] batadv0: entered promiscuous mode [ 404.571764][T15695] batadv0: entered allmulticast mode [ 404.613511][T15695] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 404.635276][T15695] team0: Device macvtap1 failed to register rx_handler [ 404.657871][T15695] batadv0: left allmulticast mode [ 404.663060][T15695] batadv0: left promiscuous mode [ 404.693396][ T30] bridge_slave_1: left allmulticast mode [ 404.710175][ T30] bridge_slave_1: left promiscuous mode [ 404.728170][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.764042][ T30] bridge_slave_0: left allmulticast mode [ 404.771363][T15712] netlink: 'syz.9.2202': attribute type 16 has an invalid length. [ 404.779950][ T30] bridge_slave_0: left promiscuous mode [ 404.794884][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.830023][T15712] netlink: 572 bytes leftover after parsing attributes in process `syz.9.2202'. [ 405.003055][ T30] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 405.052495][ T3323] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 405.081151][ T3323] CPU: 1 UID: 0 PID: 3323 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 405.081194][ T3323] Tainted: [W]=WARN [ 405.081203][ T3323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.081221][ T3323] Call Trace: [ 405.081230][ T3323] [ 405.081241][ T3323] __dump_stack+0x1d/0x30 [ 405.081382][ T3323] dump_stack_lvl+0x95/0xd0 [ 405.081406][ T3323] dump_stack+0x15/0x1b [ 405.081433][ T3323] dump_header+0x80/0x240 [ 405.081515][ T3323] oom_kill_process+0x295/0x350 [ 405.081605][ T3323] out_of_memory+0x97d/0xb80 [ 405.081645][ T3323] try_charge_memcg+0x62e/0xa10 [ 405.081701][ T3323] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 405.081741][ T3323] __swap_cache_prepare_and_add+0x386/0x530 [ 405.081848][ T3323] swap_cache_alloc_folio+0xa2/0x120 [ 405.081968][ T3323] swap_cluster_readahead+0x36b/0x3d0 [ 405.082004][ T3323] swapin_readahead+0xde/0x840 [ 405.082087][ T3323] ? __perf_event_task_sched_in+0xa65/0xad0 [ 405.082118][ T3323] ? __pfx_perf_event_switch_output+0x10/0x10 [ 405.082157][ T3323] ? __rcu_read_unlock+0x4e/0x70 [ 405.082185][ T3323] ? swap_cache_get_folio+0x26f/0x280 [ 405.082295][ T3323] do_swap_page+0x30d/0x2220 [ 405.082408][ T3323] ? __schedule+0x93c/0xd40 [ 405.082443][ T3323] ? __rcu_read_lock+0x36/0x50 [ 405.082470][ T3323] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 405.082511][ T3323] handle_mm_fault+0xb46/0x3020 [ 405.082576][ T3323] ? vma_start_read+0x1c7/0x2c0 [ 405.082615][ T3323] do_user_addr_fault+0x62f/0x1050 [ 405.082658][ T3323] ? trace_page_fault_user+0x1f/0xe0 [ 405.082746][ T3323] exc_page_fault+0x62/0xa0 [ 405.082781][ T3323] asm_exc_page_fault+0x26/0x30 [ 405.082809][ T3323] RIP: 0033:0x7f7faff97917 [ 405.082829][ T3323] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 405.082848][ T3323] RSP: 002b:00007ffcb7be8430 EFLAGS: 00010202 [ 405.082871][ T3323] RAX: 0000000000000000 RBX: 0000555594266500 RCX: 00007f7faff97917 [ 405.082890][ T3323] RDX: 00007ffcb7be8470 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.082908][ T3323] RBP: 00007ffcb7be84dc R08: 0000000000000000 R09: 0000000000000000 [ 405.082925][ T3323] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 405.082942][ T3323] R13: 00000000000927c0 R14: 000000000006290c R15: 00007ffcb7be8530 [ 405.082992][ T3323] [ 405.082999][ T3323] memory: usage 307200kB, limit 307200kB, failcnt 4404 [ 405.414963][ T3323] memory+swap: usage 216780kB, limit 9007199254740988kB, failcnt 0 [ 405.447160][ T3323] kmem: usage 190444kB, limit 9007199254740988kB, failcnt 0 [ 405.485222][ T3323] Memory cgroup stats for /syz3: [ 405.485492][ T3323] cache 0 [ 405.504404][ T3323] rss 0 [ 405.513095][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.534362][T15717] 9p: Could not find request transport: ft [ 405.542361][ T3323] shmem 0 [ 405.547278][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.575197][ T3323] mapped_file 0 [ 405.578716][ T3323] dirty 0 [ 405.581679][ T3323] writeback 0 [ 405.610698][ T30] bond0 (unregistering): Released all slaves [ 405.622207][ T3323] workingset_refault_anon 2250 [ 405.659828][T15703] lo speed is unknown, defaulting to 1000 [ 405.671124][ T3323] workingset_refault_file 10789 [ 405.697828][ T3323] swap 593920 [ 405.735089][ T3323] swapcached 1519616 [ 405.769502][ T3323] pgpgin 366654 [ 405.773031][ T3323] pgpgout 366638 [ 405.820455][ T3323] pgfault 362675 [ 405.824081][ T3323] pgmajfault 469 [ 405.840822][T15703] lo speed is unknown, defaulting to 1000 [ 405.877696][ T3323] inactive_anon 53248 [ 405.902409][ T3323] active_anon 12288 [ 405.918522][ T30] hsr_slave_0: left promiscuous mode [ 405.929350][ T3323] inactive_file 0 [ 405.943856][ T3323] active_file 0 [ 405.970084][ T30] hsr_slave_1: left promiscuous mode [ 405.982875][ T3323] unevictable 0 [ 405.984700][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.010298][ T3323] hierarchical_memory_limit 314572800 [ 406.035281][ T3323] hierarchical_memsw_limit 9223372036854771712 [ 406.036373][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.041494][ T3323] total_cache 0 [ 406.041506][ T3323] total_rss 0 [ 406.137942][ T3323] total_shmem 0 [ 406.141530][ T3323] total_mapped_file 0 [ 406.169466][ T3323] total_dirty 0 [ 406.182966][ T3323] total_writeback 0 [ 406.183082][ T30] team0 (unregistering): Port device team_slave_1 removed [ 406.220566][ T3323] total_workingset_refault_anon 2250 [ 406.226473][ T30] team0 (unregistering): Port device team_slave_0 removed [ 406.275343][ T3323] total_workingset_refault_file 10789 [ 406.290929][ T3323] total_swap 593920 [ 406.294796][ T3323] total_swapcached 1519616 [ 406.393528][T11166] smc: removing ib device syU× [ 406.451837][ T3323] total_pgpgin 366654 [ 406.489467][T15766] lo speed is unknown, defaulting to 1000 [ 406.499568][ T3323] total_pgpgout 366638 [ 406.503870][ T3323] total_pgfault 362675 [ 406.521834][T15765] lo speed is unknown, defaulting to 1000 [ 406.527978][T15761] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 406.566210][ T3323] total_pgmajfault 469 [ 406.570340][ T3323] total_inactive_anon 53248 [ 406.602285][ T3323] total_active_anon 12288 [ 406.665657][ T3323] total_inactive_file 0 [ 406.669879][ T3323] total_active_file 0 [ 406.673909][ T3323] total_unevictable 0 [ 406.721830][ T3323] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2201,pid=15696,uid=0 [ 406.745769][ T3323] Memory cgroup out of memory: Killed process 15696 (syz.3.2201) total-vm:94296kB, anon-rss:1224kB, file-rss:22340kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 406.870227][T15735] loop8: detected capacity change from 0 to 1024 [ 406.945113][T15837] loop6: detected capacity change from 0 to 1024 [ 406.959163][T15837] EXT4-fs: inline encryption not supported [ 406.993222][T15837] EXT4-fs: Ignoring removed bh option [ 407.060385][T15837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.119737][T15735] EXT4-fs: Ignoring removed orlov option [ 407.171391][T15837] EXT4-fs error (device loop6): mb_free_blocks:2047: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 407.221476][T15837] EXT4-fs (loop6): Remounting filesystem read-only [ 407.237000][T15855] lo speed is unknown, defaulting to 1000 [ 407.246691][T15866] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2216'. [ 407.283371][T15837] can0: slcan on ptm1. [ 407.303048][T15735] EXT4-fs (loop8): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 407.348991][T15809] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 407.454580][T15735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.529586][T15908] macvtap1: entered promiscuous mode [ 407.534990][T15908] macvtap1: entered allmulticast mode [ 407.605651][T15920] netlink: 'syz.9.2218': attribute type 16 has an invalid length. [ 407.609877][T15908] batadv0: entered promiscuous mode [ 407.614557][T15920] netlink: 572 bytes leftover after parsing attributes in process `syz.9.2218'. [ 407.630141][T15908] batadv0: entered allmulticast mode [ 407.646067][T15829] can0 (unregistered): slcan off ptm1. [ 407.653177][T15908] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 407.669511][T15908] team0: Device macvtap1 failed to register rx_handler [ 407.694406][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.703560][T15908] batadv0: left allmulticast mode [ 407.709303][T15908] batadv0: left promiscuous mode [ 407.784081][T15929] loop3: detected capacity change from 0 to 1024 [ 407.839061][ T30] IPVS: stop unused estimator thread 0... [ 407.912747][T15929] syzkaller0: entered promiscuous mode [ 407.936266][T15929] syzkaller0: entered allmulticast mode [ 408.047388][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.153890][T15978] FAULT_INJECTION: forcing a failure. [ 408.153890][T15978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.173488][T15979] loop2: detected capacity change from 0 to 128 [ 408.311707][T15978] CPU: 0 UID: 0 PID: 15978 Comm: syz.8.2225 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.311741][T15978] Tainted: [W]=WARN [ 408.311749][T15978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.311775][T15978] Call Trace: [ 408.311784][T15978] [ 408.311796][T15978] __dump_stack+0x1d/0x30 [ 408.311830][T15978] dump_stack_lvl+0x95/0xd0 [ 408.311862][T15978] dump_stack+0x15/0x1b [ 408.311916][T15978] should_fail_ex+0x263/0x280 [ 408.311973][T15978] should_fail+0xb/0x20 [ 408.312005][T15978] should_fail_usercopy+0x1a/0x20 [ 408.312038][T15978] _copy_from_user+0x1c/0xb0 [ 408.312078][T15978] __sys_bpf+0x183/0x7e0 [ 408.312208][T15978] __x64_sys_bpf+0x41/0x50 [ 408.312251][T15978] x64_sys_call+0x10cb/0x3020 [ 408.312280][T15978] do_syscall_64+0x12c/0x370 [ 408.312379][T15978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.312402][T15978] RIP: 0033:0x7f10052dc799 [ 408.312418][T15978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.312501][T15978] RSP: 002b:00007f1003d37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.312528][T15978] RAX: ffffffffffffffda RBX: 00007f1005555fa0 RCX: 00007f10052dc799 [ 408.312547][T15978] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 408.312562][T15978] RBP: 00007f1003d37090 R08: 0000000000000000 R09: 0000000000000000 [ 408.312579][T15978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.312591][T15978] R13: 00007f1005556038 R14: 00007f1005555fa0 R15: 00007fff8a684c98 [ 408.312612][T15978] [ 408.641959][T15965] syz.6.2224 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 408.695557][T15965] CPU: 0 UID: 0 PID: 15965 Comm: syz.6.2224 Tainted: G W syzkaller #0 PREEMPT(full) [ 408.695601][T15965] Tainted: [W]=WARN [ 408.695610][T15965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 408.695629][T15965] Call Trace: [ 408.695638][T15965] [ 408.695650][T15965] __dump_stack+0x1d/0x30 [ 408.695706][T15965] dump_stack_lvl+0x95/0xd0 [ 408.695741][T15965] dump_stack+0x15/0x1b [ 408.695773][T15965] dump_header+0x80/0x240 [ 408.695806][T15965] oom_kill_process+0x295/0x350 [ 408.695853][T15965] out_of_memory+0x97d/0xb80 [ 408.695900][T15965] try_charge_memcg+0x62e/0xa10 [ 408.695955][T15965] obj_cgroup_charge_pages+0x23/0xc0 [ 408.695997][T15965] __memcg_kmem_charge_page+0x9e/0x170 [ 408.696049][T15965] __alloc_frozen_pages_noprof+0x18a/0x360 [ 408.696132][T15965] alloc_pages_mpol+0xb3/0x260 [ 408.696204][T15965] alloc_pages_noprof+0x8f/0x130 [ 408.696282][T15965] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 408.696338][T15965] __kvmalloc_node_noprof+0x3d4/0x650 [ 408.696376][T15965] ? futex_hash_allocate+0x190/0x9d0 [ 408.696486][T15965] ? futex_hash_allocate+0x190/0x9d0 [ 408.696551][T15965] futex_hash_allocate+0x190/0x9d0 [ 408.696592][T15965] ? cap_task_prctl+0x13f/0x6e0 [ 408.696721][T15965] futex_hash_prctl+0xd8/0xf0 [ 408.696762][T15965] __se_sys_prctl+0xa3d/0x13f0 [ 408.696801][T15965] __x64_sys_prctl+0x67/0x80 [ 408.696898][T15965] x64_sys_call+0x2533/0x3020 [ 408.696979][T15965] do_syscall_64+0x12c/0x370 [ 408.697016][T15965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.697117][T15965] RIP: 0033:0x7f2683d8c799 [ 408.697140][T15965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.697164][T15965] RSP: 002b:00007f26827df028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 408.697261][T15965] RAX: ffffffffffffffda RBX: 00007f2684005fa0 RCX: 00007f2683d8c799 [ 408.697282][T15965] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 408.697298][T15965] RBP: 00007f2683e22c99 R08: 0000000000000000 R09: 0000000000000000 [ 408.697315][T15965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.697333][T15965] R13: 00007f2684006038 R14: 00007f2684005fa0 R15: 00007fff4d0ea9f8 [ 408.697362][T15965] [ 408.926880][T15965] memory: usage 225040kB, limit 307200kB, failcnt 1903 [ 408.933783][T15965] memory+swap: usage 225416kB, limit 9007199254740988kB, failcnt 0 [ 408.976865][T15965] kmem: usage 202792kB, limit 9007199254740988kB, failcnt 0 [ 408.991534][T15987] loop8: detected capacity change from 0 to 512 [ 409.021777][T15987] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 409.032003][T15965] Memory cgroup stats for /syz6: [ 409.032397][T15965] cache 0 [ 409.057197][T15965] rss 12288 [ 409.064938][T15965] shmem 0 [ 409.069142][T15987] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 409.071124][T15965] mapped_file 0 [ 409.091265][T15965] dirty 0 [ 409.095268][T15965] writeback 0 [ 409.106915][T15987] System zones: 1-12 [ 409.107389][T15965] workingset_refault_anon 562 [ 409.118373][T15987] EXT4-fs (loop8): 1 truncate cleaned up [ 409.126229][T15965] workingset_refault_file 4290 [ 409.131274][T15965] swap 376832 [ 409.134858][T15965] swapcached 28418048 [ 409.137169][T15987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.147298][T15965] pgpgin 285858 [ 409.154616][T15965] pgpgout 285835 [ 409.187530][T15965] pgfault 314303 [ 409.191150][T15965] pgmajfault 366 [ 409.194719][T15965] inactive_anon 0 [ 409.242610][T11801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.251777][T15965] active_anon 77824 [ 409.255624][T15965] inactive_file 0 [ 409.307045][T15965] active_file 12288 [ 409.310986][T15965] unevictable 0 [ 409.311728][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.314469][T15965] hierarchical_memory_limit 314572800 [ 409.331774][T15972] lo speed is unknown, defaulting to 1000 [ 409.350617][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.350654][T16000] loop3: detected capacity change from 0 to 1024 [ 409.383826][T15965] hierarchical_memsw_limit 9223372036854771712 [ 409.397125][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.459513][T15965] total_cache 0 [ 409.463042][T15965] total_rss 12288 [ 409.466822][T15965] total_shmem 0 [ 409.494944][T16000] netlink: 'syz.3.2231': attribute type 13 has an invalid length. [ 409.555742][T15965] total_mapped_file 0 [ 409.560164][T15965] total_dirty 0 [ 409.563655][T15965] total_writeback 0 [ 409.597749][T15965] total_workingset_refault_anon 562 [ 409.604233][T15965] total_workingset_refault_file 4290 [ 409.616395][T15965] total_swap 376832 [ 409.623262][T15965] total_swapcached 28418048 [ 409.669930][T15965] total_pgpgin 285858 [ 409.673983][T15965] total_pgpgout 285835 [ 409.687199][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.712745][T16048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.717945][T15965] total_pgfault 314303 [ 409.738075][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.747224][T15965] total_pgmajfault 366 [ 409.751362][T15965] total_inactive_anon 0 [ 409.755642][T15965] total_active_anon 77824 [ 409.778439][T16048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.786692][T15965] total_inactive_file 0 [ 