last executing test programs: 1m53.704277518s ago: executing program 32 (id=28): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc0000c4}, 0x4) unshare(0x22020400) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket(0x2b, 0x80801, 0x1) bind$unix(r4, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x3, 0x3}}, 0x10) 1m53.405771715s ago: executing program 33 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000300)=0x80000000) 1m23.199923972s ago: executing program 2 (id=148): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3000) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x4, 0x800) 1m23.156422345s ago: executing program 2 (id=149): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m23.100764278s ago: executing program 2 (id=151): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) (fail_nth: 9) 1m22.736773s ago: executing program 2 (id=152): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000100)={[{@nobh}, {@errors_remount}]}, 0xff, 0x267, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='fG'], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000b80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x3, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xffffffff}, @NHA_OIF={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4020000}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x2, 0x6, @local}, 0x1c) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r5 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, 0x0, &(0x7f00000003c0)) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000040)={'wg0\x00'}) ptrace$cont(0x21, r1, 0x80000001, 0x4) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000140)) 1m22.55170827s ago: executing program 2 (id=156): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000000)=@buf) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x13a0, 0x11c0, 0xc8, 0x8, 0x0, 0x5803, 0x12d0, 0x2e8, 0x2e8, 0x12d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x400, 0xa66, 0x2}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x8000000, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1400) 1m22.234750029s ago: executing program 2 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (fail_nth: 6) 1m22.148738624s ago: executing program 34 (id=166): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x8, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (fail_nth: 6) 1m3.782530628s ago: executing program 3 (id=407): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x20, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x97}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r5, 0x540b, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0xc07b}, 0x0, 0x0, 0x800004, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="500106"], 0x14) 1m2.892223821s ago: executing program 3 (id=414): unshare(0x2040400) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="18081100000000000000000000000000180000000000000000000000000095775da6c6a267b27bf9f6a156ee033a5ffcf266b68a9107c050efeb17d51353c1f33ed4feb77cf5f5a489b28ea719c8968e21ae7a4a3a99d7502a655c1de4327be880a0"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x40000000, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m2.817254115s ago: executing program 3 (id=418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="40000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0909000000000000140012800b00010067656e6576650000040002800a0001"], 0x40}}, 0x0) (fail_nth: 4) 1m2.589411958s ago: executing program 3 (id=420): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @remote, 'geneve0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'hsr0\x00'}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r6, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x17e, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd29, 0xffe4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r2, &(0x7f00000001c0)={0x18, 0x0, {0x4, @remote, 'geneve0\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'hsr0\x00'}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bind$inet6(r5, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') (async) preadv(r6, &(0x7f0000000700)=[{&(0x7f0000004900)=""/170, 0xaa}], 0x1, 0x17e, 0x9) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=@newtaction={0x88c, 0x30, 0xffff, 0x70bd29, 0xffe4, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x1, 0x5c4, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x8000, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8a, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4000000, 0x9, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000, 0x9, 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x4, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x401]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6, 0x0, 0x0, 0x3, 0x0, 0xff}, 0x0, 0xfffffffe}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) (async) 1m2.451295917s ago: executing program 3 (id=423): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$kcm(0x2, 0x1, 0x84) (async) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000640)=[{0x800000000}, {0x0, 0x5, 0x4}], 0x2, 0x100000c01, 0x61, 0x0, 0x0, 0x6e}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xf3f, 0x4070bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe8b4}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x5, 0x1, 0x0, 0x0, {{0x1fd, 0x2, 0x7}, {0x3, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x44080) openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x280082, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3906a7e7}]}}]}, 0x48}}, 0x4008000) socket$kcm(0x10, 0x400000002, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f00000000c0)="83", 0x1}], 0x1}, 0x404c0e0) 1m2.283269486s ago: executing program 3 (id=426): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x4d2, 0x33}, 0x54a25bf53473644c, @in6=@remote, 0x0, 0x5, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) (async) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000e00)={0x17c04, r2, 0x6, 0x24000003, 0x400000006, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000010791048000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m2.280078036s ago: executing program 35 (id=426): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3a0431a, &(0x7f0000000000)={[{@jqfmt_vfsv1}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@remote, 0x4d2, 0x33}, 0x54a25bf53473644c, @in6=@remote, 0x0, 0x5, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0xffffffffffffff9c, 0x0, 0x2) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) (async) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000e00)={0x17c04, r2, 0x6, 0x24000003, 0x400000006, 0x3}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000010791048000000000007000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 55.89305197s ago: executing program 0 (id=485): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2800c11, &(0x7f00000004c0)=ANY=[], 0x1, 0xa5a, &(0x7f0000001500)="$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") r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="03", 0x1}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000003030000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000240)=ANY=[@ANYBLOB="20000000020000001d"], 0x642182) socket$isdn(0x22, 0x3, 0x25) 55.711118901s ago: executing program 0 (id=486): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffb, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1}, 0x1}], 0x1, 0x40002122, 0x0) socket$kcm(0x29, 0x6, 0x0) sendmsg$tipc(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 55.486096643s ago: executing program 0 (id=489): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40d6050010000104000f00000000000000000001", @ANYRES32=0x0, @ANYBLOB="2105d600000000002000128008000100687372001400028008000100", @ANYRES32=r2, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 55.38271065s ago: executing program 0 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc}, {}, {}, {0x81}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0x4000000, 0x0, 0x8000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {0xfffffffd}, {}, {}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}], [{0x2}, {}, {0x4, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (fail_nth: 4) 55.312713344s ago: executing program 0 (id=492): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = memfd_secret(0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp\x00') read$watch_queue(r2, &(0x7f0000001080)=""/4088, 0xff8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe4, 0xe4, 0xa, [@union={0x2, 0x7, 0x0, 0x5, 0x1, 0xfffffffd, [{0x0, 0x0, 0x400}, {0x0, 0x5, 0xe5}, {0xe, 0x3, 0x4}, {0x6, 0x4, 0x81}, {0x9}, {0x5, 0x0, 0x4}, {0x6, 0x3, 0x5}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x3}, @restrict={0x10, 0x0, 0x0, 0xb, 0x4}, @union={0x7, 0x7, 0x0, 0x5, 0x1, 0xdf, [{0xa, 0x4, 0x9}, {0x0, 0x2}, {0x1, 0x5, 0xc11}, {0x0, 0x4, 0x3}, {0x7, 0x0, 0x8c70}, {0x2, 0x3, 0x100}, {0x2, 0x3, 0x4}]}, @const={0x4}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x41, 0x30, 0x5f, 0x61, 0x2e]}}, &(0x7f0000000700)=""/231, 0x106, 0xe7, 0x0, 0x9}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@xattr}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001a80)=@newsa={0x114, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x3, 0x200000, 0x37}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd2b, 0x2}}]}, 0x114}}, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = epoll_create1(0x80000) r9 = fcntl$dupfd(r7, 0x0, r7) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)={0x20000004}) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x1a, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1517, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @generic={0x1, 0xb, 0x5, 0x6}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x14bd07aa5bcb1585}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0xa, 0xe, 0x8001}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000009c0)=[r5, r6, r9, r10], &(0x7f0000000a00)=[{0x4, 0x5, 0x7, 0x3925d7d9b76a8d4c}, {0x3, 0x3, 0x5}, {0x3, 0x2, 0xa, 0x1}, {0x3, 0x3, 0xc, 0x5}, {0x3, 0x2, 0x4, 0xc}, {0x3, 0x1, 0xb, 0xc}, {0x4, 0x2, 0x0, 0x8}, {0x2, 0x1, 0x2}, {0x4, 0x4, 0x0, 0x4}], 0x10, 0x9}, 0x94) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r12, 0x0) exit(0x0) close(0x3) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r13) syz_clone(0x62384000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)) 54.250265076s ago: executing program 0 (id=510): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x6c020000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f0000003980)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000010000000000000e05000000010000388e1575fdec"], 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f0000003980)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000010000000000000e05000000010000388e1575fdec"], 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdf0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0x4416c080, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) r4 = syz_clone(0x4416c080, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}]}}) ptrace(0x8, r4) epoll_create(0x4) (async) r7 = epoll_create(0x4) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0x10000001}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x89) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x89) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x7f) kcmp(r4, r4, 0x2, r2, r3) (async) kcmp(r4, r4, 0x2, r2, r3) 50.93100292s ago: executing program 8 (id=555): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x3b) semget$private(0x0, 0x4, 0x44) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xfffffffffffffe6c}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100), &(0x7f0000000280)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000791201000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x810000, &(0x7f0000000580), 0x0, 0x556, &(0x7f00000005c0)="$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") 49.899158891s ago: executing program 8 (id=569): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x1ac, 0x10, 0x413, 0x70bd28, 0xfffffffc, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0xfffd, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x4, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x3, 0xfe}, [@algo_aead={0x4c, 0x12, {{'aegis256\x00'}, 0x0, 0x60}}, @tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d4, 0x33}, 0xa, @in6=@empty, 0x3503, 0x4, 0x0, 0xff, 0x2, 0x7, 0x40}]}, @tfcpad={0x8, 0x16, 0x101}, @replay_thresh={0x8, 0xb, 0x10001}, @encap={0x1c, 0x4, {0x2, 0x4e22, 0x4e22, @in6=@private2}}]}, 0x1ac}}, 0x804) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r1, 0x2, 0x1) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) fcntl$setsig(r0, 0xa, 0x39) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f00000000c0), 0xffffffffffffffff, r2}}, 0x18) tkill(0xffffffffffffffff, 0x2a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setuid(0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x3, @local, 0x8000}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000200)='./file1\x00', 0x0, 0x8}, 0x18) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 49.700374322s ago: executing program 8 (id=574): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 49.477744235s ago: executing program 8 (id=577): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000044, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@nodioread_nolock}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@nouid32}, {@dioread_nolock}]}, 0x1, 0x55e, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) unshare(0x22020600) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) ftruncate(0xffffffffffffffff, 0x2007ffb) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d80)={@cgroup, 0xffffffffffffffff, 0x2, 0x44}, 0x20) mmap(&(0x7f00000a7000/0x3000)=nil, 0x3000, 0x1000000, 0x204031, 0xffffffffffffffff, 0xdd317000) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4087, 0xff7}], 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200) 49.362106132s ago: executing program 8 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="3a0000001000390400000000deff00dee22d0a0a", @ANYRES32=0x0, @ANYBLOB="0198060000000000140012800b000100697036677265000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x0, 0x80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x109081) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000018000000000000000000950100cc00000000"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0xffffffffffffffe8, 0x0, 0x0, 0x6}, 0xf) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000100)={0x1, 0x0, [{0x2, 0xe, 0x800, [0x2, 0x456, 0x9, 0x0, 0x9dd2, 0x6, 0x9, 0xff]}]}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f00000000c0), 0x0) r10 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000001c00)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@journal_dev={'journal_dev', 0x3d, 0xd5b}}, {@data_err_ignore}, {@nodiscard}, {@user_xattr}, {@grpquota}, {@init_itable}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0xc0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) ptrace(0x10, r10) ptrace$setsig(0x4203, r10, 0x1, &(0x7f0000000140)={0x1b, 0x7, 0x7}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) 48.999911263s ago: executing program 8 (id=581): unshare(0x28020480) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x121c91e, &(0x7f0000000000), 0x5, 0x4ff, &(0x7f0000000180)="$eJzs3dFrW3sdAPDvSZvZdZ3t0Ic5cA43aYcubVe3FR+mgujTQJ3vs7ZpKU2b0qRbW4Z2+AcIIir45JMvgn+AIPsTRBjou6h4udy73ftw4d67XHKSbG2XtN2WNKX5fOAkv98vOfl+f01zcn7n/DgJoGddiojLEfG8UqlcjYjhenumvsR2bclGxLOnD2erSxKVyt33koik1lZ92tiO1zxTX20gIn78g4ifbWRfiVva3FpKtgv5tXp9vLy8Ol7a3Lq2uDyzkF/Ir0xNTd6cvjV9Y3rizTo2sLs6FBG3v/e/3/7qT9+//bdvPPj3vXfGfp7U2yNe9qPdkvQ2uyud/ohY60SwLumP2v8HAADHX2M//6sRcTWGoy/dmwMAAABOksq3h+KTJKICAAAAnFiZdA5sksnV5wEMRSaTy9Xm8H4xBjOFYqn89fni+spcba7sSGQz84uF/ER9rvBIZJNqfTItv6xf31OfiohzEfGb4dNpPTdbLMx1++AHAAAA9Igze8b/Hw7Xxv87fNy15AAAAID2Gel2AgAAAEDHNcb/A13OAwAAAOgc5/8BAADgRPvhnTvVpdL4/eu5+5vrS8X71+bypaXc8vpsbra4tppbKBYX0mv2LR/0eoVicfWbsbK+MV7Ol8rjpc2te8vF9ZXyvUWzCwAAAKBbzn3l8b+SiNj+1ul0qTrV7aSAI9G/p57s9+T/djYX4Gj1dTsBoGv2fv8DvSPb7QSArtt33L/fpUH+3v5cAACAzhj9UvPz/30Hjgm2M0eUItAhjv9B73L+H3qX8//Qu7LRFwby0NsOugTo25//r1ReKyEAAKDthtIlyeQi0uMAQ5HJ5IYizqZjgmwyv1jIT0TE5yPin8PZz1Xrk+mayYFzhgEAAAAAAAAAAAAAAAAAAAAAAACAmkoliQoAAABwokVk/p/Uf+t/dPjK0N7jA6eSj4bT+4h48Ie7v9uYKZfXJqvt779oL/++3n69G0cwAAAAoGdlWz3QGKc3xvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0E7Pnj6cbSxHGffd70bESLP4/TGQ3g9ENiIGP0iif8d6SUT0tSH+9qOION8sflJNK0bqWTSLf7qN8U+9QfwzbYgPvexxdfvznWaf/0xcSu+bf/5upluot9d6+5d5sf3raxK/2nb2kDEuPPnLYMv4jyIu9Dff/jXiJy22P5cPGf+nP9naavVY5Y8Ro02/f5JdscbLy6vjpc2ta4vLMwv5hfzK1NTkzelb0zemJ8bnFwv5+m3TGL/+8l+f79f/wRbxRw7o/5VD9v/TJxtPv1ArZl+snryMP3a5+ft/vkX8TP39/1q9XH18tFHerpV3uvjnf1zcr/9zLfp/0Ps/dsj+X/3RL/9zyKcCAEegtLm1NFMo5Nc6WqhEx0O8VWHHX2PgtVOt7hYdi14cz0L177qrpbqbehwSy6+VftGBV67umXe7X+0odHWzBAAAdMCrY2AAAAAAAAAAAAAAAAAAAADgqB3F5cSye2Jup7ftuHo+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED7fBYAAP//7gnO/A==") 48.999479543s ago: executing program 36 (id=581): unshare(0x28020480) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x121c91e, &(0x7f0000000000), 0x5, 0x4ff, &(0x7f0000000180)="$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") 39.185330137s ago: executing program 37 (id=510): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = pidfd_getfd(r0, r0, 0x0) setns(r1, 0x6c020000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f0000003980)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000010000000000000e05000000010000388e1575fdec"], 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ac0)={&(0x7f0000003980)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000000005000000010000000000000e05000000010000388e1575fdec"], 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffdf0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_clone(0x4416c080, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) (async) r4 = syz_clone(0x4416c080, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_client}]}}) ptrace(0x8, r4) epoll_create(0x4) (async) r7 = epoll_create(0x4) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) (async) r8 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f00000000c0)={0x10000001}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x89) (async) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x89) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000000)=0x7f) kcmp(r4, r4, 0x2, r2, r3) (async) kcmp(r4, r4, 0x2, r2, r3) 35.643426395s ago: executing program 6 