last executing test programs: 3m25.954389566s ago: executing program 32 (id=124): syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r3, 0x210, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc890}, 0x4000005) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r5, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0x1e0}, {&(0x7f0000001440)="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", 0xaeb}], 0x4}}], 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0xfdfc, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x3) setsockopt$inet6_tcp_int(r4, 0x11a, 0x3, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) 1m50.585780589s ago: executing program 0 (id=1247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000020601020000000000000000c48e00060500040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40008804) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2b60e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0xc80, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x800002, 0x9, 0x2, 0xcf, 0xffff, 0x0, 0x0, 0x0, 0xc3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4020000", @ANYRES16=r3, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYBLOB, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="8002028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400"], 0x2f4}, 0x1, 0x0, 0x0, 0x4000001}, 0x404c004) io_setup(0x3, &(0x7f0000000100)=0x0) io_getevents(r5, 0x1, 0x2, &(0x7f0000000340)=[{}, {}], 0x0) io_pgetevents(r5, 0x2, 0x2, &(0x7f0000000240)=[{}, {}], 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000a40)=@deltaction={0x10c, 0x31, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1e0}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffe}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x20000729, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f0000000080)=0xfffffffd, 0x4) io_submit(r5, 0x2, &(0x7f0000000180)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0xfff, r7, 0x0, 0x0, 0x5}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, r7, 0x0, 0x0, 0x6}]) r9 = semget$private(0x0, 0x0, 0x600) pselect6(0x40, &(0x7f0000000bc0)={0x1f1c, 0x0, 0x2, 0x4, 0x2, 0x4}, &(0x7f0000000c00)={0xefe, 0x60, 0x8, 0x4, 0x2, 0x4000000000000, 0x7fffffffffffffff, 0x7}, &(0x7f0000000c40)={0x70, 0x1, 0x8, 0x6, 0x9dd5, 0x8000000000000001, 0x1f831ee6, 0x6}, &(0x7f0000000c80), &(0x7f0000000d00)={&(0x7f0000000cc0)={[0x9]}, 0x8}) semtimedop(r9, &(0x7f0000000500)=[{0x0, 0x8, 0x1000}, {0x1, 0x1, 0x800}, {0x0, 0x53, 0x1000}, {0x4, 0x5, 0x1000}, {0x2, 0xc00, 0x800}, {0x3, 0x2, 0x1800}, {0x1, 0xa, 0x1800}], 0x7, &(0x7f0000000b80)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1m49.502603976s ago: executing program 0 (id=1261): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x95, 0x8, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x210a, 0x75, 0x10ffe, 0x0, 0xb40, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2) readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r2}, 0x14) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f0000000180)=0x1) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0xd}, r2}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000001de9cb53ed00000000000000", @ANYRES32=r2], 0x28}}], 0x1, 0x0) 1m46.512404547s ago: executing program 0 (id=1284): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x7fff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1m46.071636103s ago: executing program 0 (id=1295): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78cf2}], 0x7b, 0x2000, 0x0, 0x3) 1m45.694650805s ago: executing program 0 (id=1297): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x4005, 0xa600000, 0x3, 0x2, 0x7, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x190, 0x2c0, 0x228, 0x98, 0x2c0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @loopback, 0xffffff00, 0xff, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x2, 0x26}, 0x0, 0xd0, 0xf8, 0x84000000, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xfffff1b2, 0x5, 0x2c6, {0x8}}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 1m45.499089012s ago: executing program 0 (id=1302): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 1m45.470143563s ago: executing program 33 (id=1302): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) 39.242443216s ago: executing program 1 (id=2375): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'erspan0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}}, 0x448d0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xe, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.221772136s ago: executing program 1 (id=2377): r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d419d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x5}, 0x80, 0x91d, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vY0cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRe37OehN7E20SO8Sfj/T0Zt54/Z2J982sv1l7AhhbtyPiICKKEfF+RMxl13PZEe90juRxnx0+Wj06fLSai3b7vX/k0vbkWvT8mcSt7DlLEfGD70T8OHc6bnNvf3OlVqvuZPWFVn17obm3f2+jvrJeXa9uVSrLS8uLb91/s3JpY32lXsxKX/709wff+GnSrdnsSu84LlNn6IXjOInJiPjeVQQbgYlsPMVRd4Rnko+IFyPi1fT+n4uJ9NUEAG6ydnsu2nO9dQDgpos0B5bLl7NcwGzk8+VyJ4f3Uszka41m6+7Dxu7WWidXNh+F/MONWnUxyxXORyGX1JfS8uN65UT9fkS8EBE/n5pO6+XVRm1thP/uAYBxduvE+v/vqc76DwDccKVRdwAAGDrrPwCMH+s/AIwf6z8AjJ/O+j896m4AAEPk/T8AjB/rPwCMle+/+25ytI+y779e+2Bvd7Pxwb21anOzXN9dLa82drbL643GevqdPfWznq/WaGwvvRG7H85/c7vZWmju7T+oN3a3Wg/S7/V+UC2kjzoYwsgAgEFeeOWTP+WSFfnt6fSInr0cCiPtGXDV8qPuADAyE6PuADAydvuC8XWB9/jSA3BD9Nmi9wmlfh8Q6m4gAvxfuvMF+X8YVz35f/8LGMaM/D+ML/l/GF/tdu68e/7HeR8IAFxvcvzAgN//v5idf5P9cuBHaycf8fFV9goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+7+v+VsL/DZyOfL5YjnImI+CrmHG7XqYkQ8HxF/nCpMJfWlEfcZALio/F9z2f5fd+Zen32i6eVbx8ViRPzkl+/94sOVVmvnDxHF3D+nutdbH2fXK8PvPQBwtu46nZ573sh/dvhotXsMsz9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuLuLgo4j4fL/x52I2zYF0dj49GT+J/dxQ4+efiJ9P2zrn5GfxuUvoC4ybT5L5551+918+bqfn/vd/KZ2hLi6b/5KnWj1K58DH8bvz38SA+e/2eWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Vzxv/zl15+dVBb+1cRd6J//N5YC6369kJzb//eRn1lvbpe3apUlpeWF9+6/2ZlIc1RLwxeDf7+9t3nB7Ul458ZEL90xvi/es7x//q/7//wK0+J//XX+sXPx0tPiZ+siV87Z/yVmd+WBrUl8dcGjP+s1//uOeN/+pf9U9uGAwCj09zb31yp1ao7Cte5UMxeruvSn0GF0hX3MPkZXI+Rni58a1ixitG/6Wev9f1L0m4/U6xBM8ZlZN2A6+D4po+I/4y6MwAAAAAAAAAAAAAAQF/D+MTSqMcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzfW/AAAA//+Y9srv") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x441, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'bond_slave_1\x00', 