409.837213][T15965] total_active_file 12288 [ 409.841616][T15965] total_unevictable 0 [ 409.845945][T15965] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.2224,pid=15964,uid=0 [ 409.877526][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.907330][T15965] Memory cgroup out of memory: Killed process 15965 (syz.6.2224) total-vm:94296kB, anon-rss:1344kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 409.910243][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2229'. [ 409.937776][T16059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.975362][T16059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.024752][T16072] loop6: detected capacity change from 0 to 1024 [ 410.082080][T16072] EXT4-fs: inline encryption not supported [ 410.088485][T16072] EXT4-fs: Ignoring removed bh option [ 410.094067][T16072] EXT4-fs: inline encryption not supported [ 410.105439][T11169] ================================================================== [ 410.113592][T11169] BUG: KCSAN: data-race in touch_atime / touch_atime [ 410.120330][T11169] [ 410.122682][T11169] write to 0xffff88812a229548 of 4 bytes by task 30 on cpu 1: [ 410.130168][T11169] touch_atime+0x1d7/0x330 [ 410.134628][T11169] shmem_file_read_iter+0x477/0x540 [ 410.139872][T11169] lo_rw_aio+0x67d/0x730 [ 410.144170][T11169] loop_process_work+0x56c/0xac0 [ 410.149165][T11169] loop_rootcg_workfn+0x22/0x30 [ 410.154062][T11169] process_scheduled_works+0x513/0xa10 [ 410.159572][T11169] worker_thread+0x58a/0x780 [ 410.164293][T11169] kthread+0x22a/0x280 [ 410.168396][T11169] ret_from_fork+0x150/0x360 [ 410.173034][T11169] ret_from_fork_asm+0x1a/0x30 [ 410.177847][T11169] [ 410.180207][T11169] read to 0xffff88812a229548 of 4 bytes by task 11169 on cpu 0: [ 410.187860][T11169] touch_atime+0x16c/0x330 [ 410.192329][T11169] shmem_file_read_iter+0x477/0x540 [ 410.197578][T11169] lo_rw_aio+0x67d/0x730 [ 410.201867][T11169] loop_process_work+0x56c/0xac0 [ 410.206868][T11169] loop_workfn+0x31/0x40 [ 410.211160][T11169] process_scheduled_works+0x513/0xa10 [ 410.216659][T11169] worker_thread+0x58a/0x780 [ 410.221301][T11169] kthread+0x22a/0x280 [ 410.225400][T11169] ret_from_fork+0x150/0x360 [ 410.230042][T11169] ret_from_fork_asm+0x1a/0x30 [ 410.234853][T11169] [ 410.237209][T11169] value changed: 0x31679b79 -> 0x32001df5 [ 410.242957][T11169] [ 410.245301][T11169] Reported by Kernel Concurrency Sanitizer on: [ 410.252280][T11169] CPU: 0 UID: 0 PID: 11169 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(full) [ 410.263519][T11169] Tainted: [W]=WARN [ 410.267391][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 410.277489][T11169] Workqueue: loop6 loop_workfn [ 410.282302][T11169] ================================================================== [ 410.295735][T16072] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 410.309634][T16072] EXT4-fs (loop6): orphan cleanup on readonly fs [ 410.316352][T16072] EXT4-fs error (device loop6): ext4_quota_enable:7192: comm syz.6.2237: inode #2304: comm syz.6.2237: iget: illegal inode # [ 410.347620][T16072] loop6: lost filesystem error report for type 5 error -117 [ 410.347796][T16072] EXT4-fs error (device loop6): ext4_quota_enable:7195: comm syz.6.2237: Bad quota inode: 2304, type: 2 [ 410.366398][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 410.366417][ C1] EXT4-fs (loop6): initial error at time 1774860270: ext4_quota_enable:7192 [ 410.366444][ C1] EXT4-fs (loop6): last error at time 1774860270: ext4_quota_enable:7192 [ 410.427673][T16072] loop6: lost filesystem error report for type 5 error -117 [ 410.427878][T16072] EXT4-fs warning (device loop6): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 410.462277][T16072] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 410.470121][T16072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 410.499116][ T3820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.