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400002000000000000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="cd6171", @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800020001000000"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) (async) close(0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400002000000000000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b0000140000001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) close(0x3) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r3) (async) write$UHID_INPUT(r4, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="cd6171", @ANYRES16=r1, @ANYBLOB="010000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800020001000000"], 0x24}}, 0x0) (async) 35.109572306s ago: executing program 6 (id=762): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7f454c460407000307ffffffff08000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004"], 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x6c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x37, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x29}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x42}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x1) close(r0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x2000775) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 34.961969734s ago: executing program 6 (id=766): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[], 0x0) 34.87910129s ago: executing program 6 (id=767): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x1005, 0xfffffffffffffffe) pwrite64(r0, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) 34.35582642s ago: executing program 6 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0xffe4, {0x8, 0x1, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001, 0x0, 0x400}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x3ffffd, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x0) 34.01946271s ago: executing program 6 (id=785): syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="380000002e0001000000000000000000e7ff0b00c6e29917bceb41b04b8d3aa55296d93f1bdfd9277bc76df787a24ea35640df8434017bb7c7b4dad36e681ced530890998d131eff838c6c4a4ae837a2556f0ca2ff906851dbd736d55e64704c1d7474bf119aaa3bc8c0c8dea8b9c54aaff00b948acab9b423a3f8cb7c91d69286ab6b4d0e01169cbcec7d1f61cdadb4da35d524ea100b685997572ac5e6162e54eef10af7405e4e47e4922d06e143b0b72189fd6fb1292da84c406aecbedcc4", @ANYRES32=r4, @ANYBLOB="0b000080976b64086860300014000180f1c2348fb4010000000000000046758b"], 0x38}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCCONS(r5, 0x541d) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="000000000000000000f3c66b381f9e4d0a9987e3c4ebe32e0000000000000000000000acc87e218b61977c48fa9613f5c9ffdf02376f3b0a1b2ee92b5a544c290f38928c07a50e"], 0x96) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x483, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}]]}, 0x40}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) r9 = syz_open_dev$vcsn(&(0x7f0000000300), 0x2, 0xa0000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000f676ee741d10a6981fec3a76bbe4f88889ef2d726467f962a12b20eb4d28ea30d7e214c3ca43246edc8bddf1034c71b41d6fe6b92cf9d2202d823528e68f5a6e8e459c77b37359760cc874a012083568e124612e7e433de21b2aefd9980adf9d871d7e1f3f1dda4f29fadca1ed571bc14f5278b8eb4da3b9e47e021fc67a11f8063ab743208669728493236761ddcd6740dfa3e5fbd1cee6de64d065fbda436bf0ff5a27d55799", @ANYRES16=r10, @ANYBLOB="000426bd7000fcdbdf251100000008000400080000000800040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000805) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 33.963467803s ago: executing program 38 (id=785): syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x95f5, 0x10100, 0x0, 0x89}, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000400)=0xc) sendmsg$netlink(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="380000002e0001000000000000000000e7ff0b00c6e29917bceb41b04b8d3aa55296d93f1bdfd9277bc76df787a24ea35640df8434017bb7c7b4dad36e681ced530890998d131eff838c6c4a4ae837a2556f0ca2ff906851dbd736d55e64704c1d7474bf119aaa3bc8c0c8dea8b9c54aaff00b948acab9b423a3f8cb7c91d69286ab6b4d0e01169cbcec7d1f61cdadb4da35d524ea100b685997572ac5e6162e54eef10af7405e4e47e4922d06e143b0b72189fd6fb1292da84c406aecbedcc4", @ANYRES32=r4, @ANYBLOB="0b000080976b64086860300014000180f1c2348fb4010000000000000046758b"], 0x38}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCCONS(r5, 0x541d) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340277f2b053a3304b89f8a7a80b00db96f248dabd7fac3c2f9e2b99a67f20a1cd09c0c843e5635493bbfa23b72d98a0c37a3e5805f5e2ec75e9d98b09"], 0x20}, 0x1, 0x0, 0x0, 0x80000}, 0x40800) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r7, &(0x7f0000000200)=ANY=[], 0x1cb) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="000000000000000000f3c66b381f9e4d0a9987e3c4ebe32e0000000000000000000000acc87e218b61977c48fa9613f5c9ffdf02376f3b0a1b2ee92b5a544c290f38928c07a50e"], 0x96) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x483, 0x5e}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xa}]]}, 0x40}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50) r9 = syz_open_dev$vcsn(&(0x7f0000000300), 0x2, 0xa0000) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r2) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000f676ee741d10a6981fec3a76bbe4f88889ef2d726467f962a12b20eb4d28ea30d7e214c3ca43246edc8bddf1034c71b41d6fe6b92cf9d2202d823528e68f5a6e8e459c77b37359760cc874a012083568e124612e7e433de21b2aefd9980adf9d871d7e1f3f1dda4f29fadca1ed571bc14f5278b8eb4da3b9e47e021fc67a11f8063ab743208669728493236761ddcd6740dfa3e5fbd1cee6de64d065fbda436bf0ff5a27d55799", @ANYRES16=r10, @ANYBLOB="000426bd7000fcdbdf251100000008000400080000000800040004000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000805) r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x81ff, 0x0, 0x38, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 2.864334713s ago: executing program 1 (id=1122): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x9, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='timerslack_ns\x00') writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000240)="4d4d9ab01e286b36034a8d47fe87530420dbd36392fde42ab13614de256d1e6d648bfbda228d9c5ca4f801dc2f67a45a8b850cea0cb793eb7621a6882121a12c56489a74b85dab882e00881c4d58147b432189ee3344080b372035054f38282674bb0447d01f3531aa7c36d82496d936615d8c327016817a106c25886f441eda649203131630fd501c7af5da369a60d80ee8a6246fb800e4086b4688f4e9b3978105dfbe74dd96a742172624c904f3fb6b45c26fbf52f5aed77e52ca10ff3d38a94e01d1f7", 0xc5}, {&(0x7f0000000380)="4d6efbae637d1d365220f93c19e0d7290d4adc93f4a7cb0a591256d494b1ce4319b2844c6e59b1613942a2ec7eaba33e", 0x30}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000480)="94efeec845d42225ee445d1269bc24509de29f440bc2b6f0aa233f54527b652dd5ac836d33146aef350f19c42cb4b2820fd942a4381907611b", 0x39}, {&(0x7f00000004c0)="126399e8ed7b", 0x6}, {&(0x7f0000000500)="255f9496c5e5c6028f7d30ffbadb50ec5a99145c90d7d3f420e4290cc78d63b7e9e65ed4ed7ae65216f0dd6c8a3f6d1b8793", 0x32}], 0x6) writev(r1, &(0x7f00000006c0)=[{&(0x7f00000003c0)="7ed589fe0830dca5df4b3fc621dfa97aa2601e9e5cd0d1a807e196ddaeb6e29fc8ca593b6269c199d1b008b1cdd00f645c11f2647fadce7eb4d045889d1ec42c70518ac039248e4544f537957a69a36cc7fcadcc7d8a0859ec4888bc6f4b2988a3dfef5a14d81db23c37393f1aae77c7f8990065529f9cfe521cdd048a10fbb0fc425eac93a343abed727726", 0x8c}], 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)='P', &(0x7f0000000740), 0x800000, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r0}, 0x38) 2.636334976s ago: executing program 9 (id=1127): unshare(0x26020480) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) preadv(r0, 0x0, 0x0, 0x9, 0x5) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000bc0)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xfffffeb9}, {0x4c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_RATE64={0x0, 0x8, 0xe1875e58c4a35f6d}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x2, 0x800, 0x80000001}}]}}}]}, 0x7c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCADDRT(r12, 0x890b, &(0x7f0000000080)={0x0, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @isdn={0x22, 0x4, 0xc, 0xd6, 0xf}, @ethernet={0x306, @random="1a4eb95bd574"}, 0x0, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x2, 0x5, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) 2.549296221s ago: executing program 1 (id=1128): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x68000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 2.54888028s ago: executing program 5 (id=1129): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000006c0)=ANY=[@ANYBLOB='X'], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x80) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x3000)=nil) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x20, 0x9, @remote, 0x9}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="b767", 0x2, 0x2000010, &(0x7f0000000140)={0xa, 0x4e24, 0x2, @private1, 0x1}, 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000100)={'veth0_to_bridge\x00', {0x2, 0x0, @initdev}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) ioctl$FS_IOC_RESVSP(r2, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x1, 0x3, 0x401, 0x2000000}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x41f, @local, 0x401}, @in6={0xa, 0x4e22, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb4}, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x78cc}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e21, 0x6, @empty, 0x400}, @in6={0xa, 0x4e24, 0x40, @mcast1, 0x1ff}, @in={0x2, 0x4e20, @empty}], 0xbc) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000680001002dbd70000000008000000200000000000c00088008000600ffff0000240002000100000005000000000000008000000002"], 0x48}}, 0x44010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.422415398s ago: executing program 1 (id=1131): socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x1, 0x0) socket(0xa, 0x1, 0x0) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x4b70, 0x13582, 0x3}, 0x0, 0x0) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9605, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 2.21496139s ago: executing program 1 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_io_uring_setup(0x746d, &(0x7f0000000000)={0x0, 0x6e0, 0x200, 0x0, 0x117}, &(0x7f0000000080), &(0x7f00000000c0)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_access(r3, 0x0, 0x53) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef00"], 0x24}}, 0x0) 2.150657524s ago: executing program 7 (id=1134): newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8971, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x34, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}}, 0x0) (fail_nth: 7) 1.275887565s ago: executing program 4 (id=1143): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x3b) semget$private(0x0, 0x4, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'macvtap0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xfffffffffffffe6c}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r5 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r5, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000791201000000000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x810000, &(0x7f0000000580), 0x0, 0x556, &(0x7f00000005c0)="$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") 1.275285565s ago: executing program 9 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c00000019000100000000000000000002100000"], 0x1c}}, 0x8004) 1.268478236s ago: executing program 1 (id=1145): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8604, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xc, 0x6}, 0x0, 0x10000, 0x80, 0x0, 0x8, 0x9, 0x46, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) memfd_create(0x0, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0xffffffc1) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r11, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 1.179693371s ago: executing program 7 (id=1146): memfd_secret(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x5}, 0x26, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) io_setup(0x7, 0x0) inotify_init1(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x25, 0x3, 0x100000) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000893edff463677738b31e78a6586d2c051edf2ce7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) getdents(r0, &(0x7f0000000240)=""/105, 0x69) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.160761542s ago: executing program 9 (id=1147): r0 = io_uring_setup(0x2645, &(0x7f00000001c0)={0x0, 0x37db, 0x1000, 0x2, 0x33b}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x23, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') getdents(r3, &(0x7f0000000f80)=""/4088, 0xff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x100000001, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000180), 0x1) setxattr$incfs_id(&(0x7f00000010c0)='.\x00', &(0x7f0000001100), 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006a0001002abd70009595df250a00000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x60}, 0x1, 0x0, 0x0, 0x4008091}, 0x24004001) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) r6 = open(&(0x7f0000000480)='.\x00', 0x68800, 0x101) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 1.097088206s ago: executing program 4 (id=1148): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x68000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) 1.0320553s ago: executing program 4 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x4c, r1, 0x1, 0x1400, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x2000000, 0x0, 0x40000}, 0x4800) 1.03106798s ago: executing program 4 (id=1150): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c40ef000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x7) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x5, 0xa555, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7fff, 0x2}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x298bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000018000100ffff95ff000000000ab28f0a434d228afcd98dfc5ef05cf429000000000000000000810000000001000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4048080) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0xc, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x800001ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1a, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x8, 0x0, 0x0) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x300, 0x8, 0x5, 0x200, &(0x7f0000003c40)="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"}) 789.522404ms ago: executing program 5 (id=1151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef00"], 0x24}}, 0x0) 704.098869ms ago: executing program 5 (id=1152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd705b000000000400000008005017020005e0ffffff0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf251000000008003b000300000008000600", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x4040000) 623.700614ms ago: executing program 5 (id=1153): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="01000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000400)="63eced8e460100000001acf12a04", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000003c0), 0x4800, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f00000002c0)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000000000000000000007000000830b040a1c01027f0000010000", @ANYRESOCT=r6], 0x40}, 0x0) r7 = open_tree(r5, &(0x7f00000008c0)='./file0\x00', 0x89101) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x58, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000940)={r7, r5, 0xc, 0x0, @val=@tracing={r8, 0xfffffffffffffbff}}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x34, &(0x7f0000000ac0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0bd}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf934}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @alu={0x4, 0x1, 0x6, 0x6, 0xa, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xc2, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x5, 0xe0000000}, 0x10, 0x13de4, 0xffffffffffffffff, 0xa, &(0x7f0000000700)=[r1, r1, r1, 0xffffffffffffffff, r5, r1, r1, r1, r1, r1], &(0x7f0000000740)=[{0x1, 0x3, 0xf, 0xb}, {0x2, 0x1, 0x3}, {0x4, 0x5, 0x6, 0x4}, {0x2, 0x4, 0x2, 0x3}, {0x4, 0x1, 0x4, 0x8}, {0x3, 0x4, 0x4, 0x9}, {0x0, 0x3, 0xf, 0x9}, {0x2, 0x2, 0xe}, {0x4, 0x3, 0x10, 0x5}, {0x1, 0x3, 0x8, 0xa}]}, 0x94) 623.084754ms ago: executing program 5 (id=1154): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff07002321008cb89e08f088a8", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x3, r3, 0x0}]) r4 = inotify_init1(0x80000) r5 = inotify_add_watch(r4, &(0x7f00000014c0)='./file0\x00', 0xa4000d98) r6 = dup(r4) inotify_rm_watch(r6, r5) inotify_rm_watch(r3, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2810008, &(0x7f0000000e40)={[], [{@seclabel}, {@context={'context', 0x3d, 'root'}}, {@smackfsroot={'smackfsroot', 0x3d, '@{+'}}, {@uid_lt}, {@obj_role={'obj_role', 0x3d, ':$!'