0x200}) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000100)=""/110, 0x6e}], 0x2) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$cgroup_subtree(r0, 0x0, 0xffffffffffffff95) 38.966002205s ago: executing program 1 (id=2381): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) fchown(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 38.080561635s ago: executing program 1 (id=2384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xa, 0x75}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7c1, &(0x7f0000000300)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x9, 0x0, 0x5989, 0x99}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80101) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x80, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)="ea09f9d6e445", 0x0, 0xa, 0x10021, 0xffffffffffffffff, 0x0}) renameat2(r2, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000200)='./file0\x00', 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0xfffffffffffffdcb) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000540)=0x140, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000080, &(0x7f0000006080)={0xa, 0x4e23, 0x4, @loopback, 0x4}, 0x1c) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000b40), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000240)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, '%', 0x3a, ',', 0x3a, './file0'}, 0x29) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000102030000000000000000000a0000093c0001800c000280050001fd600000002c00018014000300fe800000000000000000000000000023140004"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 37.899411701s ago: executing program 1 (id=2385): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000000000000e000000", @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) 36.847421387s ago: executing program 3 (id=2407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4d5e, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00') kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000001c0)={r1, r0, 0x80000000}) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x5, 0x1, 0x5d9, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x8, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x8, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x7, 0xfc, 0x8000, 0x0, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0x7, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 36.435227211s ago: executing program 1 (id=2416): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 36.413425222s ago: executing program 34 (id=2416): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 35.89209256s ago: executing program 3 (id=2429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c000e0000000000000d0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000002000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff750000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056000000a80000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35.834363151s ago: executing program 3 (id=2430): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r0], 0x38}, 0x1, 0x2000000}, 0x10) 35.708399856s ago: executing program 3 (id=2431): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x7, 0x0, 0x80000, 0x0, 0x402009}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="cdc75d57b18db6e36e41c772270de2663fbf609188314000"/38, 0x26}, {&(0x7f0000000180)="6609f70f06e057adab827023ffda7cb8150a02e80c8b44517af5467e8fd3347a62556cb01d19a2aa1af4efca06b71d1eff552cd49652e7db0a53de31fe2d06d48de88fbdc7915830f4a5964a125c1e28370bb94621470901e9c059e19b3a1d14fdfc20b299801b4e0d465fd81449b0cf979377bfccdbde40d69a0adbc869585577fdc52e7345f471a40db217fc890baf8cf057ce336a26597eeaed2c9d83b6b51a4f6acfb47e543121a233cf7535781fad3ffbeb568fbf6301cc7a8b24c1", 0xbe}, {&(0x7f0000002380)="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", 0x1000}], 0x3, 0x2000, 0x0, 0x3) r2 = accept4$phonet_pipe(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="8100000000000000030000000000000000000000caf4ffff060000000000000000000000000000000500000000000000240b0000000000000000000000000000000000000000000000000000000000000000000000000000ff0f0000000000002705000000000000f30000000000000000000000000000000000000000000000800000000000000000000000000000000200000000000000020000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffd60000000000000004000000000000000000000000000000000000000000000001000000000000000000000000000000020000000000000001000000000000000e00000000000000000000000000000000000000000000000204000000000000000000000000000081000000000000000400000000000000210900000000000000000000000000000000000000000000040100000000000000000000000000004a6dacb756d495743a5741"]) sched_setaffinity(r0, 0x8, &(0x7f00000003c0)=0x7) 35.514228492s ago: executing program 3 (id=2435): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0xa402, 0x4, 0x18}, 0x18) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) fchownat(r3, &(0x7f0000000280)='./file0\x00', r4, r5, 0x800) fcntl$notify(r2, 0x402, 0x1a) getdents64(r2, &(0x7f0000000780)=""/44, 0x2c) r6 = dup(r0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r8 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x29, 0x40480) write$UHID_INPUT(r6, &(0x7f0000001180)={0x8, {"4909201b34c5ff3a235f23843beaedfbd9e175b37d3a5e63c715c7b52ea1ce1c8f8f3cd9d182d2a7a95063be4d1c4e49b4aa0e5977e6150ecbea01a0f2813408725553f831936bd4500c5c6f5d89ecc7f3ec873b5c1e9a4b24efa6432820848eae4824ea3269c3f0773ef5586939de982cfbac36ecd8f3ef097d7bd7596aba894459eee11542f3e1e6e7f12416751343d7009ec946e0aa3e09feadf09de185f72b9534ecd80278d92fcbaea08d253ad70bf08e2df1f0e8bc7c4291b4819be3503c6e87eeb363a78ba4bcc15a50ed5157b6ac415afead87ed15bff6c8c48c5d9dcddd82c02f14854e4a13c2fa248e737a3fbfd132015b2d1c2237f3e7c6b6ab469c241ec9711ddb9e2e417ce8842f925b6587dc5c10052298d3b6752e2a09816a6ddea43463fb602495f93d6c2c4122c408db34b925c9b75fcaab2a536baa24981e19055f521663c09a56dffde8a87cf29bab07134f744b3fa5773278b9696ea04695708aa24bb11114270bc985f788ff1f096424667023c671c3c368cebb68fb324a9c31b9f6475f3235eb53b15ce63f01325098a23588466bd52dd2a552d582370ea6e628a8b7d859a726af7c6822d9bc462e81929d97927f8c9ccc4b6b52006c545e7ec7f12e47a2be0fc9060648c6b95fdcc5752611211695a0061b0347656f099d9964d768b5367c3b98c62c28624426b296d6aa0e940f14c104722a9a3dda9dc2ca98e59c0cb3e6d6aa5c30156dd068dd5ac2a986d373c8d965517cd4ee70ddc581df9046559b48a2808e7f475a0aa3316821f02b77e76b053793c9def1f86adb1b42370a55325c82b3546a5deb732556693647edb57bdc6414f78e6fc5fcbbc73cd84eae6e9ec9fb6d62a7644781bc48edc400af7827dcdd396a5413178e5be236a73818cc17d58211851d041ca640a41317cf04124933d6ded5e5655995552b812c0e0ad953c8458a5c921ac86ebf490204c3f3dbc800eb4ed001f7d122e13060eb558e0fd074e4060529037efc198b4b56bbe137c51d966833c1908c20a840f1076907f70908b9b77c2f461e650ed3e37a0e1572b3e36cd9794c2453f779138b994f833e5fbeb54f29ac02a52e69cbb3bb80a2194e459a57463f8052db575791bd69342b9035222952a3d38a9ab238c42f667e5c159211670ceb1c14388c63617da63e758aaa6629c506431eb1c99ddc7670542c8c2644486affb1f91091eec78711e61bf6f7c4e8448ae9d44cd818d741fae6822514f72676e311d12626f0ace8252444716449097a8d191bf3c31407ff5e97e3784128edbca9b62335ab9ff62a7a909e692931be8751d800049c687af6774daf508640fef4ca32605ede49eb4eb5d40803d3c97146580016da860597d10e1bffd394ddb3c16e2536c9984b44419d1a136db17048c51a0191be7040e32790b073cd36da5f0a51b17e2c0bf4fc8c32e76f19d993e8419c25e19925fba52930e102cafb8a00ba7bad6ffa8de792a5e9c844d85e0fa15e8f063ab1b81dccb7ce8a4bc1313b3d2c9a084294384c9c9b981bb5d8502ad894354e613aea223a0c8b3b4e8a4cafd8545f441ebb749435c2137d081263d1a078806c8162edebb0700ee559e4cf5c166518785ab2125af768885082cac79586a5be3e1b74578e129c139c0caf769bdcd2597e1186cfde573f0ab4ca3ffaf57d581a9529488c14d53e182f0b7bcd3e284df617d4bbccd941c8a4e6ec794cf3a3a65812b41ca6cb0decfd2efce4e00d34c559708f71bcbdadcfe9db33d455a662d0c68bcb766eac621445b06447438f462e2a7396e6eaf26df13169033c13c137f1241a203d760ef8bf800eaf6f042864ea386d47c2ca86e6fab740b177ae02902abefaaa8985d83d4d86218d626ec74362ee1c26e2f2aa2435bec693537ae8b76d72b86e51681cc6abb10acf994429a424b98845da4d76bc8990ca9a0c3f9cd88556057387862850b5652ccb4eadbb18e0f9d348d9b97ea819a53a758f06f9afba38a2130cead6895ee7e46514dc2fa272c2d276a8d7b90cb8db8927b715a061e3157730db23ac55c8933640f18342607c0914a5bb37539ce7243326023fb682b337cb64acd3a41a3bae260b0070726a87b72938da0d53b43311429f612eea87c2de75645386c4bc0c67cc5375fd42620c87eac1761665d7dca4e3198d79021698062a78334f64e8e43fe1ba8a7c11b502248578fe86625cae9488118339756ebceb4e47cec86158f516b613455461c3ff50f4c442d4ca1adb689a8e3ed2b78c5d6480da9623d5d1b5e53294ca2edaf2091ef1e5794564a8f8922023a92c2d6b414a9a226bd5f39fec6a9294969740565433c5ff006e19cd3a7eaa04295d4e19a7e6348500f6853677a3f0fba6cb442549c37b374b588672217a9cbdb63fb4c4d7c0230d61cb12c598f32a147466eef4c1273432a470596f68459c49a4c324bae0e88a7693a6e7c3abcc7e17f65f561b9a2b917d7707cb0ca28c31f1d395f71828c5d39e90691ff0c7cf1ef116fd0abce140f0fb3431dd03c6c0320c4d6a7a9a7da1b0334d8beba3ef0cb05fe6cca14f0dafdae6450c902c8ccb2b5a067e20b70d14d8a21eca944e5adc906df1906d3bc82d7ac0048b763141d1498b68ebb7328a8a1b6b33ef36de608ccce2d2ce19e5b6d1fa67c58891c6031ee96ea78b65cb17233e2e5b883e232807428f28d29017a4ae925dedf1bcee572c1c0a4398286b154fdd4f84d9ac67535b0b0c73f0a0b108c30c1777ab1bbbf53d3744768f83b1980231cc9f671f31232b493501e0e4d97d6005fd5bd7879b55628e3754103f734ac69abbb9ccc10fd49510eaf65fdb04b4b331632f124f0068e5420e1eef0f10533d3e9e674e912af387f145cd033769dafb3c7b764975d8cc51f7d607b65eedd25971cb1fe086a597fd01239090cbf6a391476c6aa027d3c82232b29e9c4e5586d81487bae926ccdbb3d62bcb79e8a76f374db2b0727ec7609c7cf29bdc182f193d91cd46c84882980e24be89aa4ec3b9744b928198c6138343a55a5bd4e4b1ece14a2db729707605e4d973ebb94067f09d9b3db5bee4ecb7b018c5c99d414d03f3f660264e49b2040e3f625ea55c27bb0a1420234ff388cfeeea4adf2b7dfe15899ea33a4c7cd0a127d2017250828cd089e8ab11030f18c4434ff3612f4b2523188271d34e777306e8f725ce946794a610c59b29d29afb8d7f9a3a47447982ebe838315ab548c7a459e0e9d9621459d4ce758af7eec0b3a48f44a88582c70f2afe089d46880e0dccf6666c3cf6ab1f15068c153c7850efeb3346a5e6b44aabdf2e08da135164d3a0473a2812f5b8e98018568b8f85f6c9580ca4aac1c292116c43d5dd1bcf6246977e8e93efa698f9700a39c6ff24cb0f42cb1a72290345cc656aa7991d6d3cb51f33a28c26fd23f161c7c88f394755fd41303edff10b714e7cc840ba074a0c3fc9481e0a5537d9097b7db3fbeb9c808b834e99a84e16d7e6b2d775470f592e53149bd0bc19f81034d010f1632bcb137fef8b96798dd81c99af0eb844334f27381f06d377c5f247efd4b6757063903ccea023f23abdf7007ce3845f4a74d63aee57998b0e2be8f68245f7ffb0dd75713d04dc9d56795c14ad5b059b14f2161fe4deeec54688695b446f30fb6375cd2463705a2dba7c7c69f5e5b0c245e2fd882485fc1d3c04c2b9ff5f109138ec6252ccb8e355591721060b27bfb6beda20b0e9504a5272adf82c6c0ca8bf4b2691a82e988f54954a4e946b52e2d659a686ca620c43eeab02f4fae95eadd61239454005d851e641297552aaca764f8279601331b0185c0959dab2e085c97bf02c85126cdb463abae66d67f3470d4bf9c4341e199aa70d22539dd9915bfd69f6dfd56db297b9f62b91fdaafc151a3ea88c9c421864c8ff8133cd400c374b4c6d02183cdee937cb9d1506404ae2cb169bbfad4241dce08551df1a1ebb87f7a4829a685e09dc41e46a39a8e60c0be49b3afc59451265d7dd0fa6fbe8e43743b1ac17022