}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@appraise_type}, {@dont_hash}]}, 0xff, 0x531, &(0x7f0000000640)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kexec_load(0x7ffe, 0x0, 0x0, 0x280000) 390.558907ms ago: executing program 4 (id=1155): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x0, 0xe52}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0), 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002000000000000000000000000000000010000000a"], 0x30}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010023484af53b607cc707000000080001"], 0x2c}}, 0x0) 359.386539ms ago: executing program 4 (id=1156): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x6ed5, &(0x7f0000001dc0)={0x0, 0xaf69, 0x400, 0x3, 0x1ce}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001e40)=[0xfffffff9, 0x2], 0x2) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_TABLE(r2, 0x112, 0xcf, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x7ff, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffa}]}) munlock(&(0x7f0000f1e000/0x1000)=nil, 0x1000) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r8, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x3}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000080)=0x10, 0x80000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) cachestat(r9, &(0x7f00000001c0)={0x6}, &(0x7f0000000200), 0x0) 263.482255ms ago: executing program 7 (id=1157): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c00000019000100000000000000000002100000"], 0x1c}}, 0x8004) 212.100597ms ago: executing program 7 (id=1158): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000091106a000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newchain={0x1900, 0x64, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x5}, {0xfff2, 0xd}, {0x5, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x4, 0xf9}}, @filter_kind_options=@f_route={{0xa}, {0x18a8, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xd1}, @TCA_ROUTE4_POLICE={0x410, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xa, 0xf, 0x5, 0x1, 0x5, 0x2, 0x8, 0x5, 0x8300000, 0xfffffffe, 0xcafa, 0x7fffffff, 0x1, 0x10001, 0x400, 0x0, 0x80000000, 0x2, 0x40000000, 0x6, 0xfff, 0x5, 0x8, 0xd30, 0x8000, 0x0, 0xffffff4c, 0x3, 0xd, 0x5, 0x0, 0x5e0, 0x13ce, 0x1e17, 0x0, 0x5, 0x2, 0x5, 0x5, 0x5, 0xd5ed, 0x4e89, 0x833, 0x5, 0x70, 0xb04f, 0x7fff, 0xe, 0x72, 0x7, 0x2, 0x7, 0x6, 0x1, 0xfffffc01, 0xffffffff, 0x80000000, 0xfffffff7, 0x3, 0x6, 0x800, 0x0, 0x4316, 0x8, 0x8b9a, 0x55d, 0x10, 0x3, 0x5, 0x8, 0x8, 0x8, 0xfe000000, 0x8, 0x4, 0x3, 0x4, 0x6, 0x7fff, 0x9, 0x4, 0x2, 0x7ff, 0x800, 0xd6, 0x800, 0x7, 0x7, 0x1, 0xf330, 0x681, 0x8001, 0x1ff, 0x9, 0x297, 0xf, 0x3, 0x80000001, 0x800, 0x7ff, 0x2, 0x0, 0x1, 0xfffffffb, 0x6, 0x9a, 0x5, 0x2dc, 0x7, 0x6, 0x4, 0x80000001, 0x77f, 0x1, 0x2, 0x4, 0x2, 0x9, 0x2a5c36b5, 0x7, 0x6, 0x3, 0x10e4, 0xd3ea, 0x3220b71a, 0x4, 0x9, 0x3, 0x5, 0x4, 0x2, 0xffffffff, 0x10, 0x4cf, 0x4, 0xffffffff, 0xf9d, 0x200, 0x7fffffff, 0x80, 0x1000, 0xffffffff, 0x1, 0x80000001, 0x2e3, 0x0, 0xf, 0x8001, 0x37a, 0x1, 0x8, 0xfca, 0xae52, 0x9, 0x8, 0x79b4, 0x700000, 0xb82b3db6, 0x7, 0x200, 0x3, 0x9, 0xfffff801, 0x4, 0x6, 0x6, 0x2, 0x9, 0x2, 0x4e, 0x7664, 0x10000, 0x1, 0x4a5d, 0x497a, 0x2, 0xd, 0x98, 0x2, 0x8, 0x2, 0x9, 0xffff0000, 0x4, 0x100, 0x2, 0x9, 0x6, 0x8, 0x2198bbe, 0x5b, 0x5, 0x401, 0x2, 0x1ff, 0x7, 0x7, 0x2, 0x3, 0x28a, 0x0, 0x1ff, 0x1, 0x51, 0xc, 0x7, 0x3, 0xffff, 0x9, 0xffffffff, 0xb51, 0x7fffffff, 0x1, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x80000000, 0x7, 0x9, 0xffffffff, 0x9, 0x8, 0x80, 0xc210, 0x0, 0x4, 0x5, 0xfffff9d9, 0x979, 0x0, 0xfffffffb, 0x4, 0x2, 0x6, 0x3, 0x5, 0x3, 0x7fff, 0x8000, 0x9, 0x8, 0x6, 0xa, 0x482, 0xffff0a9f, 0x2, 0x3, 0x1, 0xe, 0x14, 0x6, 0xaf4c3b6]}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x22}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xf}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xc}}, @TCA_ROUTE4_POLICE={0x824, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffff, 0x7, 0x1000, 0x3, 0xaa, 0xfffff2ff, 0x5, 0x0, 0x100, 0x8, 0x3ff, 0x890, 0x7, 0x400, 0x5, 0x30, 0x80000001, 0x2, 0x9, 0x3, 0x5, 0x6, 0xfffff477, 0x400, 0x4, 0x36, 0x4, 0xa, 0x7, 0x10000, 0x5, 0x4, 0x9, 0x6, 0x8, 0x3, 0x7, 0xfff, 0x8000, 0x5, 0x7ff, 0x9, 0xfffffff6, 0x3, 0x7, 0x5, 0xa, 0x6, 0xfffffff9, 0x2, 0x9, 0x2, 0x2, 0x3, 0x7, 0x3, 0x6c0b, 0xfffff800, 0x5, 0x9, 0x0, 0x9, 0x5, 0x58, 0x6, 0x6, 0x1, 0x81, 0x1, 0xf5, 0xf, 0x6, 0x1ff, 0x400, 0x7ff, 0x3ff, 0xfffffff7, 0x0, 0xa0000000, 0x9, 0x3ff, 0x7fff, 0x1, 0x9, 0x9, 0x3, 0x3, 0x9, 0x607b, 0x8, 0x1d3, 0xffffffff, 0xffff, 0x4, 0x5, 0x2, 0xffff, 0x6, 0x10000, 0x3, 0x6, 0x401, 0x3, 0x8, 0x9, 0x8e, 0x100, 0xf5, 0x0, 0x10000, 0x9, 0x5, 0xfffffe01, 0x8, 0x1, 0x8, 0xffffffff, 0x3, 0x7, 0x401, 0x100, 0x2, 0x4, 0x8, 0x0, 0x7, 0x1, 0xc, 0x1ff, 0x4, 0x6, 0x6, 0xb, 0x5, 0x4, 0xffffffff, 0x9, 0x81, 0x5, 0x8000, 0x6, 0x919, 0x7ff, 0xfffffff5, 0xfffffff9, 0x3, 0x6, 0x9, 0x2, 0x6, 0x4, 0x9, 0x7, 0x38, 0x3, 0x2, 0x10000, 0x5, 0xffffffdf, 0x1, 0x6, 0x4, 0x6, 0x7, 0x97, 0x9, 0xc9e, 0x4, 0x6, 0x8001, 0x82b6, 0xfffffffb, 0xf17, 0x8, 0x3, 0x520ea776, 0x81, 0x4, 0x8, 0x8001, 0x4, 0x5, 0x5, 0x400, 0x0, 0xc8, 0x6, 0x397, 0xe412, 0xa, 0x1, 0xffffc582, 0xac1, 0x200, 0x8, 0x6, 0x8, 0x3ff, 0x3, 0x4, 0xbb, 0x5, 0xbe2, 0x1, 0x681d, 0x8, 0x81, 0xdb6, 0x401, 0x5, 0x1, 0x7, 0x4, 0x2, 0x7, 0x8, 0x1, 0x7, 0x0, 0x5, 0x6, 0x8001, 0x1, 0xffffffff, 0x9, 0x0, 0x0, 0x5, 0x2, 0x1ff, 0x2, 0x5, 0x6a91c606, 0x2, 0x5, 0x3, 0x1, 0x1, 0xffff6291, 0x80000000, 0xffffb72d, 0x5, 0xffffffff, 0x7, 0x6, 0x800, 0xfff, 0x5, 0x40e, 0x9aa8, 0xfffffff9, 0x8, 0x63, 0x9, 0x81, 0x95]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc, 0x7, 0x1, 0x6, 0x0, 0x9, 0xffff, 0xbd, 0x20, 0x36b9, 0x8, 0x101, 0x7, 0x1, 0x0, 0x3, 0x2bd3, 0x0, 0x9, 0x8, 0x9, 0x5, 0x3, 0x1, 0x1000, 0xfffff2d8, 0x8, 0x1, 0xfffffffc, 0x1e4, 0x4, 0x80, 0x101, 0x4, 0x18b, 0xfffffff8, 0x0, 0x40, 0x5, 0x0, 0x6, 0x3, 0x80000001, 0xffff8001, 0x10000, 0x1, 0x4, 0xfffffff9, 0x7, 0x80000001, 0x8, 0xb, 0xfffffffc, 0x8, 0x1a000, 0x23f, 0x1, 0x8, 0x2, 0x8, 0x0, 0x4, 0x1000, 0x5, 0x8, 0x8, 0x0, 0x7, 0x7, 0xc9, 0xda0, 0x5, 0x2, 0x1, 0xd23b, 0x0, 0x240e, 0xb1, 0x80000000, 0x0, 0x5, 0xffffffff, 0xfffffff3, 0x8000000, 0x9, 0x0, 0x2d, 0xf, 0x4, 0x4, 0x0, 0x7, 0x9, 0x3, 0xfffffffb, 0x9, 0x10, 0x8, 0x1, 0xac7, 0xf9, 0x401, 0x4, 0x656, 0xf, 0xa, 0x198d, 0x7, 0x4, 0xd6, 0x4, 0x7fff, 0xffff, 0x1, 0x5, 0x1ff, 0xfffffff4, 0x7, 0xfffffffe, 0x1, 0x3, 0x1000, 0x6, 0x3, 0x84ef, 0x7, 0xffffffff, 0x1ff, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x2, 0x401, 0x7, 0x2, 0x400, 0xf, 0xfffffff8, 0x72, 0x9, 0x5, 0xffffffc8, 0x51, 0x5, 0x401, 0xfffffffa, 0x8, 0x3ff, 0xffffffff, 0x3ff, 0x10001, 0xa0, 0x100, 0xb, 0x20200, 0x1, 0xfffffffb, 0x1e, 0x4, 0x0, 0x8969, 0x4, 0x0, 0xbf2, 0x7, 0x400, 0x0, 0x400, 0x8, 0xc7d, 0x6, 0x8, 0x80, 0x2, 0x4, 0x4d, 0x1, 0x4, 0x7, 0x7ff, 0x8000, 0xe, 0x9582, 0x5, 0xffe00000, 0x8, 0x80, 0x10000, 0x3ea, 0x5, 0x3, 0x5, 0x8, 0xf, 0xffffffa2, 0x8c3, 0x100, 0x8, 0xb0, 0x4, 0x1, 0x5, 0xd9, 0x4eb, 0x22c, 0x57ae, 0x6, 0x9, 0x2, 0x0, 0x10000, 0x8000, 0x61, 0x7, 0xa6f0, 0x5, 0x6, 0x9, 0x40, 0x0, 0x8, 0x401, 0x6, 0x1, 0x1000, 0x0, 0x1, 0x80000000, 0x7, 0x4, 0x80000000, 0x6, 0x4, 0x3, 0x3, 0x3, 0x0, 0x9, 0xe, 0x3, 0x3, 0xf, 0xffffffff, 0x4d, 0xe, 0x0, 0xf5, 0x0, 0xfffffff8, 0x3, 0x0, 0x101, 0xb4, 0x5]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}]}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_POLICE={0xc48, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x2, 0x7fff, 0x9, 0xffffffff, 0x2, 0x8, 0x10000, 0x7, 0x6, 0xd0, 0x9, 0x7, 0x2, 0x4, 0x8, 0x6, 0x80000001, 0x7, 0x10001, 0xffffff80, 0xc, 0x7, 0x80000000, 0x5c2, 0x5, 0xbc1, 0x1, 0x5, 0x694, 0x80000000, 0x18000000, 0x83, 0x9, 0x10000, 0x0, 0xd01, 0x3, 0x5, 0xba41, 0x3ff, 0xe9, 0x1c0, 0xf, 0xffff, 0x27a, 0xffffffff, 0x8, 0x12fe, 0x3ff, 0x0, 0x6, 0x3, 0x101, 0x4dd, 0x8, 0x5, 0x2, 0x80000001, 0x1, 0x53408000, 0x1, 0xe, 0x70, 0x2, 0xc000000, 0x3, 0x7, 0x0, 0x9, 0x3, 0x8, 0x9, 0x80000000, 0x7ff, 0xfffffffd, 0x7, 0x7, 0x7, 0x8000, 0x5, 0x3, 0x80000000, 0x9, 0x6, 0x3, 0x1, 0x5, 0xfff, 0x7, 0x101, 0xfffffeff, 0x7f, 0x1, 0x8, 0x6, 0x3, 0xca, 0x7, 0x0, 0x5f, 0x19080, 0x3, 0x63ff, 0x53b4, 0x5, 0x48d, 0x2, 0x2, 0x2, 0xd, 0xc, 0x6, 0x5b5, 0x2, 0xc, 0x6d7b, 0xa77, 0x5, 0x10c6, 0x101, 0x81, 0x5, 0x9, 0xb03, 0x4, 0x5, 0x10, 0x7, 0x9, 0x2, 0x5, 0x7ff, 0x1, 0x2, 0x7b0, 0xf73c, 0x7, 0x7fff, 0x2, 0xdfb, 0x0, 0x4, 0x2, 0x0, 0x2, 0x9, 0xff7, 0x2, 0x69c5, 0x7, 0x7, 0x80, 0x8, 0xe4a9, 0x10, 0x6, 0x64bd, 0x8, 0xf696, 0xfff, 0xffffffff, 0x908, 0x0, 0x8, 0x1, 0x1000, 0x10000, 0x690a, 0x8, 0x1, 0x0, 0x8, 0x7, 0x40, 0x1000, 0x1ff, 0xff, 0x9, 0x33b, 0x8, 0x8, 0x6, 0xecda, 0x6, 0x4, 0x9, 0x1, 0x8, 0x0, 0x8b9, 0x0, 0x3, 0x3, 0x0, 0x5, 0xffff, 0x8, 0x200000, 0x0, 0x9e7, 0x2, 0x2, 0x8, 0x9, 0x4, 0xffffffff, 0x6, 0x10000, 0x80, 0x81, 0x8000, 0x7, 0x2, 0x0, 0x9, 0xe, 0x2, 0x4, 0x6, 0x2, 0x1, 0x5, 0x1, 0x9, 0xe31, 0x6, 0x9, 0x3, 0x8, 0x9, 0x1ff, 0xfffffff7, 0x8e5, 0xfffffffa, 0x4, 0x698d, 0x7, 0x3, 0xfffffdbb, 0x4, 0x1, 0x5, 0x5, 0x0, 0x6, 0x2, 0x5, 0x200, 0x2, 0x6, 0x9, 0x8000, 0x6, 0x7, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x101, 0xfffffffc, 0x4, 0x7, 0x1, 0x8001, 0x6, 0x1, 0x7, 0x4, 0x8000, 0x9, 0x2, 0x5, 0x8, 0x0, 0x9, 0x7d39f6c6, 0x1, 0xfffffffa, 0x2, 0x6, 0x0, 0x9, 0x5, 0x0, 0x1a, 0xfffffff8, 0x50000000, 0x40000, 0x800, 0x4, 0x80, 0x8, 0x1, 0x69e8000, 0x6, 0x1, 0x0, 0x5, 0x7561, 0x80000000, 0xb3b, 0x0, 0xfff, 0x9, 0x800, 0x10000, 0x1000, 0x5, 0x2dd3, 0xfffffffb, 0x619, 0x40, 0x4cbf, 0x4, 0x6, 0x8, 0x7, 0x4, 0x2, 0x8, 0x2, 0x7, 0x7fffffff, 0x6, 0x4, 0xfffffff7, 0x3c, 0xfffffffe, 0x0, 0x5, 0x101, 0x7, 0x7fffffff, 0xc, 0xfffff001, 0x0, 0x3, 0x8970edf, 0x8, 0xb3e, 0x4, 0xd29, 0x6, 0x4, 0x1, 0x44c63529, 0x0, 0x7, 0x8, 0xfa, 0x48b9, 0xffffffff, 0x5, 0x7, 0x200, 0x7, 0xe, 0x1, 0xa7f, 0x7ff, 0x1, 0x7, 0x4, 0x0, 0xfffffff8, 0x7ff, 0x9c81, 0x6, 0xfe8, 0xffff, 0x7, 0x8, 0x7f, 0x3, 0x1, 0x7, 0xfffffff7, 0x4, 0x7, 0xfffff000, 0x1, 0x4647, 0x8, 0xedc, 0x6, 0xb8f, 0x0, 0x10001, 0x48, 0x1, 0x74507afd, 0x3, 0x40, 0x7, 0x3, 0xfffffffd, 0xb, 0x0, 0x3, 0x3ff, 0x0, 0xa, 0x5539, 0x7, 0x0, 0x3c, 0x9, 0x0, 0x5, 0x5, 0x93, 0x3, 0x5, 0x3, 0x4, 0xf57, 0x10000, 0x7, 0xfffffffc, 0x9, 0x3, 0xc3, 0xd, 0x4, 0x5, 0x38bb0df3, 0x7fff, 0x1ff, 0x10000, 0x80000000, 0x0, 0x81, 0x81, 0x40, 0x401, 0x4, 0x0, 0x5, 0x24000, 0x9, 0x4, 0x61, 0x80, 0x2000200, 0x4, 0x5, 0xf, 0xc, 0x5, 0x0, 0x8001, 0x6, 0x3b0a, 0x6, 0xd, 0x0, 0x2, 0x2, 0x3, 0x1cfe, 0x2, 0x37f, 0x100, 0x9, 0x0, 0xf949e53, 0x8000, 0xfb5, 0x4, 0x71, 0x2d, 0x1, 0x10, 0x1, 0x96a5, 0x3, 0x4, 0x3, 0x3, 0xa32, 0x10d, 0xffffff01, 0x0, 0x1ff, 0x10000, 0x8, 0x5, 0x2, 0xffffe8c5, 0xfffffffd, 0x8, 0x8f, 0x9, 0xd, 0x5, 0xe, 0x2, 0x9, 0x3, 0x2, 0x3, 0x6, 0xffff, 0x5, 0xec52, 0xfffffff8, 0xd, 0x1, 0x8, 0x0, 0x101, 0x1, 0x3, 0xbf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xffffff01}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf, 0x0, 0x7f, 0x100, 0x6, 0x1, 0x7ff, 0x10000, 0x4, 0x1e37, 0x3f2dd699, 0x5, 0x7a, 0xc, 0x4fcf7973, 0xdf, 0xfffffffc, 0x4, 0x4, 0x711, 0x80000001, 0xfffffffc, 0xff, 0x1, 0x9, 0xffffffff, 0x5, 0x1, 0x0, 0xad, 0x6, 0x8001, 0x1000, 0x7, 0x7, 0x9, 0xa, 0x4, 0xe, 0x5, 0x5, 0x0, 0x7, 0x3, 0x0, 0xf0000000, 0xe7, 0x7fffffff, 0x8, 0x0, 0x7abf4160, 0x1, 0x1, 0x250f, 0x2c1300, 0x5, 0x3, 0x5, 0x800, 0xe5a, 0x6, 0x0, 0x36a2, 0x4, 0x4, 0x81, 0xffffffff, 0x1, 0x2, 0xe1ef, 0x8, 0xffff, 0x0, 0x0, 0x9, 0x8, 0x5, 0x9, 0x1, 0x14, 0x633e, 0x5, 0x9, 0x9, 0x6, 0x1, 0x8, 0xc, 0x80000000, 0x1, 0x69, 0x2a6eed25, 0x400, 0x9, 0x10000, 0x79c, 0x3, 0x5, 0x80000001, 0x7, 0x401, 0xd, 0xfffffffc, 0x80, 0x0, 0x8, 0x8, 0xf, 0x7, 0x8, 0x9, 0x2, 0x5, 0x8, 0x61c, 0x8, 0x6, 0xd, 0xb, 0xfffffffa, 0x3, 0x0, 0x5, 0x1, 0x4c668197, 0x6, 0x89, 0x2, 0x3, 0x9, 0x74, 0x3f7e, 0x8c5, 0x7, 0x4, 0xfffffffe, 0x10001, 0xffffffff, 0x7, 0x4, 0x5a, 0xffffff16, 0x4, 0x4, 0x9, 0xcfc7, 0x7, 0x1ff, 0x33, 0x6, 0x80000000, 0x7, 0x3, 0x8001, 0x9, 0x8, 0x5, 0x2, 0xdf, 0x80000001, 0x10, 0x3, 0x8, 0xfffffffd, 0xffff, 0x1, 0xfffffffc, 0x5, 0x1, 0x5, 0x80000001, 0x9, 0x6, 0x0, 0x5, 0x8, 0x1ff, 0x6, 0x4, 0x4, 0xf, 0x2, 0x5, 0x7, 0x1967fd57, 0x8, 0x1, 0x8, 0x7, 0x2, 0x7, 0x5, 0x4, 0x5, 0x9, 0xf, 0xfffffff7, 0xe, 0xb3e, 0xfffffff9, 0x74e8, 0xbb, 0xbf, 0x4, 0x7, 0x3, 0x80, 0x7fff, 0xa, 0xfffff801, 0xffffffff, 0x4, 0x8, 0x611, 0x200, 0x6, 0xa4b2, 0x8, 0x23b, 0x7f, 0x4, 0x7, 0x0, 0x7, 0x3, 0x5, 0x6, 0x4, 0x6, 0x800, 0x80000001, 0x8, 0x2, 0x20, 0xb4, 0x2, 0x10, 0x2, 0xffff8001, 0x9, 0x7, 0xc32, 0xfffffe00, 0x3, 0x6, 0x200, 0x4, 0x3, 0x9, 0x0, 0x1a94f19, 0x200, 0x3, 0x500b, 0x0, 0x2]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x10}}, @TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x1900}}, 0x20000) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 7 (id=1159): utimes(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9034, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6a92}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) chdir(&(0x7f0000000000)='./file0\x00') shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) accept$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): e [ 116.349082][ T6299] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #17: comm syz.9.683: casefold flag without casefold feature [ 116.362896][ T6299] EXT4-fs (loop9): Remounting filesystem read-only [ 116.370164][ T6299] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.402841][ T5829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.484632][ T6313] set_capacity_and_notify: 10 callbacks suppressed [ 116.484653][ T6313] loop7: detected capacity change from 0 to 512 [ 116.566621][ T3408] hid-generic 0080:0003:0001.0001: item fetching failed at offset 0/2 [ 116.575636][ T3408] hid-generic 0080:0003:0001.0001: probe with driver hid-generic failed with error -22 [ 116.724375][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.694'. [ 116.790660][ T6339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6339 comm=syz.5.696 [ 116.803365][ T6339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=6339 comm=syz.5.696 [ 116.823893][ T6339] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=6339 comm=syz.5.696 [ 116.876307][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.7.707'. [ 116.930271][ T6346] loop5: detected capacity change from 0 to 512 [ 116.937212][ T6346] EXT4-fs: Ignoring removed i_version option [ 116.943255][ T6346] EXT4-fs: Ignoring removed oldalloc option [ 116.952751][ T6346] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.981009][ T3586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.244262][ T6354] chnl_net:caif_netlink_parms(): no params data found [ 117.291321][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.298489][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.306402][ T6354] bridge_slave_0: entered allmulticast mode [ 117.313026][ T6354] bridge_slave_0: entered promiscuous mode [ 117.320113][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.327333][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.334664][ T6354] bridge_slave_1: entered allmulticast mode [ 117.341560][ T6354] bridge_slave_1: entered promiscuous mode [ 117.362660][ T6354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.373398][ T6354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.420513][ T6354] team0: Port device team_slave_0 added [ 117.427299][ T6354] team0: Port device team_slave_1 added [ 117.474685][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.481806][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.507887][ T6354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.521329][ T6354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.528603][ T6354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.554604][ T6354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.571205][ T6373] loop9: detected capacity change from 0 to 1024 [ 117.586380][ T6373] EXT4-fs: test_dummy_encryption option not supported [ 117.608353][ T6375] FAULT_INJECTION: forcing a failure. [ 117.608353][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 117.621117][ T6375] CPU: 1 UID: 0 PID: 6375 Comm: syz.6.705 Not tainted syzkaller #0 PREEMPT(voluntary) [ 117.621145][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.621194][ T6375] Call Trace: [ 117.621202][ T6375] [ 117.621285][ T6375] __dump_stack+0x1d/0x30 [ 117.621313][ T6375] dump_stack_lvl+0x95/0xd0 [ 117.621413][ T6375] dump_stack+0x15/0x1b [ 117.621436][ T6375] should_fail_ex+0x263/0x280 [ 117.621476][ T6375] should_failslab+0x8c/0xb0 [ 117.621506][ T6375] __kvmalloc_node_noprof+0x148/0x680 [ 117.621594][ T6375] ? bpf_test_run_xdp_live+0x137/0x1360 [ 117.621723][ T6375] ? mutex_unlock+0x4e/0x90 [ 117.621751][ T6375] bpf_test_run_xdp_live+0x137/0x1360 [ 117.621786][ T6375] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 117.621808][ T6375] ? __pfx_autoremove_wake_function+0x10/0x10 [ 117.621905][ T6375] ? mutex_unlock+0x4e/0x90 [ 117.621932][ T6375] ? 0xffffffffa02054c0 [ 117.621947][ T6375] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 117.622048][ T6375] ? 0xffffffffa02054c0 [ 117.622081][ T6375] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 117.622112][ T6375] bpf_prog_test_run_xdp+0x57b/0xa10 [ 117.622151][ T6375] ? __rcu_read_unlock+0x4e/0x70 [ 117.622245][ T6375] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 117.622289][ T6375] bpf_prog_test_run+0x204/0x340 [ 117.622323][ T6375] __sys_bpf+0x4c0/0x7b0 [ 117.622424][ T6375] __x64_sys_bpf+0x41/0x50 [ 117.622453][ T6375] x64_sys_call+0x28e1/0x3000 [ 117.622485][ T6375] do_syscall_64+0xc0/0x2a0 [ 117.622535][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.622563][ T6375] RIP: 0033:0x7fe94504aeb9 [ 117.622582][ T6375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.622601][ T6375] RSP: 002b:00007fe943aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 117.622655][ T6375] RAX: ffffffffffffffda RBX: 00007fe9452c5fa0 RCX: 00007fe94504aeb9 [ 117.622674][ T6375] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 117.622691][ T6375] RBP: 00007fe943aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 117.622730][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.622747][ T6375] R13: 00007fe9452c6038 R14: 00007fe9452c5fa0 R15: 00007ffc0e209dd8 [ 117.622831][ T6375] [ 117.663206][ T6354] hsr_slave_0: entered promiscuous mode [ 117.969263][ T6354] hsr_slave_1: entered promiscuous mode [ 117.982646][ T6354] debugfs: 'hsr0' already exists in 'hsr' [ 117.985183][ T6388] loop7: detected capacity change from 0 to 1024 [ 117.988470][ T6354] Cannot create hsr debugfs directory [ 118.038754][ T6388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.039989][ T6383] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.058604][ T6383] IPv6: NLM_F_CREATE should be set when creating new route [ 118.071197][ T6388] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.088518][ T6388] loop7: detected capacity change from 0 to 1024 [ 118.196894][ T6396] loop9: detected capacity change from 0 to 1024 [ 118.236388][ T6396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.262071][ T6405] loop6: detected capacity change from 0 to 256 [ 118.292814][ T6405] FAT-fs (loop6): Directory bread(block 64) failed [ 118.301395][ T6405] FAT-fs (loop6): Directory bread(block 65) failed [ 118.304165][ T6353] loop5: detected capacity change from 0 to 2048 [ 118.330580][ T6405] FAT-fs (loop6): Directory bread(block 66) failed [ 118.349685][ T5829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.375282][ T6405] FAT-fs (loop6): Directory bread(block 67) failed [ 118.384180][ T6405] FAT-fs (loop6): Directory bread(block 68) failed [ 118.391857][ T6405] FAT-fs (loop6): Directory bread(block 69) failed [ 118.417329][ T6405] FAT-fs (loop6): Directory bread(block 70) failed [ 118.424553][ T6405] FAT-fs (loop6): Directory bread(block 71) failed [ 118.433950][ T6405] FAT-fs (loop6): Directory bread(block 72) failed [ 118.441128][ T6405] FAT-fs (loop6): Directory bread(block 73) failed [ 118.496443][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.718'. [ 118.559941][ T6419] loop5: detected capacity change from 0 to 164 [ 118.579423][ T6419] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 118.585489][ T6354] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.612562][ T6354] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.627974][ T6428] loop9: detected capacity change from 0 to 1024 [ 118.634812][ T6354] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.642326][ T6428] EXT4-fs: inline encryption not supported [ 118.654659][ T6354] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.682625][ T6428] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.736598][ T6428] netlink: 'syz.9.720': attribute type 4 has an invalid length. [ 118.762776][ T6449] FAULT_INJECTION: forcing a failure. [ 118.762776][ T6449] name failslab, interval 1, probability 0, space 0, times 0 [ 118.776129][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.5.722 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.776278][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.776296][ T6449] Call Trace: [ 118.776305][ T6449] [ 118.776315][ T6449] __dump_stack+0x1d/0x30 [ 118.776433][ T6449] dump_stack_lvl+0x95/0xd0 [ 118.776463][ T6449] dump_stack+0x15/0x1b [ 118.776513][ T6449] should_fail_ex+0x263/0x280 [ 118.776564][ T6449] should_failslab+0x8c/0xb0 [ 118.776597][ T6449] kmem_cache_alloc_noprof+0x68/0x490 [ 118.776628][ T6449] ? skb_clone+0x151/0x1f0 [ 118.776650][ T6449] skb_clone+0x151/0x1f0 [ 118.776713][ T6449] pfkey_sendmsg+0x2cc/0x9b0 [ 118.776757][ T6449] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 118.776787][ T6449] ____sys_sendmsg+0x5af/0x600 [ 118.776818][ T6449] ___sys_sendmsg+0x195/0x1e0 [ 118.776931][ T6449] __x64_sys_sendmsg+0xd4/0x160 [ 118.777029][ T6449] x64_sys_call+0x17ba/0x3000 [ 118.777141][ T6449] do_syscall_64+0xc0/0x2a0 [ 118.777186][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.777215][ T6449] RIP: 0033:0x7f17b06daeb9 [ 118.777231][ T6449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.777330][ T6449] RSP: 002b:00007f17af137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.777407][ T6449] RAX: ffffffffffffffda RBX: 00007f17b0955fa0 RCX: 00007f17b06daeb9 [ 118.777448][ T6449] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000005 [ 118.777543][ T6449] RBP: 00007f17af137090 R08: 0000000000000000 R09: 0000000000000000 [ 118.777557][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.777570][ T6449] R13: 00007f17b0956038 R14: 00007f17b0955fa0 R15: 00007ffc10b0e358 [ 118.777607][ T6449] [ 118.881430][ T6354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.011642][ T6460] can0: slcan on ttyS3. [ 119.019764][ T5829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.034447][ T6354] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.066712][ T6460] can0 (unregistered): slcan off ttyS3. [ 119.082315][ T6460] can0: slcan on ttyS3. [ 119.104090][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.111379][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.141506][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.148724][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.176284][ T6460] batman_adv: batadv0: Adding interface: ipvlan2 [ 119.182668][ T6460] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.208097][ T6460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.218710][ T6460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.243979][ T6460] batman_adv: batadv0: Interface activated: ipvlan2 [ 119.256846][ T6481] sctp: [Deprecated]: syz.9.726 (pid 6481) Use of int in maxseg socket option. [ 119.256846][ T6481] Use struct sctp_assoc_value instead [ 119.330377][ T6489] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 119.339293][ T6459] can0 (unregistered): slcan off ttyS3. [ 119.354281][ T6489] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #15: comm syz.9.728: corrupted in-inode xattr: e_value out of bounds [ 119.390550][ T6489] EXT4-fs (loop9): Remounting filesystem read-only [ 119.415366][ T6489] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.433639][ T6354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.484311][ T6489] netlink: 'syz.9.728': attribute type 2 has an invalid length. [ 119.507599][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.9.728'. [ 119.558509][ T5829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.622675][ T6528] netlink: 4 bytes leftover after parsing attributes in process `syz.9.733'. [ 119.686660][ T6531] ext4: Unknown parameter 'noacl' [ 119.837848][ T6550] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.876534][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 119.876550][ T29] audit: type=1326 audit(1769988055.192:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 119.941235][ T29] audit: type=1326 audit(1769988055.222:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 119.965051][ T29] audit: type=1326 audit(1769988055.222:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 119.988547][ T29] audit: type=1326 audit(1769988055.222:3333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 120.012060][ T29] audit: type=1326 audit(1769988055.222:3334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 120.035397][ T29] audit: type=1326 audit(1769988055.222:3335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 120.059108][ T29] audit: type=1326 audit(1769988055.222:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6558 comm="syz.7.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 120.082558][ T29] audit: type=1326 audit(1769988055.232:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94504aeb9 code=0x7ffc0000 [ 120.106379][ T29] audit: type=1326 audit(1769988055.232:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe94504aeb9 code=0x7ffc0000 [ 120.129925][ T29] audit: type=1326 audit(1769988055.232:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6562 comm="syz.6.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe94504aeb9 code=0x7ffc0000 [ 120.167898][ T6563] syzkaller0: entered promiscuous mode [ 120.173531][ T6563] syzkaller0: entered allmulticast mode [ 120.200337][ T6354] veth0_vlan: entered promiscuous mode [ 120.313034][ T5829] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.381756][ T6354] veth1_vlan: entered promiscuous mode [ 120.435115][ T6354] veth0_macvtap: entered promiscuous mode [ 120.459147][ T3408] hid-generic 0080:0003:0001.0002: unknown main item tag 0x0 [ 120.466760][ T3408] hid-generic 0080:0003:0001.0002: unknown main item tag 0x0 [ 120.512213][ T3408] hid-generic 0080:0003:0001.0002: hidraw0: HID v0.03 Device [syz0] on syz1 [ 120.588148][ T6591] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.600547][ T6354] veth1_macvtap: entered promiscuous mode [ 120.616234][ T6591] EXT4-fs (loop5): 1 truncate cleaned up [ 120.635391][ T6591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.664186][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.740030][ T6354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.767957][ T417] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.769247][ T417] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.769305][ T417] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.769397][ T417] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.786958][ T6616] ext2: Unknown parameter 'smackfshat' [ 120.847437][ T3586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.849512][ T6615] tipc: Started in network mode [ 120.849604][ T6615] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 120.849621][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 121.075893][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.760'. [ 121.198430][ T6656] FAT-fs (loop4): Directory bread(block 64) failed [ 121.205636][ T6656] FAT-fs (loop4): Directory bread(block 65) failed [ 121.213841][ T6659] ext4: Bad value for 'barrier' [ 121.228884][ T6656] FAT-fs (loop4): Directory bread(block 66) failed [ 121.229471][ T6641] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 121.255578][ T6656] FAT-fs (loop4): Directory bread(block 67) failed [ 121.278177][ T6656] FAT-fs (loop4): Directory bread(block 68) failed [ 121.281498][ T6630] EXT4-fs: Ignoring removed oldalloc option [ 121.313037][ T6656] FAT-fs (loop4): Directory bread(block 69) failed [ 121.332092][ T6666] EXT4-fs: Ignoring removed nobh option [ 121.342762][ T6656] FAT-fs (loop4): Directory bread(block 70) failed [ 121.356421][ T6630] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 121.371960][ T6656] FAT-fs (loop4): Directory bread(block 71) failed [ 121.394467][ T6666] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 121.405641][ T6656] FAT-fs (loop4): Directory bread(block 72) failed [ 121.412217][ T6656] FAT-fs (loop4): Directory bread(block 73) failed [ 121.450187][ T6674] EXT4-fs: Ignoring removed nobh option [ 121.457655][ T6630] EXT4-fs error (device loop9): ext4_iget_extra_inode:5073: inode #11: comm syz.9.757: corrupted in-inode xattr: invalid ea_ino [ 121.484271][ T6666] EXT4-fs (loop6): 1 truncate cleaned up [ 121.501452][ T6666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.506238][ T6630] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.757: couldn't read orphan inode 11 (err -117) [ 121.548803][ T6674] ext4 filesystem being mounted at /196/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.700526][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.766615][ T6694] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 121.793782][ T3601] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 121.809486][ T3601] EXT4-fs (loop6): Remounting filesystem read-only [ 121.833595][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 121.916860][ T6708] netlink: 68 bytes leftover after parsing attributes in process `syz.4.774'. [ 122.000453][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.781'. [ 122.130803][ T3495] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.153836][ T6746] netlink: 'syz.5.784': attribute type 13 has an invalid length. [ 122.195964][ T6746] gretap0: refused to change device tx_queue_len [ 122.225726][ T6746] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 122.243950][ T3495] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.304360][ T3495] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.347344][ T6765] netlink: 'syz.7.787': attribute type 1 has an invalid length. [ 122.359187][ T6764] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 122.435947][ T3495] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.462073][ T6764] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43028 sclass=netlink_route_socket pid=6764 comm=syz.5.788 [ 122.505411][ T6771] set_capacity_and_notify: 12 callbacks suppressed [ 122.505432][ T6771] loop7: detected capacity change from 0 to 1024 [ 122.558455][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.789'. [ 122.567412][ T6779] tipc: Invalid UDP bearer configuration [ 122.567427][ T6779] tipc: Enabling of bearer rejected, failed to enable media [ 122.595626][ T3495] bridge_slave_1: left allmulticast mode [ 122.601347][ T3495] bridge_slave_1: left promiscuous mode [ 122.607146][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.616749][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 122.645858][ T3495] bridge_slave_0: left allmulticast mode [ 122.651582][ T3495] bridge_slave_0: left promiscuous mode [ 122.657738][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.675315][ T6771] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 122.683508][ T6771] System zones: 0-1, 3-36 [ 122.901254][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.911877][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.923914][ T3495] bond0 (unregistering): Released all slaves [ 122.932510][ T3495] bond1 (unregistering): Released all slaves [ 122.950886][ T6756] tc_dump_action: action bad kind [ 123.023245][ T6823] loop4: detected capacity change from 0 to 512 [ 123.050283][ T6823] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.068198][ T3495] hsr_slave_0: left promiscuous mode [ 123.074933][ T6827] can: request_module (can-proto-0) failed. [ 123.082237][ T3495] hsr_slave_1: left promiscuous mode [ 123.096601][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.104057][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.158152][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.165714][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.185330][ T6823] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.209088][ T3495] veth1_macvtap: left promiscuous mode [ 123.214795][ T3495] veth0_macvtap: left promiscuous mode [ 123.220397][ T3495] veth1_vlan: left promiscuous mode [ 123.229077][ T3495] veth0_vlan: left promiscuous mode [ 123.284372][ T6850] loop4: detected capacity change from 0 to 2048 [ 123.293544][ T6846] netlink: 68 bytes leftover after parsing attributes in process `syz.9.794'. [ 123.307191][ T6850] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.313856][ T6850] ext4: Unknown parameter 'dont_hash' [ 123.397598][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 123.407968][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 123.418746][ T417] smc: removing ib device !yz! [ 123.674561][ T6873] FAULT_INJECTION: forcing a failure. [ 123.674561][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.687767][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.9.806 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.687856][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.687872][ T6873] Call Trace: [ 123.687881][ T6873] [ 123.687967][ T6873] __dump_stack+0x1d/0x30 [ 123.687997][ T6873] dump_stack_lvl+0x95/0xd0 [ 123.688021][ T6873] dump_stack+0x15/0x1b [ 123.688044][ T6873] should_fail_ex+0x263/0x280 [ 123.688083][ T6873] should_fail+0xb/0x20 [ 123.688184][ T6873] should_fail_usercopy+0x1a/0x20 [ 123.688226][ T6873] _copy_from_iter+0xcf/0xea0 [ 123.688246][ T6873] ? __alloc_skb+0x397/0x4b0 [ 123.688384][ T6873] ? __alloc_skb+0x219/0x4b0 [ 123.688415][ T6873] netlink_sendmsg+0x4ae/0x6f0 [ 123.688437][ T6873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.688513][ T6873] ____sys_sendmsg+0x5af/0x600 [ 123.688580][ T6873] ___sys_sendmsg+0x195/0x1e0 [ 123.688616][ T6873] __x64_sys_sendmsg+0xd4/0x160 [ 123.688639][ T6873] x64_sys_call+0x17ba/0x3000 [ 123.688730][ T6873] do_syscall_64+0xc0/0x2a0 [ 123.688789][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.688815][ T6873] RIP: 0033:0x7fa7e85eaeb9 [ 123.688835][ T6873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.688859][ T6873] RSP: 002b:00007fa7e7047028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.688885][ T6873] RAX: ffffffffffffffda RBX: 00007fa7e8865fa0 RCX: 00007fa7e85eaeb9 [ 123.688903][ T6873] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 123.688995][ T6873] RBP: 00007fa7e7047090 R08: 0000000000000000 R09: 0000000000000000 [ 123.689007][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.689090][ T6873] R13: 00007fa7e8866038 R14: 00007fa7e8865fa0 R15: 00007ffd0b0e3f68 [ 123.689116][ T6873] [ 123.943380][ T6761] chnl_net:caif_netlink_parms(): no params data found [ 124.001962][ T6891] loop7: detected capacity change from 0 to 256 [ 124.039113][ T6880] tipc: Failed to clone mcast rcv buffer [ 124.051983][ T6901] FAULT_INJECTION: forcing a failure. [ 124.051983][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 124.064733][ T6901] CPU: 1 UID: 0 PID: 6901 Comm: syz.7.811 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.064765][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.064782][ T6901] Call Trace: [ 124.064789][ T6901] [ 124.064797][ T6901] __dump_stack+0x1d/0x30 [ 124.064828][ T6901] dump_stack_lvl+0x95/0xd0 [ 124.064850][ T6901] dump_stack+0x15/0x1b [ 124.064875][ T6901] should_fail_ex+0x263/0x280 [ 124.064913][ T6901] should_failslab+0x8c/0xb0 [ 124.064943][ T6901] kmem_cache_alloc_noprof+0x68/0x490 [ 124.064973][ T6901] ? vm_area_dup+0x33/0x2c0 [ 124.065004][ T6901] vm_area_dup+0x33/0x2c0 [ 124.065037][ T6901] dup_mmap+0x4c5/0xf00 [ 124.065079][ T6901] ? __percpu_counter_init_many+0x2fa/0x310 [ 124.065125][ T6901] copy_mm+0x119/0x370 [ 124.065149][ T6901] copy_process+0xcbd/0x1f10 [ 124.065198][ T6901] kernel_clone+0x16b/0x5b0 [ 124.065222][ T6901] ? vfs_write+0x86e/0x9f0 [ 124.065248][ T6901] __x64_sys_clone+0x143/0x180 [ 124.065275][ T6901] x64_sys_call+0x12d0/0x3000 [ 124.065308][ T6901] do_syscall_64+0xc0/0x2a0 [ 124.065348][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.065377][ T6901] RIP: 0033:0x7f1f3888aeb9 [ 124.065398][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.065422][ T6901] RSP: 002b:00007f1f372e6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 124.065448][ T6901] RAX: ffffffffffffffda RBX: 00007f1f38b05fa0 RCX: 00007f1f3888aeb9 [ 124.065464][ T6901] RDX: 0000000000000000 RSI: 0000000000009000 RDI: 0000000004021400 [ 124.065479][ T6901] RBP: 00007f1f372e7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.065495][ T6901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 124.065509][ T6901] R13: 00007f1f38b06038 R14: 00007f1f38b05fa0 R15: 00007ffc99129f38 [ 124.065528][ T6901] [ 124.265562][ T6761] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.272677][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.281670][ T6761] bridge_slave_0: entered allmulticast mode [ 124.291551][ T6761] bridge_slave_0: entered promiscuous mode [ 124.304561][ T6761] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.311662][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.324109][ T6761] bridge_slave_1: entered allmulticast mode [ 124.331900][ T6761] bridge_slave_1: entered promiscuous mode [ 124.377441][ T6761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.388343][ T6761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.427614][ T6915] __nla_validate_parse: 1 callbacks suppressed [ 124.427633][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.7.813'. [ 124.451394][ T6761] team0: Port device team_slave_0 added [ 124.466080][ T6761] team0: Port device team_slave_1 added [ 124.469690][ T6915] netlink: 68 bytes leftover after parsing attributes in process `syz.7.813'. [ 124.526140][ T6918] loop4: detected capacity change from 0 to 1024 [ 124.548088][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.555147][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.581573][ T6761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.593747][ T6918] EXT4-fs: Ignoring removed oldalloc option [ 124.599947][ T6918] EXT4-fs: Ignoring removed bh option [ 124.689723][ T6761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.696766][ T6761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.722842][ T6761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.825006][ T6761] hsr_slave_0: entered promiscuous mode [ 124.841304][ T6761] hsr_slave_1: entered promiscuous mode [ 124.861845][ T6761] debugfs: 'hsr0' already exists in 'hsr' [ 124.867656][ T6761] Cannot create hsr debugfs directory [ 125.051035][ T6921] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 125.059374][ T6921] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 125.192905][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.826'. [ 125.216657][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 125.216672][ T29] audit: type=1326 audit(1769988060.535:3440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.304701][ T29] audit: type=1326 audit(1769988060.565:3441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.328150][ T29] audit: type=1326 audit(1769988060.565:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.351592][ T29] audit: type=1326 audit(1769988060.565:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.375077][ T29] audit: type=1326 audit(1769988060.565:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.398539][ T29] audit: type=1326 audit(1769988060.565:3445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.422037][ T29] audit: type=1326 audit(1769988060.565:3446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.445494][ T29] audit: type=1326 audit(1769988060.565:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.468833][ T29] audit: type=1326 audit(1769988060.565:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.492328][ T29] audit: type=1326 audit(1769988060.565:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.9.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 125.549686][ T6985] loop7: detected capacity change from 0 to 1024 [ 125.576214][ T6983] loop9: detected capacity change from 0 to 164 [ 125.591326][ T6985] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.598690][ T6983] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 125.652012][ T6985] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.711438][ T6761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 125.722832][ T6761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 125.733245][ T6985] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.830: lblock 3 mapped to illegal pblock 3 (length 3) [ 125.735477][ T6761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 125.779274][ T6761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 125.801286][ T6985] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 125.813684][ T6985] EXT4-fs (loop7): This should not happen!! Data will be lost [ 125.813684][ T6985] [ 125.850371][ T6995] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm syz.7.830: lblock 8 mapped to illegal pblock 8 (length 8) [ 125.913432][ T6995] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 125.925850][ T6995] EXT4-fs (loop7): This should not happen!! Data will be lost [ 125.925850][ T6995] [ 125.965255][ T6761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.009306][ T6761] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.039887][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.047111][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.083803][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.091000][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.132345][ T6761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.142870][ T6761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.170526][ T7012] loop9: detected capacity change from 0 to 512 [ 126.196725][ T7012] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.261778][ T7012] EXT4-fs error (device loop9): ext4_search_dir:1474: inode #2: block 3: comm syz.9.831: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 126.312875][ T6761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.363183][ T6995] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.830: lblock 0 mapped to illegal pblock 0 (length 3) [ 126.384942][ T7026] netlink: 16 bytes leftover after parsing attributes in process `syz.9.832'. [ 126.454222][ T6995] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 126.466669][ T6995] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.466669][ T6995] [ 126.479629][ T7035] loop9: detected capacity change from 0 to 512 [ 126.510522][ T7035] EXT4-fs: inline encryption not supported [ 126.555406][ T6761] veth0_vlan: entered promiscuous mode [ 126.583101][ T57] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 1) [ 126.600639][ T6761] veth1_vlan: entered promiscuous mode [ 126.609034][ T7035] EXT4-fs (loop9): 1 orphan inode deleted [ 126.623146][ T31] EXT4-fs error (device loop9): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 126.639152][ T6761] veth0_macvtap: entered promiscuous mode [ 126.643423][ T7035] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.651250][ T6761] veth1_macvtap: entered promiscuous mode [ 126.661156][ T57] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 126.673848][ T57] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.673848][ T57] [ 126.691382][ T31] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 126.698283][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.730343][ T7035] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.740438][ T7035] gretap1: entered allmulticast mode [ 126.751771][ T7047] SELinux: failed to load policy [ 126.759101][ T6761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.773812][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.793004][ T31] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 126.803028][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.805897][ T31] EXT4-fs (loop7): This should not happen!! Data will be lost [ 126.805897][ T31] [ 126.826399][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.865279][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.995144][ T7066] loop7: detected capacity change from 0 to 1024 [ 127.025104][ T7069] netlink: 56 bytes leftover after parsing attributes in process `syz.5.839'. [ 127.035671][ T7066] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.048571][ T7066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8801e019, mo2=0000] [ 127.065318][ T7061] loop1: p2 < > p4 [ 127.069319][ T7061] loop1: partition table partially beyond EOD, truncated [ 127.091428][ T7069] bridge_slave_0: entered allmulticast mode [ 127.103417][ T7066] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 2: comm syz.7.835: lblock 2 mapped to illegal pblock 2 (length 1) [ 127.105138][ T7061] loop1: p2 start 4278190080 is beyond EOD, truncated [ 127.124200][ T7061] loop1: p4 size 8192 extends beyond EOD, truncated [ 127.162797][ T7066] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 48: comm syz.7.835: lblock 0 mapped to illegal pblock 48 (length 1) [ 127.193392][ T7066] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.835: Failed to acquire dquot type 0 [ 127.249901][ T7066] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 127.261857][ T7066] EXT4-fs error (device loop7): ext4_evict_inode:253: inode #11: comm syz.7.835: mark_inode_dirty error [ 127.344799][ T7066] EXT4-fs warning (device loop7): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 127.386619][ T7066] EXT4-fs (loop7): 1 orphan inode deleted [ 127.408339][ T4226] udevd[4226]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 127.418849][ T57] EXT4-fs error (device loop7): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 127.448999][ T57] EXT4-fs error (device loop7): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 127.486335][ T7086] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 127.495200][ T7066] EXT4-fs error (device loop7): __ext4_get_inode_loc:4830: comm syz.7.835: Invalid inode table block 1 in block_group 0 [ 127.544707][ T7066] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 127.557748][ T7066] EXT4-fs error (device loop7): ext4_quota_off:7270: inode #3: comm syz.7.835: mark_inode_dirty error [ 128.322249][ T7139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2581 sclass=netlink_route_socket pid=7139 comm=syz.7.850 [ 128.380773][ T7152] set_capacity_and_notify: 3 callbacks suppressed [ 128.380792][ T7152] loop5: detected capacity change from 0 to 512 [ 128.443436][ T7163] FAULT_INJECTION: forcing a failure. [ 128.443436][ T7163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.456725][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.7.857 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.456816][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.456829][ T7163] Call Trace: [ 128.456836][ T7163] [ 128.456845][ T7163] __dump_stack+0x1d/0x30 [ 128.456912][ T7163] dump_stack_lvl+0x95/0xd0 [ 128.456935][ T7163] dump_stack+0x15/0x1b [ 128.456961][ T7163] should_fail_ex+0x263/0x280 [ 128.457040][ T7163] should_fail+0xb/0x20 [ 128.457077][ T7163] should_fail_usercopy+0x1a/0x20 [ 128.457118][ T7163] _copy_from_user+0x1c/0xb0 [ 128.457148][ T7163] generic_map_update_batch+0x36e/0x540 [ 128.457192][ T7163] ? __pfx_generic_map_update_batch+0x10/0x10 [ 128.457219][ T7163] bpf_map_do_batch+0x25c/0x380 [ 128.457290][ T7163] __sys_bpf+0x5f8/0x7b0 [ 128.457326][ T7163] __x64_sys_bpf+0x41/0x50 [ 128.457395][ T7163] x64_sys_call+0x28e1/0x3000 [ 128.457427][ T7163] do_syscall_64+0xc0/0x2a0 [ 128.457543][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.457572][ T7163] RIP: 0033:0x7f1f3888aeb9 [ 128.457592][ T7163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.457612][ T7163] RSP: 002b:00007f1f372e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.457637][ T7163] RAX: ffffffffffffffda RBX: 00007f1f38b05fa0 RCX: 00007f1f3888aeb9 [ 128.457656][ T7163] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 128.457675][ T7163] RBP: 00007f1f372e7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.457693][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.457709][ T7163] R13: 00007f1f38b06038 R14: 00007f1f38b05fa0 R15: 00007ffc99129f38 [ 128.457737][ T7163] [ 128.460744][ T7164] netlink: 'syz.1.856': attribute type 4 has an invalid length. [ 128.682797][ T7152] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.732196][ T7152] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 128.750441][ T7175] loop1: detected capacity change from 0 to 4096 [ 128.771988][ T7152] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 16 with error 28 [ 128.784400][ T7152] EXT4-fs (loop5): This should not happen!! Data will be lost [ 128.784400][ T7152] [ 128.794160][ T7152] EXT4-fs (loop5): Total free blocks count 0 [ 128.800214][ T7152] EXT4-fs (loop5): Free/Dirty block details [ 128.806207][ T7152] EXT4-fs (loop5): free_blocks=65280 [ 128.811613][ T7152] EXT4-fs (loop5): dirty_blocks=16 [ 128.816830][ T7152] EXT4-fs (loop5): Block reservation details [ 128.823038][ T7152] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 128.882508][ T7189] loop1: detected capacity change from 0 to 128 [ 128.902410][ T7189] EXT4-fs: Ignoring removed nobh option [ 128.920323][ T7189] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.948464][ T7189] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.862: checksumming directory block 0 [ 129.084947][ T7204] netlink: 4 bytes leftover after parsing attributes in process `syz.1.865'. [ 129.552800][ T7249] bond0: entered promiscuous mode [ 129.557903][ T7249] bond_slave_0: entered promiscuous mode [ 129.563758][ T7249] bond_slave_1: entered promiscuous mode [ 129.582043][ T7249] batadv0: entered promiscuous mode [ 129.587793][ T7249] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 129.597685][ T7249] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 129.644473][ T7249] hsr1: entered promiscuous mode [ 129.657036][ T7249] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 129.685235][ T7253] loop9: detected capacity change from 0 to 4096 [ 129.817752][ T7263] bond0: entered promiscuous mode [ 129.822912][ T7263] bond_slave_0: entered promiscuous mode [ 129.828824][ T7263] bond_slave_1: entered promiscuous mode [ 129.874117][ T7263] batadv0: entered promiscuous mode [ 129.883210][ T7259] infiniband !yz!: set down [ 129.887771][ T7259] infiniband !yz!: added team_slave_0 [ 129.893950][ T7263] debugfs: 'hsr1' already exists in 'hsr' [ 129.899729][ T7263] Cannot create hsr debugfs directory [ 129.932490][ T7259] RDS/IB: !yz!: added [ 129.936638][ T7259] smc: adding ib device !yz! with port count 1 [ 129.941799][ T7263] hsr1: entered promiscuous mode [ 129.944082][ T7259] smc: ib device !yz! port 1 has no pnetid [ 129.948364][ T7263] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 130.110117][ T7275] netlink: 20 bytes leftover after parsing attributes in process `syz.9.874'. [ 130.151426][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.9.874'. [ 130.403875][ T7305] loop9: detected capacity change from 0 to 1024 [ 130.417956][ T7305] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.445716][ T7305] EXT4-fs mount: 23 callbacks suppressed [ 130.445737][ T7305] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.493205][ T7305] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.599207][ T7305] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.878: lblock 3 mapped to illegal pblock 3 (length 3) [ 130.638941][ T7305] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 130.651423][ T7305] EXT4-fs (loop9): This should not happen!! Data will be lost [ 130.651423][ T7305] [ 130.688990][ T7318] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 8: comm syz.9.878: lblock 8 mapped to illegal pblock 8 (length 8) [ 130.712871][ T7318] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 130.714838][ T7273] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 130.725279][ T7318] EXT4-fs (loop9): This should not happen!! Data will be lost [ 130.725279][ T7318] [ 130.876489][ T7338] loop1: detected capacity change from 0 to 1024 [ 130.922242][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.949441][ T7338] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.983084][ T7318] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.878: lblock 0 mapped to illegal pblock 0 (length 3) [ 131.045385][ T7318] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 131.057852][ T7318] EXT4-fs (loop9): This should not happen!! Data will be lost [ 131.057852][ T7318] [ 131.069750][ T7344] No such timeout policy "syz1" [ 131.110788][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 131.110862][ T29] audit: type=1400 audit(1769988066.408:3536): avc: denied { map } for pid=7337 comm="syz.1.882" path="/11/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.143964][ T29] audit: type=1400 audit(1769988066.408:3537): avc: denied { execute } for pid=7337 comm="syz.1.882" path="/11/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.428032][ T417] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:5: lblock 7 mapped to illegal pblock 7 (length 1) [ 131.451824][ T417] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 131.464407][ T417] EXT4-fs (loop9): This should not happen!! Data will be lost [ 131.464407][ T417] [ 131.514431][ T7220] loop5: detected capacity change from 0 to 2048 [ 131.535499][ T417] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 131.577283][ T417] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 131.958868][ T7364] loop7: detected capacity change from 0 to 1024 [ 131.996019][ T7372] loop4: detected capacity change from 0 to 128 [ 132.049770][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.7.886'. [ 132.068259][ T7372] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.129397][ T7364] loop7: detected capacity change from 0 to 512 [ 132.146032][ T7372] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 132.191004][ T7364] EXT4-fs: Ignoring removed oldalloc option [ 132.227675][ T7364] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 132.253084][ T7384] lo speed is unknown, defaulting to 1000 [ 132.269397][ T7384] lo speed is unknown, defaulting to 1000 [ 132.277139][ T7364] EXT4-fs (loop7): 1 truncate cleaned up [ 132.290314][ T7384] lo speed is unknown, defaulting to 1000 [ 132.296745][ T7364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.314447][ T7384] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.334228][ T7364] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.355734][ T7384] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 132.368691][ T6354] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.407316][ T7384] lo speed is unknown, defaulting to 1000 [ 132.452823][ T7384] lo speed is unknown, defaulting to 1000 [ 132.492808][ T7384] lo speed is unknown, defaulting to 1000 [ 132.513306][ T7384] lo speed is unknown, defaulting to 1000 [ 132.534380][ T7384] lo speed is unknown, defaulting to 1000 [ 132.564710][ T7384] lo speed is unknown, defaulting to 1000 [ 132.730767][ T29] audit: type=1326 audit(1769988068.049:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.787629][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.894'. [ 132.838737][ T57] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 4) [ 132.861999][ T29] audit: type=1326 audit(1769988068.089:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.885537][ T29] audit: type=1326 audit(1769988068.089:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.909503][ T29] audit: type=1326 audit(1769988068.089:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.933192][ T29] audit: type=1326 audit(1769988068.089:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.956684][ T29] audit: type=1326 audit(1769988068.089:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.979829][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 132.981414][ T29] audit: type=1326 audit(1769988068.089:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 132.992371][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.992371][ T57] [ 133.025587][ T29] audit: type=1326 audit(1769988068.099:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7407 comm="syz.7.