fe4282ee22775d48f7f5cf2a1cfb2ed412b4b677ffc4fe4101006ab4cec187cf815a41f3665817e44a4e79842ebed3529f72698cc2fbc2c7adada9c49aeac9ad3557995f2d8f47407566b154605d3359f7425fefc918cf56daa72def712d2f775b59652e9d5604da0d9176687e9649d18e14c137af937e15ed2c32001de086f2a6c3d55c21dccebec1f245aa796bf8ecbaaea69da2a607f66d8fd80d34a1e904361e4b41a362698693ffb039687631b8a8ce63a451c28b4ef0cc4ddaa78efe2998349a2a8f18ca41bbcd5770553b80e570527074221d4ee10bbc896c702373f38c58f7688d367b700d093fc3eb3dcc8bc72a5acfefd634adcb61cfc47c6060fd9359efb516ae8c29598f3ef88e4fc3e3a4eeafca5a719bcc46335d262045fefbbe24e3ea23df44f61f39566f6c1c2526a50ae2f2e614d78008a9ce7481f615f722ed3c3ee468bd0dad6df75b03cc4cc7fb2433edb7b4150b877876779bbd3f7990fcf53b8780df6eb535a3424d9105a1cfbb1b38fed98194c00e9a99e744cb66ad1c4a26c921a3dec85927adedbfeb8597bb690c76f16f858f9c8e3a5cd2867bd63393fff2478f4ebb9bad3d97ad0e8f34fa4d2601c2b2081c7ecd215d0cda42063decc7c6f927a5fb982136024d803134a9ba6ac01cb3f85a186506732d8ca7b334c62c1298f3be157c813908b365658d26d9d99dc7041485ccefcf31e88497a532c9bd88ffa0d47f1d15ba5d36348283efd9d7c843828cfcce3405d8afd381d2386b699baae5a07a72f4c6d21b1a13098c2d38f8157120be8eb39e89029215b4691929a670934840b6e37214579a771d706b1d3954174b5111a9022c83ef4b0a7e02565514fd1d0156928362ba91523e5764f4f085d1e07f1ffa7203c55096fc01be818116cddbe34992c958ca976ae916991d128be9517c721dc288b76d20dd210a968bbe41e4fc30f0ee97903c7dce26235d08b1ae69e5d98b1e6ab71469d89a28da8c06accfa992d74bb796ee6856d7658c5b350f04d22da83f16893036f519f5ec379edb85ea9fb2de727c1a474669c268c22a8f514ded89b5eae1b7ab73d8787d4bf74d981445f6584563913d6608e72b80044ea190bcf7cd394b5fccb72e1a68e092854e5a444e9931599553e452bc9d86ea9be15cf3df64ea561ea66c00f4ba6f73958e39ee42aedc558e59301f3908ffdb1e5eba108b5fe275552dc0fd2571cbb58d70ca901a2751e0778429ba386cd7f0e133506e7cc2d961b65f77123198c4458be129c57f668e38ebf591def4949668a6c675a1be24bf6eb1ca5825458d75cf9996bf73cd218ed57f6845111ec24aa0c9d95d62a88cabc719cd6ab351aaede81053af992bc8bf6058d424f3c327b40d9b6cce442cce90830d9b7490fe3eae0f13d76df9cb85ff020ec7e26e166ceda7145b1268da1fb0f8f7e08aea59b4a051793afceb2b2152e960ec95c10e7a4ffe0f6a16e16753652fb5a76b42d0ae14a7ba3a49c1e2fa0ac98c94767188da85a48aef56bf4ac1b6ce014888ba7edf267a98b16dee3ce8285fcbabdd45da828173981b4b29bd748760fd339bf9dcb1f8a0bf8d7bdfcae8961707d91daad4fdb55e427a3f0e95f2c7357249cc9513d407bda15ba645255eddf374bfdba44b39ae45664a6fdd640869104ea06ebaf8ab0539a0e78d6923d27c49d5df4ab3428ed18d1afab85885e9a56e1079d6577773d747bdcb2ffff61b473d194814dfa85230cfc88f73aa0b3f8e1", 0x1000}}, 0x1006) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="6a21dbe00ba975080497bcc543d616fe963d225ddced042abd7000fbdbdf25080015"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, @scatter={0x45, 0x20000, 0x0}, 0x0, 0x0, 0x7, 0xf5, 0x0, 0x0}) 34.733174599s ago: executing program 3 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x4000000, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xc0}}, 0x0) 34.71026966s ago: executing program 35 (id=2442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x4000000, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xc0}}, 0x0) 29.374133551s ago: executing program 6 (id=2492): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_usb_connect(0x6, 0x1fc, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fee33c4ae20000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) 26.670842313s ago: executing program 6 (id=2534): r0 = socket(0x2, 0x3, 0xff) sendto$inet6(r0, &(0x7f0000001180)="62543689eeb7551e9e20a764b220e9bc25912b83", 0x14, 0x4, &(0x7f0000002180)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x3}, 0x1c) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xb, @none, 0x0, 0x1}, 0xe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) 26.510795229s ago: executing program 6 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv6_newrule={0x30, 0x20, 0x400, 0x70b925, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43b1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/254) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r5, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@ipv6_newrule={0x30, 0x20, 0x400, 0x70b925, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43b1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x2, 0x80805, 0x0) (async) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/254) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r5, 0x1, 0x70bd29, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) (async) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) (async) 26.043651944s ago: executing program 6 (id=2546): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1fc, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x124a, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000021c0)='./file1\x00', 0x104000, &(0x7f0000000880)={[{@jqfmt_vfsv1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nogrpid}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}], [{@smackfshat={'smackfshat', 0x3d, 'resuid'}}, {@subj_type={'subj_type', 0x3d, 'unconfined_u'}}, {@permit_directio}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@subj_user={'subj_user', 0x3d, '/\x98)@\'+,@[\'-]'}}]}, 0x0, 0x59f, &(0x7f0000001480)="$eJzs3U1rG9caAOB3ZDvf98aBEO7tohiyaEoaObb7kUIh6bK0oYF2nwpbMcFyFCw5xG4gyaLZdFNCoZQGSn9A912G/oH+hW4CbSCUYNpFNiojj2LF1oetqLEaPQ+Mfc7MGb1zZuYcnZmRUABDayL9k4v4f0R8lUQcblo2GtnCifVya49vzKZTErXaJ38kkWTzGuWT7P/BLPO/iPj5i4iTua1xKyurC4VSqbiU5Seri1cnKyurpy4vFuaL88Ur0zMzZ96amX73nbf7VtfXL/z17cf3Pzjz5fG1b358eORuEufiULasuR7NarUdhbjVnJmIiWyfjMW5TQWndvSygy/Z7Q2gJyNZOx+LtA84HCNZqwdefjfr73HAcEq0fxhSjXFA49q+3XXwy+rR++sXQFvrP7p+byT21a+NDqwlz1wZpde7432In8b46fd7d9MpOtyHiGys1mSkD+GBIXbrdkScHh3d2v8lWf/Xu9P1m8edbY7Rov9zaxH+IffT8c8brcY/uafjn2gx/jnYou32onv7zz3sQ5i20vHfey3Hv0+7rvGRLPef+phvLLl0uVQ8HRH/jYgTMbY3zXd6nnNm7UHbp0jN4790SuM3xoLZdjwc3fvsOnOFauF56tzs0e2IVzbGv0ls6f/31Tvgzcc/3R8XthnjWPHeq+2Wda9/s5vbr9g21X6IeK3l8d9420k6P5+crJ8Pk42zYqs/7xz7pV38ndW//9Ljf6Bz/ceT5ue1lZ3H+H7fk2K7Zb2e/3uST+vpPeuzntQK1erSVMSe5KPm+XE9nT+9sW4jfz0rn9b/xPHO/V+r839/RHy2zfrfOXqnbdFBOP5zOzr+nRPpCpsXPfjw8+/axd/e8X+znjqRzdlO/9d9S3s9mwEAAAAAAGBw5SLiUCS5/NN0LpfPr3++42gcyJXKlerJS+XlK3NR/67seIzlGk+6Dzd9HmIq+zxsIz+9KT8TEUci4uuR/fV8frZcmtvtygMAAAAAAAAAAAAAAAAAAMCAONjm+/+p3/zCFLz8/OQ3DK+u7b8fv/QEDCTv/zC8tH8YXto/DC/tH4aX9g/DS/uH4aX9w/DS/gEAAAAAAAAAAAAAAAAAAAAAAAAAAKCvLpw/n061tcc3ZtP83LWV5YXytVNzxcpCfnF5Nj9bXrqany+X50vF/Gx5sdvrlcrlq1PTsXx9slqsVCcrK6sXF8vLV6oXLy8W5osXi2MvpFYAAAAAAAAAAAAAAAAAAADw71JZWV0olErFpR0lfo1e1tpI5J4r+otOnI1uZUYiupbZvUTSbT+fzQ5HTyFGd7+Cg5vYn+3ZQdme9cRItlUdC+9CZwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbfwdAAD//+eUKZU=") truncate(&(0x7f00000002c0)='./file0/file0\x00', 0x100005) rename(&(0x7f00000009c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000004c0)={0x0, @can={0x1d, r3}, @in={0x2, 0x4e23, @multicast1}, @qipcrtr={0x2a, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x74f4, &(0x7f0000000340)='ip6gre0\x00', 0x2, 0x2, 0xaff9}) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xffffffffffffffaa, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x200003b2, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db6b2ebdb7da4818a778bb7c2e4f", 0x0}, 0x50) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) shutdown(r7, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) setns(r6, 0x24020000) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000580)='./file0/../file0\x00', 0x0) 26.029261155s ago: executing program 6 (id=2547): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000580), 0x5, 0x505, &(0x7f00000011c0)="$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") quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0xfffffffffffffff4, 0x0) 23.387610985s ago: executing program 6 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x600, 0x600, {0x0, 0x0, 0x0, 0x0, 0x338c, 0x40}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42538f85}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x17327ef05e7c28b4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) fsmount(r8, 0x1, 0xf) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getpeername$llc(r4, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10) r10 = syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") fcntl$dupfd(r10, 0x0, r3) 23.379988485s ago: executing program 36 (id=2599): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x600, 0x600, {0x0, 0x0, 0x0, 0x0, 0x338c, 0x40}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f00000002c0)={&(0x7f0000000100), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r2, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x42538f85}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x17327ef05e7c28b4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x89, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r8, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) fsmount(r8, 0x1, 0xf) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r9, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) getpeername$llc(r4, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10) r10 = syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") fcntl$dupfd(r10, 0x0, r3) 11.206233089s ago: executing program 2 (id=2735): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) dup3(r3, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 11.1861161s ago: executing program 2 (id=2736): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.203354553s ago: executing program 2 (id=2758): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$ptmx(0xffffffffffffff9c, 0x0, 0x3252c2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) unshare(0x22020400) (async) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x41009432, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, 0x0, 0xffffffffffffff9c, 0x0, 0x274) getsockopt$bt_hci(r2, 0x0, 0x2, 0x0, 0x0) (async) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) (async) writev(r0, &(0x7f0000000040), 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000500)={0x2, 'bridge_slave_1\x00', {0xcc}, 0x2}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000000)=ANY=[], 0x1, 0x209, &(0x7f0000000200)="$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") (async, rerun: 32) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000) (rerun: 32) r7 = syz_open_dev$usbmon(&(0x7f0000000000), 0x7, 0x40000) ioctl$MON_IOCQ_RING_SIZE(r7, 0x9205) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000140)='./bus\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000480)) (async) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus\x00') (async) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000540)="1610f99ac0b99cc49b3483a76133aef333b69a89394fa76e7201193020426bd93d7fdd596ddfada875dff3123223d1c00bea279499a5728b5b8d04c462b1dbbe38053257b11b35683b33991109c8940dccabc38b226e19cf868b2d7fb6a3693fbf7f823fece5f39dcc797dc13eefd2a7a3d726ac2bcebbc0b605c88e2d4f81d864849ff03e0bf9b174961a3a9f57724ac2ef380a6619ab4274f5efbc68212b5528abee001ab0d7a129c5b60f0fc44c4d22ab7449945f19d9928eac20d4689e7c8177c0ea0c083e4d0bd9b3754b18855175268ee655fda8e60623aae1ae6ccf", 0xdf}, {&(0x7f0000000640)="6757131686fc18e02fc56c73f24a43bcb85b9ba4d2012067d1a5a59751dd0424ebbb839288331ed13fe381b2b1d816ec864dcd2562d0c916a29bc26ef8a197f1d1c66323311a013d2d9187c69812711d14f5222907176375dec0ff473068d240df8198ed847cffab017504f6a41dc7035aa4ca978b5bf0cf460b7549cb05f5d34af30e384f95cb72f3bcaa919dfad9690c7a8a2260ac82566bc58ccfd9a83a8726aca17bc6441ab2b4639e7a833fb2712ad20119409cd535d2", 0xb9}, {&(0x7f0000000700)="9c5261b35927e48b", 