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 133.087925][ T6761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.217387][ T7430] 9p: Bad value for 'rfdno' [ 133.331121][ T7440] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.355754][ T7440] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 133.364415][ T7440] FAT-fs (loop5): Filesystem has been set read-only [ 133.436052][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 133.445027][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 133.479908][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 133.489022][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 133.630855][ T7459] siw: device registration error -23 [ 134.418466][ T7481] FAULT_INJECTION: forcing a failure. [ 134.418466][ T7481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 134.432860][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.5.913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.432896][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.432912][ T7481] Call Trace: [ 134.432921][ T7481] [ 134.432929][ T7481] __dump_stack+0x1d/0x30 [ 134.432961][ T7481] dump_stack_lvl+0x95/0xd0 [ 134.433015][ T7481] dump_stack+0x15/0x1b [ 134.433074][ T7481] should_fail_ex+0x263/0x280 [ 134.433115][ T7481] should_fail+0xb/0x20 [ 134.433152][ T7481] should_fail_usercopy+0x1a/0x20 [ 134.433249][ T7481] _copy_from_user+0x1c/0xb0 [ 134.433276][ T7481] get_timespec64+0x4c/0x100 [ 134.433311][ T7481] __se_sys_rt_sigtimedwait+0xf3/0x200 [ 134.433404][ T7481] __x64_sys_rt_sigtimedwait+0x55/0x70 [ 134.433436][ T7481] x64_sys_call+0x2c46/0x3000 [ 134.433465][ T7481] do_syscall_64+0xc0/0x2a0 [ 134.433526][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.433548][ T7481] RIP: 0033:0x7f17b06daeb9 [ 134.433564][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.433587][ T7481] RSP: 002b:00007f17af137028 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 134.433613][ T7481] RAX: ffffffffffffffda RBX: 00007f17b0955fa0 RCX: 00007f17b06daeb9 [ 134.433752][ T7481] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 0000200000000240 [ 134.433766][ T7481] RBP: 00007f17af137090 R08: 0000000000000000 R09: 0000000000000000 [ 134.433779][ T7481] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 134.433807][ T7481] R13: 00007f17b0956038 R14: 00007f17b0955fa0 R15: 00007ffc10b0e358 [ 134.433901][ T7481] [ 134.660520][ T7490] 9p: Bad value for 'rfdno' [ 134.707168][ T7493] netlink: 'syz.7.916': attribute type 2 has an invalid length. [ 134.714925][ T7493] netlink: 'syz.7.916': attribute type 11 has an invalid length. [ 134.722772][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.7.916'. [ 134.744636][ T7495] geneve2: entered promiscuous mode [ 134.786111][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.814903][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.838978][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.918'. [ 134.855188][ T7495] x_tables: duplicate underflow at hook 1 [ 134.866726][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.881615][ T7506] set_capacity_and_notify: 2 callbacks suppressed [ 134.881631][ T7506] loop1: detected capacity change from 0 to 1024 [ 134.928801][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.967976][ T7506] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.021500][ T7511] loop4: detected capacity change from 0 to 164 [ 135.061532][ T7511] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 135.114950][ T7506] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.912: Invalid block bitmap block 0 in block_group 0 [ 135.290988][ T7506] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.912: Failed to acquire dquot type 0 [ 135.358826][ T7506] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.912: Freeing blocks not in datazone - block = 0, count = 4096 [ 135.446315][ T7506] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.912: Invalid inode bitmap blk 0 in block_group 0 [ 135.460048][ T3495] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 135.522234][ T7506] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 135.532939][ T7506] EXT4-fs (loop1): 1 orphan inode deleted [ 135.552999][ T7506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.612600][ T7506] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.787108][ T7427] loop9: detected capacity change from 0 to 2048 [ 135.853064][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.7.920'. [ 135.979269][ T7558] loop1: detected capacity change from 0 to 128 [ 136.030519][ T7542] loop7: detected capacity change from 0 to 164 [ 136.039818][ T7558] EXT4-fs: Ignoring removed nobh option [ 136.082092][ T7558] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.124354][ T7542] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 136.138650][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 136.138667][ T29] audit: type=1326 audit(1769988071.460:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f3884b78e code=0x7ffc0000 [ 136.180582][ T29] audit: type=1326 audit(1769988071.460:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f3884b78e code=0x7ffc0000 [ 136.203981][ T29] audit: type=1326 audit(1769988071.460:3645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 136.227517][ T29] audit: type=1326 audit(1769988071.460:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7541 comm="syz.7.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 136.258186][ T7558] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 136.353350][ T7568] netlink: 4 bytes leftover after parsing attributes in process `syz.9.925'. [ 136.416328][ T6761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.450625][ T29] audit: type=1326 audit(1769988071.600:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc46530b78e code=0x7ffc0000 [ 136.474207][ T29] audit: type=1326 audit(1769988071.600:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 136.497602][ T29] audit: type=1326 audit(1769988071.600:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7552 comm="syz.4.923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 136.512725][ T7572] loop9: detected capacity change from 0 to 164 [ 136.521300][ T29] audit: type=1326 audit(1769988071.660:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.9.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 136.550784][ T29] audit: type=1326 audit(1769988071.660:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.9.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 136.574192][ T29] audit: type=1326 audit(1769988071.660:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7567 comm="syz.9.925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fa7e85eaeb9 code=0x7ffc0000 [ 136.611196][ T7572] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 136.770385][ T7583] 9p: Bad value for 'rfdno' [ 136.774979][ T7581] FAULT_INJECTION: forcing a failure. [ 136.774979][ T7581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.788292][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.1.930 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.788394][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.788410][ T7581] Call Trace: [ 136.788419][ T7581] [ 136.788430][ T7581] __dump_stack+0x1d/0x30 [ 136.788462][ T7581] dump_stack_lvl+0x95/0xd0 [ 136.788523][ T7581] dump_stack+0x15/0x1b [ 136.788550][ T7581] should_fail_ex+0x263/0x280 [ 136.788590][ T7581] should_fail+0xb/0x20 [ 136.788729][ T7581] should_fail_usercopy+0x1a/0x20 [ 136.788907][ T7581] _copy_from_iter+0xcf/0xea0 [ 136.788930][ T7581] ? __alloc_skb+0x397/0x4b0 [ 136.788961][ T7581] ? __alloc_skb+0x219/0x4b0 [ 136.789025][ T7581] netlink_sendmsg+0x4ae/0x6f0 [ 136.789120][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.789140][ T7581] ____sys_sendmsg+0x5af/0x600 [ 136.789218][ T7581] ___sys_sendmsg+0x195/0x1e0 [ 136.789253][ T7581] __x64_sys_sendmsg+0xd4/0x160 [ 136.789313][ T7581] x64_sys_call+0x17ba/0x3000 [ 136.789340][ T7581] do_syscall_64+0xc0/0x2a0 [ 136.789374][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.789476][ T7581] RIP: 0033:0x7f11fe5caeb9 [ 136.789493][ T7581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.789513][ T7581] RSP: 002b:00007f11fd027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.789614][ T7581] RAX: ffffffffffffffda RBX: 00007f11fe845fa0 RCX: 00007f11fe5caeb9 [ 136.789677][ T7581] RDX: 0000000000048006 RSI: 0000200000000100 RDI: 0000000000000003 [ 136.789691][ T7581] RBP: 00007f11fd027090 R08: 0000000000000000 R09: 0000000000000000 [ 136.789705][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.789719][ T7581] R13: 00007f11fe846038 R14: 00007f11fe845fa0 R15: 00007ffe45ee5b18 [ 136.789741][ T7581] [ 137.108616][ T7596] netlink: 'syz.1.931': attribute type 6 has an invalid length. [ 137.161136][ T7602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.933'. [ 137.220264][ T7611] cgroup: Need name or subsystem set [ 137.228821][ T7612] loop1: detected capacity change from 0 to 512 [ 137.236719][ T7612] EXT4-fs warning (device loop1): ext4_multi_mount_protect:288: Invalid MMP block in superblock [ 137.356211][ T7622] loop4: detected capacity change from 0 to 1024 [ 137.393630][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.414562][ T7622] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.938: inode #1985966185: comm syz.4.938: iget: illegal inode # [ 137.430699][ T7622] EXT4-fs (loop4): Remounting filesystem read-only [ 137.437690][ T7622] EXT4-fs warning (device loop4): ext4_xattr_block_set:2200: inode #19: comm syz.4.938: dec ref error=-30 [ 137.526790][ T6354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.597293][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.939'. [ 137.705895][ T7634] loop4: detected capacity change from 0 to 164 [ 137.741565][ T7634] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 138.197093][ T7638] loop7: detected capacity change from 0 to 1024 [ 138.294088][ T7638] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.561076][ T4304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.906471][ T7666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.012009][ T7672] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.031663][ T6354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.041465][ T7674] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.115151][ T7672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 139.154007][ T7672] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.175551][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.955'. [ 139.205973][ T7672] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.954: lblock 3 mapped to illegal pblock 3 (length 3) [ 139.234764][ T7672] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 139.247136][ T7672] EXT4-fs (loop7): This should not happen!! Data will be lost [ 139.247136][ T7672] [ 139.267216][ T7683] isofs_fill_super: root inode is not a directory. Corrupted media? [ 139.272152][ T7684] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm syz.7.954: lblock 8 mapped to illegal pblock 8 (length 8) [ 139.301820][ T7685] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 139.356032][ T7684] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 139.368756][ T7684] EXT4-fs (loop7): This should not happen!! Data will be lost [ 139.368756][ T7684] [ 139.379960][ T6761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.429799][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.958'. [ 139.439965][ T7690] netlink: 'syz.1.958': attribute type 33 has an invalid length. [ 139.811029][ T7684] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.954: lblock 0 mapped to illegal pblock 0 (length 3) [ 139.866621][ T7684] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 139.867265][ T7629] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 139.879055][ T7684] EXT4-fs (loop7): This should not happen!! Data will be lost [ 139.879055][ T7684] [ 140.079378][ T7702] 9p: Bad value for 'rfdno' [ 140.113757][ T57] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 1) [ 140.146568][ T7706] set_capacity_and_notify: 6 callbacks suppressed [ 140.146584][ T7706] loop1: detected capacity change from 0 to 128 [ 140.150844][ T57] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 140.153951][ T7706] EXT4-fs: Ignoring removed nobh option [ 140.159632][ T57] EXT4-fs (loop7): This should not happen!! Data will be lost [ 140.159632][ T57] [ 140.196454][ T57] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 140.259632][ T7706] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.334383][ T7706] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.349534][ T7717] loop7: detected capacity change from 0 to 512 [ 140.406453][ T7719] loop4: detected capacity change from 0 to 164 [ 140.417448][ T7717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.424166][ T7717] EXT4-fs: Ignoring removed bh option [ 140.430037][ T7719] isofs_fill_super: root inode is not a directory. Corrupted media? [ 140.479195][ T6761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.537834][ T7717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.596941][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'. [ 140.618004][ T7727] loop5: detected capacity change from 0 to 2048 [ 140.636042][ T7717] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.688301][ T7727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.728754][ T7728] loop1: detected capacity change from 0 to 164 [ 140.753775][ T7737] netlink: 'syz.4.973': attribute type 1 has an invalid length. [ 140.796886][ T4304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.833341][ T7737] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.845673][ T7728] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 140.877356][ T7741] FAULT_INJECTION: forcing a failure. [ 140.877356][ T7741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.890508][ T7741] CPU: 1 UID: 0 PID: 7741 Comm: syz.7.974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.890536][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.890551][ T7741] Call Trace: [ 140.890561][ T7741] [ 140.890616][ T7741] __dump_stack+0x1d/0x30 [ 140.890679][ T7741] dump_stack_lvl+0x95/0xd0 [ 140.890708][ T7741] dump_stack+0x15/0x1b [ 140.890729][ T7741] should_fail_ex+0x263/0x280 [ 140.890776][ T7741] should_fail+0xb/0x20 [ 140.890883][ T7741] should_fail_usercopy+0x1a/0x20 [ 140.890967][ T7741] _copy_from_user+0x1c/0xb0 [ 140.890988][ T7741] __sys_bpf+0x183/0x7b0 [ 140.891030][ T7741] __x64_sys_bpf+0x41/0x50 [ 140.891137][ T7741] x64_sys_call+0x28e1/0x3000 [ 140.891170][ T7741] do_syscall_64+0xc0/0x2a0 [ 140.891203][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.891277][ T7741] RIP: 0033:0x7f1f3888aeb9 [ 140.891293][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.891313][ T7741] RSP: 002b:00007f1f372e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 140.891408][ T7741] RAX: ffffffffffffffda RBX: 00007f1f38b05fa0 RCX: 00007f1f3888aeb9 [ 140.891424][ T7741] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 000000000000001c [ 140.891501][ T7741] RBP: 00007f1f372e7090 R08: 0000000000000000 R09: 0000000000000000 [ 140.891519][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.891535][ T7741] R13: 00007f1f38b06038 R14: 00007f1f38b05fa0 R15: 00007ffc99129f38 [ 140.891562][ T7741] [ 141.052527][ T7738] bond1: (slave ip6gretap1): making interface the new active one [ 141.092664][ T7738] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 141.183793][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 141.183800][ T3586] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.183810][ T29] audit: type=1326 audit(1769988076.503:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.289200][ T7745] can: request_module (can-proto-0) failed. [ 141.313006][ T7745] wireguard0: entered promiscuous mode [ 141.318720][ T7745] wireguard0: entered allmulticast mode [ 141.319670][ T29] audit: type=1326 audit(1769988076.553:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.347830][ T29] audit: type=1326 audit(1769988076.553:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.371402][ T29] audit: type=1326 audit(1769988076.553:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.394840][ T29] audit: type=1326 audit(1769988076.553:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.418475][ T29] audit: type=1326 audit(1769988076.553:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.441859][ T29] audit: type=1326 audit(1769988076.553:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.465305][ T29] audit: type=1326 audit(1769988076.553:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.660453][ T7759] loop1: detected capacity change from 0 to 128 [ 141.678498][ T7759] EXT4-fs: Ignoring removed nobh option [ 141.728761][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 141.747574][ T7759] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.769179][ T29] audit: type=1326 audit(1769988076.833:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7755 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f3884b78e code=0x7ffc0000 [ 141.792666][ T29] audit: type=1326 audit(1769988076.833:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7742 comm="syz.7.976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f3888aeb9 code=0x7ffc0000 [ 141.821498][ T7759] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.904814][ T7762] loop4: detected capacity change from 0 to 164 [ 141.909905][ T7688] loop9: detected capacity change from 0 to 2048 [ 141.918352][ T7762] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 141.977777][ T6761] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.198707][ T7771] loop1: detected capacity change from 0 to 1024 [ 142.233914][ T7771] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.296598][ T7771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.324700][ T7771] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.331567][ T7777] loop9: detected capacity change from 0 to 1024 [ 142.367088][ T7771] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.985: lblock 3 mapped to illegal pblock 3 (length 3) [ 142.403571][ T7777] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.426527][ T7771] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 142.438968][ T7771] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.438968][ T7771] [ 142.490930][ T7777] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.514979][ T7777] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.529984][ T7771] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm syz.1.985: lblock 8 mapped to illegal pblock 8 (length 8) [ 142.576512][ T7777] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.986: lblock 3 mapped to illegal pblock 3 (length 3) [ 142.630647][ T7771] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 142.643062][ T7771] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.643062][ T7771] [ 142.653006][ T7777] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 142.665353][ T7777] EXT4-fs (loop9): This should not happen!! Data will be lost [ 142.665353][ T7777] [ 142.725200][ T7784] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 8: comm syz.9.986: lblock 8 mapped to illegal pblock 8 (length 8) [ 142.769812][ T7784] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 142.782264][ T7784] EXT4-fs (loop9): This should not happen!! Data will be lost [ 142.782264][ T7784] [ 142.799030][ T7788] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 142.860014][ T7771] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.985: lblock 0 mapped to illegal pblock 0 (length 3) [ 142.873610][ T7771] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 142.873657][ T7771] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.873657][ T7771] [ 143.003620][ T57] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 1) [ 143.025948][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 143.038435][ T57] EXT4-fs (loop1): This should not happen!! Data will be lost [ 143.038435][ T57] [ 143.077375][ T57] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 143.137198][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 143.151595][ T7794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.214774][ T7794] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.253277][ T7794] FAULT_INJECTION: forcing a failure. [ 143.253277][ T7794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.266520][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.7.992 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.266546][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.266559][ T7794] Call Trace: [ 143.266566][ T7794] [ 143.266574][ T7794] __dump_stack+0x1d/0x30 [ 143.266605][ T7794] dump_stack_lvl+0x95/0xd0 [ 143.266650][ T7794] dump_stack+0x15/0x1b [ 143.266738][ T7794] should_fail_ex+0x263/0x280 [ 143.266780][ T7794] should_fail+0xb/0x20 [ 143.266810][ T7794] should_fail_usercopy+0x1a/0x20 [ 143.266933][ T7794] _copy_to_user+0x20/0xa0 [ 143.267015][ T7794] simple_read_from_buffer+0xb5/0x130 [ 143.267053][ T7794] proc_fail_nth_read+0x10e/0x150 [ 143.267095][ T7794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 143.267130][ T7794] vfs_read+0x1ab/0x7f0 [ 143.267149][ T7794] ? __rcu_read_unlock+0x4e/0x70 [ 143.267179][ T7794] ? __fget_files+0x184/0x1c0 [ 143.267242][ T7794] ? mutex_lock+0x57/0x90 [ 143.267268][ T7794] ksys_read+0xdc/0x1a0 [ 143.267328][ T7794] __x64_sys_read+0x40/0x50 [ 143.267347][ T7794] x64_sys_call+0x2889/0x3000 [ 143.267373][ T7794] do_syscall_64+0xc0/0x2a0 [ 143.267481][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.267509][ T7794] RIP: 0033:0x7f1f3884b78e [ 143.267525][ T7794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.267544][ T7794] RSP: 002b:00007f1f372e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.267564][ T7794] RAX: ffffffffffffffda RBX: 00007f1f372e76c0 RCX: 00007f1f3884b78e [ 143.267660][ T7794] RDX: 000000000000000f RSI: 00007f1f372e70a0 RDI: 0000000000000006 [ 143.267674][ T7794] RBP: 00007f1f372e7090 R08: 0000000000000000 R09: 0000000000000000 [ 143.267686][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.267703][ T7794] R13: 00007f1f38b06038 R14: 00007f1f38b05fa0 R15: 00007ffc99129f38 [ 143.267805][ T7794] [ 143.270052][ T7784] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.986: lblock 0 mapped to illegal pblock 0 (length 3) [ 143.480439][ T4304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.512787][ T7784] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 143.525199][ T7784] EXT4-fs (loop9): This should not happen!! Data will be lost [ 143.525199][ T7784] [ 143.551355][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 143.572892][ T57] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 1) [ 143.587981][ T57] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 143.600414][ T57] EXT4-fs (loop9): This should not happen!! Data will be lost [ 143.600414][ T57] [ 143.649058][ T57] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 143.694518][ T57] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 143.756193][ T7810] EXT4-fs: Ignoring removed mblk_io_submit option [ 143.777252][ T7809] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 143.812436][ T7810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.897542][ T7810] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.915670][ T7815] bio_check_eod: 101 callbacks suppressed [ 143.915688][ T7815] syz.9.999: attempt to access beyond end of device [ 143.915688][ T7815] loop9: rw=1, sector=145, nr_sectors = 16 limit=128 [ 143.952765][ T7815] syz.9.999: attempt to access beyond end of device [ 143.952765][ T7815] loop9: rw=1, sector=169, nr_sectors = 8 limit=128 [ 143.974157][ T7810] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.997: lblock 3 mapped to illegal pblock 3 (length 3) [ 143.997697][ T7810] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 144.010096][ T7810] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.010096][ T7810] [ 144.027487][ T7815] syz.9.999: attempt to access beyond end of device [ 144.027487][ T7815] loop9: rw=1, sector=185, nr_sectors = 8 limit=128 [ 144.045996][ T7816] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm syz.7.997: lblock 8 mapped to illegal pblock 8 (length 8) [ 144.085730][ T7815] syz.9.999: attempt to access beyond end of device [ 144.085730][ T7815] loop9: rw=1, sector=201, nr_sectors = 8 limit=128 [ 144.099779][ T7816] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 144.112123][ T7816] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.112123][ T7816] [ 144.158917][ T7815] syz.9.999: attempt to access beyond end of device [ 144.158917][ T7815] loop9: rw=1, sector=217, nr_sectors = 8 limit=128 [ 144.229988][ T7815] syz.9.999: attempt to access beyond end of device [ 144.229988][ T7815] loop9: rw=1, sector=233, nr_sectors = 8 limit=128 [ 144.284986][ T7815] syz.9.999: attempt to access beyond end of device [ 144.284986][ T7815] loop9: rw=1, sector=249, nr_sectors = 8 limit=128 [ 144.340220][ T7815] syz.9.999: attempt to access beyond end of device [ 144.340220][ T7815] loop9: rw=1, sector=265, nr_sectors = 8 limit=128 [ 144.381141][ T7815] syz.9.999: attempt to access beyond end of device [ 144.381141][ T7815] loop9: rw=1, sector=281, nr_sectors = 8 limit=128 [ 144.434998][ T7815] syz.9.999: attempt to access beyond end of device [ 144.434998][ T7815] loop9: rw=1, sector=297, nr_sectors = 8 limit=128 [ 144.459153][ T7816] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.997: lblock 0 mapped to illegal pblock 0 (length 3) [ 144.485330][ T7816] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 144.497761][ T7816] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.497761][ T7816] [ 144.517106][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 144.541498][ T57] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 1) [ 144.562573][ T57] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 144.575071][ T57] EXT4-fs (loop7): This should not happen!! Data will be lost [ 144.575071][ T57] [ 144.622066][ T57] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:4: bg 0: block 112: padding at end of block bitmap is not set [ 144.640751][ T57] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 144.697849][ T7823] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 144.877327][ T7829] tipc: Started in network mode [ 144.882273][ T7829] tipc: Node identity 1, cluster identity 2346 [ 144.888637][ T7829] tipc: Node number set to 1 [ 145.312899][ T7854] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 145.315309][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1011'. [ 145.423230][ T7867] set_capacity_and_notify: 6 callbacks suppressed [ 145.423250][ T7867] loop5: detected capacity change from 0 to 1024 [ 145.455841][ T7867] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.520842][ T7867] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 145.563160][ T7867] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.590467][ T7858] loop7: detected capacity change from 0 to 164 [ 145.620608][ T7858] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 145.634504][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1007'. [ 145.650183][ T7867] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.1012: lblock 3 mapped to illegal pblock 3 (length 3) [ 145.724999][ T7867] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 145.737478][ T7867] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.737478][ T7867] [ 145.753897][ T7896] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm syz.5.1012: lblock 8 mapped to illegal pblock 8 (length 8) [ 145.798417][ T7896] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 145.810820][ T7896] EXT4-fs (loop5): This should not happen!! Data will be lost [ 145.810820][ T7896] [ 145.884478][ T7900] tipc: Started in network mode [ 145.889522][ T7900] tipc: Node identity 1, cluster identity 2346 [ 145.895974][ T7900] tipc: Node number set to 1 [ 146.228047][ T7896] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1012: lblock 0 mapped to illegal pblock 0 (length 3) [ 146.303764][ T7896] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 146.316131][ T7896] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.316131][ T7896] [ 146.466613][ T3495] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:7: lblock 7 mapped to illegal pblock 7 (length 1) [ 146.513316][ T3495] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 146.525877][ T3495] EXT4-fs (loop5): This should not happen!! Data will be lost [ 146.525877][ T3495] [ 146.589386][ T3495] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 146.651339][ T7948] netdevsim netdevsim7: Direct firmware load for ./file0 failed with error -2 [ 146.651579][ T3495] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 146.813595][ T7952] loop5: detected capacity change from 0 to 1024 [ 146.857080][ T7952] EXT4-fs: Ignoring removed mblk_io_submit option [ 146.907559][ T7952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.954932][ T7952] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.017769][ T7952] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.1020: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.082548][ T7952] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 147.094932][ T7952] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.094932][ T7952] [ 147.153009][ T7955] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm syz.5.1020: lblock 8 mapped to illegal pblock 8 (length 8) [ 147.172801][ T7955] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 147.185165][ T7955] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.185165][ T7955] [ 147.316593][ T7955] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm syz.5.1020: lblock 0 mapped to illegal pblock 0 (length 3) [ 147.330141][ T7955] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 147.342493][ T7955] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.342493][ T7955] [ 147.527205][ T417] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:5: lblock 7 mapped to illegal pblock 7 (length 1) [ 147.572765][ T417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 147.585146][ T417] EXT4-fs (loop5): This should not happen!! Data will be lost [ 147.585146][ T417] [ 147.633014][ T417] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 147.652481][ T7957] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=7957 comm=syz.7.1027 [ 147.675610][ T417] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 147.691291][ T7957] netlink: 232 bytes leftover after parsing attributes in process `syz.7.1027'. [ 148.043363][ T7973] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 148.078793][ T7917] loop9: detected capacity change from 0 to 2048 [ 148.086274][ T7975] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 148.142262][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 148.142277][ T29] audit: type=1326 audit(1769988083.456:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.172179][ T29] audit: type=1326 audit(1769988083.456:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.195855][ T29] audit: type=1326 audit(1769988083.456:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.219359][ T29] audit: type=1326 audit(1769988083.456:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.243343][ T29] audit: type=1326 audit(1769988083.456:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.266795][ T29] audit: type=1326 audit(1769988083.456:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.290356][ T29] audit: type=1326 audit(1769988083.456:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.313781][ T29] audit: type=1326 audit(1769988083.466:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.442776][ T29] audit: type=1400 audit(1769988083.556:4064): avc: denied { bind } for pid=7974 comm="syz.5.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.462414][ T29] audit: type=1326 audit(1769988083.746:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7977 comm="syz.4.1034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 148.501700][ T7986] loop9: detected capacity change from 0 to 1024 [ 148.508982][ T7986] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.538228][ T7986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.562238][ T7986] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.599698][ T7986] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 3: comm syz.9.1036: lblock 3 mapped to illegal pblock 3 (length 3) [ 148.615101][ T7986] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 148.627431][ T7986] EXT4-fs (loop9): This should not happen!! Data will be lost [ 148.627431][ T7986] [ 148.646408][ T7986] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 8: comm syz.9.1036: lblock 8 mapped to illegal pblock 8 (length 8) [ 148.661242][ T7986] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 148.673681][ T7986] EXT4-fs (loop9): This should not happen!! Data will be lost [ 148.673681][ T7986] [ 148.766232][ T7999] loop4: detected capacity change from 0 to 1024 [ 148.782227][ T7999] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.807126][ T7999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.836159][ T7999] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.862734][ T7999] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.1041: lblock 3 mapped to illegal pblock 3 (length 3) [ 148.877265][ T7999] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 148.888114][ T7986] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: comm syz.9.1036: lblock 0 mapped to illegal pblock 0 (length 3) [ 148.890188][ T7999] EXT4-fs (loop4): This should not happen!! Data will be lost [ 148.890188][ T7999] [ 148.914428][ T7986] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 148.921286][ T7999] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 8: comm syz.4.1041: lblock 8 mapped to illegal pblock 8 (length 8) [ 148.926855][ T7986] EXT4-fs (loop9): This should not happen!! Data will be lost [ 148.926855][ T7986] [ 148.966052][ T7999] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 148.978507][ T7999] EXT4-fs (loop4): This should not happen!! Data will be lost [ 148.978507][ T7999] [ 149.013114][ T8007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1042'. [ 149.107246][ T7999] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: comm syz.4.1041: lblock 0 mapped to illegal pblock 0 (length 3) [ 149.122982][ T37] EXT4-fs error (device loop9): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:2: lblock 7 mapped to illegal pblock 7 (length 1) [ 149.140190][ T7999] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 149.145081][ T8010] loop1: detected capacity change from 0 to 1024 [ 149.152800][ T7999] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.152800][ T7999] [ 149.168860][ T37] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 149.181175][ T37] EXT4-fs (loop9): This should not happen!! Data will be lost [ 149.181175][ T37] [ 149.184433][ T8010] EXT4-fs: inline encryption not supported [ 149.195712][ T37] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 149.196837][ T8010] EXT4-fs: Ignoring removed i_version option [ 149.219449][ T37] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 149.267881][ T8010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.298400][ T57] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:4: lblock 7 mapped to illegal pblock 7 (length 1) [ 149.330477][ T57] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 149.343418][ T57] EXT4-fs (loop4): This should not happen!! Data will be lost [ 149.343418][ T57] [ 149.356104][ T37] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 149.379585][ T8010] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 149.392919][ T37] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 149.408978][ T8022] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=8022 comm=syz.9.1049 [ 149.434355][ T6761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.456547][ T8022] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1049'. [ 149.489374][ T8026] FAULT_INJECTION: forcing a failure. [ 149.489374][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.502594][ T8026] CPU: 0 UID: 0 PID: 8026 Comm: syz.1.1050 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.502631][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.502649][ T8026] Call Trace: [ 149.502657][ T8026] [ 149.502727][ T8026] __dump_stack+0x1d/0x30 [ 149.502759][ T8026] dump_stack_lvl+0x95/0xd0 [ 149.502787][ T8026] dump_stack+0x15/0x1b [ 149.502810][ T8026] should_fail_ex+0x263/0x280 [ 149.502861][ T8026] should_fail+0xb/0x20 [ 149.502923][ T8026] should_fail_usercopy+0x1a/0x20 [ 149.502962][ T8026] _copy_from_iter+0xcf/0xea0 [ 149.502981][ T8026] ? __alloc_skb+0x397/0x4b0 [ 149.503090][ T8026] ? __alloc_skb+0x219/0x4b0 [ 149.503149][ T8026] netlink_sendmsg+0x4ae/0x6f0 [ 149.503211][ T8026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.503236][ T8026] ____sys_sendmsg+0x5af/0x600 [ 149.503267][ T8026] ___sys_sendmsg+0x195/0x1e0 [ 149.503376][ T8026] __x64_sys_sendmsg+0xd4/0x160 [ 149.503408][ T8026] x64_sys_call+0x17ba/0x3000 [ 149.503507][ T8026] do_syscall_64+0xc0/0x2a0 [ 149.503549][ T8026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.503578][ T8026] RIP: 0033:0x7f11fe5caeb9 [ 149.503599][ T8026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.503619][ T8026] RSP: 002b:00007f11fd027028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.503656][ T8026] RAX: ffffffffffffffda RBX: 00007f11fe845fa0 RCX: 00007f11fe5caeb9 [ 149.503675][ T8026] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000006 [ 149.503754][ T8026] RBP: 00007f11fd027090 R08: 0000000000000000 R09: 0000000000000000 [ 149.503772][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.503788][ T8026] R13: 00007f11fe846038 R14: 00007f11fe845fa0 R15: 00007ffe45ee5b18 [ 149.503810][ T8026] [ 149.963390][ T8037] -1: renamed from syzkaller0 [ 149.979192][ T8037] FAULT_INJECTION: forcing a failure. [ 149.979192][ T8037] name failslab, interval 1, probability 0, space 0, times 0 [ 149.992015][ T8037] CPU: 0 UID: 0 PID: 8037 Comm: syz.4.1054 Not tainted syzkaller #0 PREEMPT(voluntary) [ 149.992049][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.992067][ T8037] Call Trace: [ 149.992075][ T8037] [ 149.992086][ T8037] __dump_stack+0x1d/0x30 [ 149.992127][ T8037] dump_stack_lvl+0x95/0xd0 [ 149.992157][ T8037] dump_stack+0x15/0x1b [ 149.992183][ T8037] should_fail_ex+0x263/0x280 [ 149.992224][ T8037] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 149.992285][ T8037] should_failslab+0x8c/0xb0 [ 149.992369][ T8037] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 149.992404][ T8037] ? debugfs_alloc_inode+0x34/0x40 [ 149.992450][ T8037] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 149.992528][ T8037] debugfs_alloc_inode+0x34/0x40 [ 149.992571][ T8037] alloc_inode+0x40/0x170 [ 149.992598][ T8037] new_inode+0x1d/0xe0 [ 149.992628][ T8037] __debugfs_create_file+0x97/0x2b0 [ 149.992745][ T8037] debugfs_create_file_full+0x3f/0x60 [ 149.992827][ T8037] ? __pfx_br_dev_setup+0x10/0x10 [ 149.992905][ T8037] ref_tracker_dir_debugfs+0x10e/0x220 [ 149.992962][ T8037] alloc_netdev_mqs+0x1a7/0xa40 [ 149.993007][ T8037] ? should_fail_ex+0xd9/0x280 [ 149.993047][ T8037] br_add_bridge+0x35/0xc0 [ 149.993067][ T8037] br_ioctl_stub+0x3e3/0x8f0 [ 149.993090][ T8037] ? do_vfs_ioctl+0x76e/0xe70 [ 149.993156][ T8037] ? selinux_file_ioctl+0x5f7/0xcb0 [ 149.993190][ T8037] ? __pfx_br_ioctl_stub+0x10/0x10 [ 149.993235][ T8037] sock_ioctl+0x39c/0x610 [ 149.993258][ T8037] ? mutex_lock+0x57/0x90 [ 149.993294][ T8037] ? __pfx_sock_ioctl+0x10/0x10 [ 149.993372][ T8037] __se_sys_ioctl+0xce/0x140 [ 149.993491][ T8037] __x64_sys_ioctl+0x43/0x50 [ 149.993526][ T8037] x64_sys_call+0x14b0/0x3000 [ 149.993559][ T8037] do_syscall_64+0xc0/0x2a0 [ 149.993658][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.993686][ T8037] RIP: 0033:0x7fc46534aeb9 [ 149.993712][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.993730][ T8037] RSP: 002b:00007fc463da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.993752][ T8037] RAX: ffffffffffffffda RBX: 00007fc4655c5fa0 RCX: 00007fc46534aeb9 [ 149.993796][ T8037] RDX: 00002000000000c0 RSI: 00000000000089a0 RDI: 0000000000000006 [ 149.993813][ T8037] RBP: 00007fc463da7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.993831][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.993844][ T8037] R13: 00007fc4655c6038 R14: 00007fc4655c5fa0 R15: 00007ffd061bcc68 [ 149.993924][ T8037] [ 149.993934][ T8037] debugfs: out of free dentries, can not create file 'netdev@ffff888119e30558' [ 150.268292][ T8040] netlink: 'syz.9.1055': attribute type 1 has an invalid length. [ 150.322448][ T8040] bond1: Unable to set up delay as MII monitoring is disabled [ 150.355149][ T8048] loop7: detected capacity change from 0 to 1024 [ 150.375453][ T8040] bond1 (unregistering): Released all slaves [ 150.395259][ T8048] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.438869][ T8053] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 150.438899][ T8053] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 150.438974][ T8053] vhci_hcd vhci_hcd.0: Device attached [ 150.448062][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1057'. [ 150.469539][ T8048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 150.469649][ T8048] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.482819][ T8048] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.1058: lblock 3 mapped to illegal pblock 3 (length 3) [ 150.485730][ T8048] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 150.485765][ T8048] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.485765][ T8048] [ 150.486768][ T8048] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 8: comm syz.7.1058: lblock 8 mapped to illegal pblock 8 (length 8) [ 150.487033][ T8048] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 150.487065][ T8048] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.487065][ T8048] [ 150.491189][ T8011] loop5: detected capacity change from 0 to 2048 [ 150.498981][ T8054] vhci_hcd: connection closed [ 150.502117][ T37] vhci_hcd vhci_hcd.9: stop threads [ 150.502170][ T37] vhci_hcd vhci_hcd.9: release socket [ 150.502191][ T37] vhci_hcd vhci_hcd.9: disconnect device [ 150.555027][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1060'. [ 150.699313][ T8063] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 150.721680][ T8065] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 150.751343][ T8070] loop1: detected capacity change from 0 to 1024 [ 150.777276][ T8070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.785214][ T8048] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: comm syz.7.1058: lblock 0 mapped to illegal pblock 0 (length 3) [ 150.807413][ T8048] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 150.819839][ T8048] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.819839][ T8048] [ 150.877734][ T37] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:2: lblock 7 mapped to illegal pblock 7 (length 1) [ 150.901402][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 150.913870][ T37] EXT4-fs (loop7): This should not happen!! Data will be lost [ 150.913870][ T37] [ 150.929655][ T37] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 150.944538][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 151.137079][ T8084] FAULT_INJECTION: forcing a failure. [ 151.137079][ T8084] name failslab, interval 1, probability 0, space 0, times 0 [ 151.147908][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 151.150028][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.5.1067 Not tainted syzkaller #0 PREEMPT(voluntary) [ 151.150150][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.150185][ T8084] Call Trace: [ 151.150205][ T8084] [ 151.150228][ T8084] __dump_stack+0x1d/0x30 [ 151.150377][ T8084] dump_stack_lvl+0x95/0xd0 [ 151.150450][ T8084] dump_stack+0x15/0x1b [ 151.150531][ T8084] should_fail_ex+0x263/0x280 [ 151.150680][ T8084] should_failslab+0x8c/0xb0 [ 151.150751][ T8084] __kmalloc_cache_noprof+0x64/0x4a0 [ 151.150853][ T8084] ? rtnl_newlink+0x5c/0x1370 [ 151.151038][ T8084] ? __pfx_rtnl_newlink+0x10/0x10 [ 151.151112][ T8084] rtnl_newlink+0x5c/0x1370 [ 151.151242][ T8084] ? xas_load+0x413/0x430 [ 151.151362][ T8084] ? xas_load+0x413/0x430 [ 151.151433][ T8084] ? __rcu_read_unlock+0x4e/0x70 [ 151.151550][ T8084] ? xa_load+0xb1/0xe0 [ 151.151649][ T8084] ? __rcu_read_unlock+0x4e/0x70 [ 151.151744][ T8084] ? avc_has_perm_noaudit+0xab/0x130 [ 151.151856][ T8084] ? cred_has_capability+0x224/0x290 [ 151.152018][ T8084] ? selinux_capable+0x31/0x40 [ 151.152080][ T8084] ? security_capable+0x7b/0x90 [ 151.152175][ T8084] ? ns_capable+0x7c/0xb0 [ 151.152310][ T8084] ? __pfx_rtnl_newlink+0x10/0x10 [ 151.152390][ T8084] rtnetlink_rcv_msg+0x64b/0x720 [ 151.152474][ T8084] ? avc_has_perm_noaudit+0xab/0x130 [ 151.152585][ T8084] netlink_rcv_skb+0x123/0x220 [ 151.152765][ T8084] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.152910][ T8084] rtnetlink_rcv+0x1c/0x30 [ 151.152951][ T8084] netlink_unicast+0x5c0/0x690 [ 151.153055][ T8084] netlink_sendmsg+0x5c8/0x6f0 [ 151.153128][ T8084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.153177][ T8084] ____sys_sendmsg+0x5af/0x600 [ 151.153254][ T8084] ___sys_sendmsg+0x195/0x1e0 [ 151.153287][ T8084] __x64_sys_sendmsg+0xd4/0x160 [ 151.153332][ T8084] x64_sys_call+0x17ba/0x3000 [ 151.153425][ T8084] do_syscall_64+0xc0/0x2a0 [ 151.153598][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.153657][ T8084] RIP: 0033:0x7f17b06daeb9 [ 151.153718][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.153781][ T8084] RSP: 002b:00007f17af137028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.153849][ T8084] RAX: ffffffffffffffda RBX: 00007f17b0955fa0 RCX: 00007f17b06daeb9 [ 151.153893][ T8084] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 151.153921][ T8084] RBP: 00007f17af137090 R08: 0000000000000000 R09: 0000000000000000 [ 151.153965][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.154085][ T8084] R13: 00007f17b0956038 R14: 00007f17b0955fa0 R15: 00007ffc10b0e358 [ 151.154172][ T8084] [ 151.511779][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1071'. [ 151.662068][ T8116] loop7: detected capacity change from 0 to 1024 [ 151.670843][ T8116] EXT4-fs: Ignoring removed oldalloc option [ 151.676985][ T8116] EXT4-fs: Ignoring removed bh option [ 151.679516][ T6761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.708005][ T8116] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.736570][ T4304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.759523][ T8122] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1079'. [ 151.805457][ T8122] bond0 (unregistering): left promiscuous mode [ 151.811741][ T8122] bond_slave_0: left promiscuous mode [ 151.817332][ T8122] bond_slave_1: left promiscuous mode [ 151.842522][ T8122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.865772][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1085'. [ 151.879407][ T8122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.907419][ T8122] bond0 (unregistering): Released all slaves [ 151.972574][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1089'. [ 152.002733][ T8130] loop5: detected capacity change from 0 to 164 [ 152.020623][ T8130] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 152.042668][ T8141] loop7: detected capacity change from 0 to 164 [ 152.111301][ T8144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.130624][ T8144] netlink: 'syz.7.1091': attribute type 33 has an invalid length. [ 152.138869][ T8144] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 152.297079][ T8149] SELinux: failed to load policy [ 152.441003][ T8160] loop1: detected capacity change from 0 to 1024 [ 152.472871][ T8160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.485317][ T8160] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.553780][ T6761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 152.671759][ T8180] loop1: detected capacity change from 0 to 1024 [ 152.678561][ T8180] EXT4-fs: Ignoring removed mblk_io_submit option [ 152.713598][ T8180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 152.727381][ T8180] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.742041][ T8180] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.1103: lblock 3 mapped to illegal pblock 3 (length 3) [ 152.756594][ T8180] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 152.769002][ T8180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.769002][ T8180] [ 152.786431][ T8180] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 8: comm syz.1.1103: lblock 8 mapped to illegal pblock 8 (length 8) [ 152.807732][ T8180] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 152.820157][ T8180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.820157][ T8180] [ 152.928779][ T8180] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: comm syz.1.1103: lblock 0 mapped to illegal pblock 0 (length 3) [ 152.949775][ T8180] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 152.962643][ T8180] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.962643][ T8180] [ 152.966378][ T8195] loop5: detected capacity change from 0 to 256 [ 152.987726][ T8195] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.004503][ T37] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 7: comm kworker/u8:2: lblock 7 mapped to illegal pblock 7 (length 1) [ 153.019275][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 117 [ 153.031777][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 153.031777][ T37] [ 153.051145][ T37] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 112: padding at end of block bitmap is not set [ 153.079890][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 153.172112][ T8207] __nla_validate_parse: 2 callbacks suppressed [ 153.172130][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1115'. [ 153.251793][ T8217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 153.345504][ T8227] loop5: detected capacity change from 0 to 128 [ 153.352305][ T8227] vfat: Unknown parameter 'nnumtail' [ 153.415390][ T8232] loop7: detected capacity change from 0 to 2048 [ 153.473682][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 153.506507][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1126'. [ 153.517615][ T8232] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.641116][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 153.641135][ T29] audit: type=1400 audit(1769988088.979:4216): avc: denied { name_connect } for pid=8242 comm="syz.5.1129" dest=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 153.668743][ T8241] netlink: 88 bytes leftover after parsing attributes in process `syz.9.1127'. [ 153.680043][ T8241] syzkaller0: entered promiscuous mode [ 153.685557][ T8241] syzkaller0: entered allmulticast mode [ 153.716188][ T29] audit: type=1400 audit(1769988089.049:4217): avc: denied { open } for pid=8247 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.736145][ T29] audit: type=1400 audit(1769988089.049:4218): avc: denied { kernel } for pid=8247 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.760527][ T4304] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.794302][ T29] audit: type=1400 audit(1769988089.049:4219): avc: denied { tracepoint } for pid=8247 comm="syz.4.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.814327][ T29] audit: type=1326 audit(1769988089.089:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 153.837949][ T29] audit: type=1326 audit(1769988089.089:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 153.861463][ T29] audit: type=1326 audit(1769988089.089:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 153.884936][ T29] audit: type=1326 audit(1769988089.089:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 153.908315][ T29] audit: type=1326 audit(1769988089.089:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 153.931895][ T29] audit: type=1326 audit(1769988089.089:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8247 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc46534aeb9 code=0x7ffc0000 [ 154.004691][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 154.568066][ T8275] EXT4-fs: Ignoring removed orlov option [ 154.590480][ T8275] EXT4-fs: Ignoring removed oldalloc option [ 154.602605][ T8275] EXT4-fs (loop4): invalid first ino: 0 [ 154.669481][ T8282] FAULT_INJECTION: forcing a failure. [ 154.669481][ T8282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.682642][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.9.1142 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.682724][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.682737][ T8282] Call Trace: [ 154.682744][ T8282] [ 154.682803][ T8282] __dump_stack+0x1d/0x30 [ 154.682850][ T8282] dump_stack_lvl+0x95/0xd0 [ 154.682879][ T8282] dump_stack+0x15/0x1b [ 154.682979][ T8282] should_fail_ex+0x263/0x280 [ 154.683016][ T8282] should_fail+0xb/0x20 [ 154.683044][ T8282] should_fail_usercopy+0x1a/0x20 [ 154.683098][ T8282] _copy_to_user+0x20/0xa0 [ 154.683128][ T8282] simple_read_from_buffer+0xb5/0x130 [ 154.683169][ T8282] proc_fail_nth_read+0x10e/0x150 [ 154.683239][ T8282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.683274][ T8282] vfs_read+0x1ab/0x7f0 [ 154.683293][ T8282] ? __rcu_read_unlock+0x4e/0x70 [ 154.683323][ T8282] ? __fget_files+0x184/0x1c0 [ 154.683372][ T8282] ? mutex_lock+0x57/0x90 [ 154.683397][ T8282] ksys_read+0xdc/0x1a0 [ 154.683421][ T8282] __x64_sys_read+0x40/0x50 [ 154.683528][ T8282] x64_sys_call+0x2889/0x3000 [ 154.683568][ T8282] do_syscall_64+0xc0/0x2a0 [ 154.683610][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.683634][ T8282] RIP: 0033:0x7fa7e85ab78e [ 154.683649][ T8282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.683730][ T8282] RSP: 002b:00007fa7e7046fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.683839][ T8282] RAX: ffffffffffffffda RBX: 00007fa7e70476c0 RCX: 00007fa7e85ab78e [ 154.683860][ T8282] RDX: 000000000000000f RSI: 00007fa7e70470a0 RDI: 0000000000000004 [ 154.683878][ T8282] RBP: 00007fa7e7047090 R08: 0000000000000000 R09: 0000000000000000 [ 154.683893][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.683905][ T8282] R13: 00007fa7e8866038 R14: 00007fa7e8865fa0 R15: 00007ffd0b0e3f68 [ 154.683935][ T8282] [ 154.926981][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 155.006814][ T8287] rock: corrupted directory entry. extent=32, offset=131072, size=237 [ 155.242333][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 155.268242][ T8306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.283007][ T8306] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1150'. [ 155.404719][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1151'. [ 155.416379][ T8304] lo speed is unknown, defaulting to 1000 [ 155.585328][ T6354] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.214395][ T8319] set_capacity_and_notify: 3 callbacks suppressed [ 156.214411][ T8319] loop5: detected capacity change from 0 to 512 [ 156.249223][ T8319] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 156.286788][ T3000] ================================================================== [ 156.294953][ T3000] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 156.303067][ T3000] [ 156.305411][ T3000] write to 0xffff8881076899f0 of 8 bytes by task 4087 on cpu 0: [ 156.313058][ T3000] dentry_unlink_inode+0x65/0x260 [ 156.318117][ T3000] d_delete+0xc8/0xe0 [ 156.322127][ T3000] d_delete_notify+0x32/0x100 [ 156.326831][ T3000] vfs_unlink+0x331/0x440 [ 156.331189][ T3000] do_unlinkat+0x1e2/0x4b0 [ 156.335637][ T3000] __x64_sys_unlink+0x2e/0x40 [ 156.340385][ T3000] x64_sys_call+0x2f48/0x3000 [ 156.345097][ T3000] do_syscall_64+0xc0/0x2a0 [ 156.349631][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.355548][ T3000] [ 156.357885][ T3000] read to 0xffff8881076899f0 of 8 bytes by task 3000 on cpu 1: [ 156.365440][ T3000] step_into_slowpath+0x12c/0x4c0 [ 156.370502][ T3000] path_lookupat+0x330/0x500 [ 156.375131][ T3000] filename_lookup+0x190/0x390 [ 156.379921][ T3000] do_readlinkat+0x7d/0x340 [ 156.384463][ T3000] __x64_sys_readlink+0x47/0x60 [ 156.389437][ T3000] x64_sys_call+0x2af1/0x3000 [ 156.394145][ T3000] do_syscall_64+0xc0/0x2a0 [ 156.398686][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.404599][ T3000] [ 156.406955][ T3000] value changed: 0xffff88811bb517c0 -> 0x0000000000000000 [ 156.414076][ T3000] [ 156.416410][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 156.423359][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.432661][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.442733][ T3000] ================================================================== [ 157.755664][ T8289] syz.1.1145 (8289) used greatest stack depth: 6008 bytes left [ 166.073200][ T10] page_pool_release_retry() stalled pool shutdown: id 108, 19 inflight 60 sec