0x8}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000000740)="ed6b47d2b2326a8b6c4a1b8909c695c120e90a12c475dcd73d5aa9f0e982fdb30f53a1a8c68775568c5c3e0f49cc502fb83c847749172c0314f6181d6d72b76c8fadacb5767f7a96dd6d567ecea204aa2ef78ed1df990906fecc9f6e59c9de9ef03a41dc863bf9f4a78934e5d706616551522e48464cd26eea80912f45efb6909fdf70", 0x83}, {&(0x7f0000000800)="637b1dc9b9be533c93c94597ae55d12458bb82f79b6c7a80ac62d77c974d33b08d", 0x21}, {&(0x7f0000000940)="1d58b6e5576367187d886b60c11120ec004197a2cde54fd77d003537030a9b20f9dda56c367fac608ffb3b37dde22141e4b8583b54", 0x35}, {&(0x7f0000000a40)="685468783afbf828895e7b67bd292b6692c361b98b6e366644f5b326f9067dfffbb38986f9615aabc1ad0b0ac777e30eefea14839e18cf257d850fdb71b73c5f641b9c398f0a567345c31e0444fa79e1da35c00012a3dfe770e2b8ecea761d9d3fefbad58aacca7eed80e4bc50faabbd47eacf66cd695f4c927016ff2b1de2e1d9f8ed1f025a92c50e27e893b982af16ed5115130aa85326c30e676e", 0x9c}, {&(0x7f0000000980)="0044798bb1b01aaeb4158d108a6d78068713de850aa2f223dcf00fe653e1d7feeae640b8be807aa7d9f3982462fe3d563f8a5c4d712b36439cd253b79994f80511ff2b5cb16e8d70c9e92996d12706979035409cea0855ad5a07175f77c7d72c6f03a695396bc25c6cb3069b1b622a021f7856396f4c64b8bb", 0x79}], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x8, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 10.094976987s ago: executing program 2 (id=2762): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c00a9bd14656f52d1c87000fedbdf24ac14140f000000000000000000000000000004d60a002b00ac1e"], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xd9e, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2d, 0x204, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8014) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2c, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5}]}, 0x2c}}, 0x64000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x74, r4, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x75}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e921189b582fe0f38abcaa8d9f3514f6c04ff2dd57df22354ef80c44d3eb8989"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f27c38316f10be344bfcfdb6fbdd21c1"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r6 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000080)={[{@nodelalloc}, {@nobh}, {@grpjquota}, {@bh}]}, 0x3, 0x439, &(0x7f0000002380)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x268) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r7, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4105, 0x1009}], 0x1, 0x1, 0x8, 0x8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) read(r6, &(0x7f0000000040), 0x0) 9.804496657s ago: executing program 2 (id=2771): perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x9) mkdir(0x0, 0x16) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0x108) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getdents64(r3, &(0x7f0000001680)=""/4116, 0x1014) fchownat(0xffffffffffffffff, &(0x7f0000000280)='.\x00', 0x0, 0x0, 0x1000) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @remote}}}}}}, 0x0) syz_io_uring_setup(0x50b, 0x0, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) semget$private(0x0, 0x6, 0x1b5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/300], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 9.670789581s ago: executing program 2 (id=2775): r0 = socket$key(0xf, 0x3, 0x2) r1 = signalfd4(r0, &(0x7f0000000100), 0x8, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x100}, 0x400c841) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0c00000004004000040000000900007635"], 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c00018008000100"], 0x68}}, 0x1a044) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x360, 0x2a0, 0x130, 0x130, 0x2a0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x6, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1e}}}, {{@uncond, 0x0, 0x130, 0x170, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@private=0xa010102, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0x0, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@multicast2, [0xffffff00, 0xff, 0xffffffff, 0xff000000], 0x2, 0x800, 0x32, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x1082, 0x1}, 0x1c1, 0x284}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x0, 'ip6tnl0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xfa}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x5], 0x1, 0x4}}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r7, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 9.630131223s ago: executing program 37 (id=2775): r0 = socket$key(0xf, 0x3, 0x2) r1 = signalfd4(r0, &(0x7f0000000100), 0x8, 0x40800) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x100}, 0x400c841) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="0c00000004004000040000000900007635"], 0x50) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd70000000000008000000180001801400020073797a5f74756e0000000000000000003c000280380003800c00018008000100"], 0x68}}, 0x1a044) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x360, 0x2a0, 0x130, 0x130, 0x2a0, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x6, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1e}}}, {{@uncond, 0x0, 0x130, 0x170, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@private=0xa010102, [0x0, 0xffffffff, 0x0, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, [0x0, 0xffffff00, 0xff000000], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0xffffff00, 0xff, 0xff000000], @ipv4=@multicast2, [0xffffff00, 0xff, 0xffffffff, 0xff000000], 0x2, 0x800, 0x32, 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x1082, 0x1}, 0x1c1, 0x284}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x6, @ipv4=@dev={0xac, 0x14, 0x14, 0xe}, 0x4e20}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x0, 'ip6tnl0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x2f, 0x3, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xfa}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x0, 0x1, 0x4, 0x6, 0x5], 0x1, 0x4}}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r7, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) 1.915559935s ago: executing program 5 (id=2877): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d, 0xa00}, 0x12) 1.849027057s ago: executing program 5 (id=2879): unshare(0x24060400) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) 1.842160908s ago: executing program 5 (id=2881): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000200)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00@\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Jjh\x87\xe3b\xa8\xdc(^\xaa\xa1\xa0sD\x1c\xfe\x8b!I\xfeFW\x92;\x85\x06\xf2\xb0\xab\xa3u\x0e\xc0\x8c\x99\xb0b\tF\xec\x8ds\x8eAud\xf16\xa2T\xb7\xa1Y\x0fa\x8b\xf9\xe3\x0e\x87\xa3\xd8\xfec\xa5\x18\r&\x96\x16W\xc0}\xd7=\x8b}\xd3\x10X\br\xd0\xb6`\xf9\xce\xc0\xaf\xc4\x14\xc2\bQ6,+4\xd90~\xc1\x11\xad\xc3>\aP~\x02\xac\xd2\xfb\xa6\x02\x9f\xd1\xe7\xb1YZ\r\b\x1f\x19\x1d\x8d\xbf\xdb\a\x82!\xd8kSC\xa1\x80\\\x87\xf3\xcf\xad\x89&v\xb4\x8d\x82;$|m\xdb0\xa7\x17Y?\xa0}\x84#h\xd4\xf0^\xa8\xe6\xdf\xf9\xcb\x81)\xcb\x05H;\xea\xf1\x14$\x91\xfb\x01\x02\x88/F\x7f=\x00\x04\xef\xccS\xf0\xea\x00\x00\x00\x00', 0x0) socket(0x2, 0x80805, 0x0) close(0x3) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.804314989s ago: executing program 5 (id=2883): setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)=0x80, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0xfff, 0x7, 0x88}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1102, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff3) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000001000)) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000540)="32bc9d44c9632e8ba128fd4b425567803dd37fc59de3014ed501d6ad3bffd6f7f0a89777de89c83f0afbb783cc924af9fc103d42a9de6d2b34502b2ffaa8707b8c2d4b8afeb65412a0be8fccacafc035527951d52c0ec034191396b8d60fa66992687d387b9d8f57b5b7d7a0b7c0854b628e9546", 0x0, 0x101, r3}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f00000024c0)='net/udplite\x00') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(r3, &(0x7f00000007c0)={'#! ', './file0', [{0x20, '\xdfg5\xdc\xc1\xf6\x1ak\xfb\xc2&?\x1e^\x9f\x94\x11\xb9\nY\x91z\x8f BS\xa6\x04\x82FE\x90u\x93)M\xb1q\xd2\x17\xf6u.\x01\xc1g\x8ak\t\t\x8bn\x1e\xff\x95\xa8zK\xac\x1d(YM\x9c^U>\xf1\xfa\xce>\xe1\x88\xfb\vg\x9c\xc5\xb1\x8d\xdb\xf9\x1d\xf1(\xdb\xec\xab\xba\xce\x89\x18\x13Gd\xe3O\\\xbe\xcc\xc0\xfd\xca\xc6\x9cv\xc0.\xae0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x20004, 0x0, 0x10000, 0x0, 0x2, 0x90000001, 0x0, 0x0, 0x0, 0x0, 0x8000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00b8c7ef86a18e98c30000ff000000000c02cd3f47000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.220549139s ago: executing program 9 (id=2891): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48020000}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1.158470631s ago: executing program 9 (id=2892): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf4, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0xb, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x800000, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x8, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x6, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0x6, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0x1000, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0xfffffffe, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") 1.114614642s ago: executing program 9 (id=2894): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000200)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00@\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Jjh\x87\xe3b\xa8\xdc(^\xaa\xa1\xa0sD\x1c\xfe\x8b!I\xfeFW\x92;\x85\x06\xf2\xb0\xab\xa3u\x0e\xc0\x8c\x99\xb0b\tF\xec\x8ds\x8eAud\xf16\xa2T\xb7\xa1Y\x0fa\x8b\xf9\xe3\x0e\x87\xa3\xd8\xfec\xa5\x18\r&\x96\x16W\xc0}\xd7=\x8b}\xd3\x10X\br\xd0\xb6`\xf9\xce\xc0\xaf\xc4\x14\xc2\bQ6,+4\xd90~\xc1\x11\xad\xc3>\aP~\x02\xac\xd2\xfb\xa6\x02\x9f\xd1\xe7\xb1YZ\r\b\x1f\x19\x1d\x8d\xbf\xdb\a\x82!\xd8kSC\xa1\x80\\\x87\xf3\xcf\xad\x89&v\xb4\x8d\x82;$|m\xdb0\xa7\x17Y?\xa0}\x84#h\xd4\xf0^\xa8\xe6\xdf\xf9\xcb\x81)\xcb\x05H;\xea\xf1\x14$\x91\xfb\x01\x02\x88/F\x7f=\x00\x04\xef\xccS\xf0\xea\x00\x00\x00\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.065789064s ago: executing program 9 (id=2895): unshare(0x24060400) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) 991.852437ms ago: executing program 9 (id=2897): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') exit(0x100000000000035) lseek(r0, 0x6, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') statfs(&(0x7f0000000040)='./file0\x00', 0x0) 884.001131ms ago: executing program 5 (id=2901): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) mlockall(0x7) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x26, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 730.493976ms ago: executing program 8 (id=2905): socket$nl_generic(0x10, 0x3, 0x10) memfd_create(&(0x7f0000000200)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00@\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Jjh\x87\xe3b\xa8\xdc(^\xaa\xa1\xa0sD\x1c\xfe\x8b!I\xfeFW\x92;\x85\x06\xf2\xb0\xab\xa3u\x0e\xc0\x8c\x99\xb0b\tF\xec\x8ds\x8eAud\xf16\xa2T\xb7\xa1Y\x0fa\x8b\xf9\xe3\x0e\x87\xa3\xd8\xfec\xa5\x18\r&\x96\x16W\xc0}\xd7=\x8b}\xd3\x10X\br\xd0\xb6`\xf9\xce\xc0\xaf\xc4\x14\xc2\bQ6,+4\xd90~\xc1\x11\xad\xc3>\aP~\x02\xac\xd2\xfb\xa6\x02\x9f\xd1\xe7\xb1YZ\r\b\x1f\x19\x1d\x8d\xbf\xdb\a\x82!\xd8kSC\xa1\x80\\\x87\xf3\xcf\xad\x89&v\xb4\x8d\x82;$|m\xdb0\xa7\x17Y?\xa0}\x84#h\xd4\xf0^\xa8\xe6\xdf\xf9\xcb\x81)\xcb\x05H;\xea\xf1\x14$\x91\xfb\x01\x02\x88/F\x7f=\x00\x04\xef\xccS\xf0\xea\x00\x00\x00\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 726.593706ms ago: executing program 8 (id=2906): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) eventfd(0x8) socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 468.260344ms ago: executing program 4 (id=2907): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2d, 0x35, 0x80000a, 0x6, 0x1f, 0x3ff, 0x2, 0xac}) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) 467.295394ms ago: executing program 8 (id=2908): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101f000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioprio_get$pid(0x1, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006506010100000000000000000100000005000100070000000900020073797a31000000000c0007680800130000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/31, 0x1f}], 0x1, 0xe6, 0xc) pread64(r1, &(0x7f0000000000)=""/171, 0xab, 0x411) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000800)="e3008067", 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x50) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x6f5e, 0x2) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000390009fffe0f0f000000000003"], 0x78}}, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8970, &(0x7f00000001c0)={'veth1_virt_wifi\x00', @ifru_mtu}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r4, &(0x7f0000000080)=""/52, 0x34) getdents(r4, 0xffffffffffffffff, 0x5a) ioctl$KDSETLED(r4, 0x4b32, 0x3) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000140)={@remote, @empty, 0x0, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a", 0x0, 0x0, 0x0, 0xfffffffe}, 0x3c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="5e405910697e444e30be17e2711d7985b8d6e8ebfbca2e1173742588f7578b2aba7f3ab945e4f54b72e5d25962808599342e3835a4cc6d4059de3be4ad4bfbbb9d50d625232b17f263d8e29f451ef84f391f9952bebdbc2cb18fa46bb602b1b864322ebba05ce23eae5b", 0x6a, 0x800, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r7, &(0x7f0000000900)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x17}, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000280)='Q', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xa2cc, @local, 0xf}, 0x1c, &(0x7f0000000880)=[{&(0x7f0000000080)='\\', 0x1}], 0x1}}], 0x2, 0x4000840) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x100}, 0x8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 408.025067ms ago: executing program 4 (id=2909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x60000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x800}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0x94}}, 0x10840) 407.754136ms ago: executing program 4 (id=2910): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0003009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 398.009347ms ago: executing program 7 (id=2911): unshare(0x20040200) unshare(0x42000680) (fail_nth: 7) 394.171517ms ago: executing program 4 (id=2912): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240), 0x1, 0x5a3, &(0x7f0000001600)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f0000000e00)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/545], 0x23c}}, 0x80c4) 383.558317ms ago: executing program 8 (id=2913): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000040000010000000800010000000000040004800800020001000000300008802c000780080005003156906d480006009000000008000500610d3451080006003b000000080005005cd2c06c61c0a86c8aa9fa94c9816380fbd64e7bf9c6213d0302003e25cef5cf9f10a9c764782569c96ad140b6"], 0x58}}, 0x0) 349.971809ms ago: executing program 7 (id=2914): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r5, 0x0, 0xee01) fchown(r5, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) 277.162601ms ago: executing program 8 (id=2915): pipe(&(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0x0, 0xffffffc, 0x1, 0x0, 0xfffffffffffffffa}, &(0x7f0000000000)={0x18, 0x8, 0x1ff, 0x0, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) 276.685421ms ago: executing program 8 (id=2916): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x7e76, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x50, 0x45, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0xd, 0xd}, {0x6, 0x24, 0x1a, 0x8, 0x13}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x8, 0x54, 0x1b}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0xe, 0xfa}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x0, 0xf}}}}}}}]}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000540)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xb}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5, 0x0, 0x0, 0x1802}}], 0x2, 0x4000000) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) socket(0x2, 0x3, 0xff) socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r4, &(0x7f0000000000)='\"', 0xfdef) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 81.227448ms ago: executing program 5 (id=2917): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) syz_usb_connect(0x6, 0x1fc, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fee33c4ae20000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000a0001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a00", @ANYRES32=0x0, @ANYRES64], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xa93f, 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x4040010}, 0x30) 35.374149ms ago: executing program 9 (id=2918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x400000, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) io_setup(0x2, &(0x7f00000001c0)=0x0) io_submit(r8, 0x1, &(0x7f00000012c0)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x2004, r7, 0x0, 0x0, 0x800, 0x0, 0x6, r7}]) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00202b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a000201000000004e227372001890780400"/86], 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r6, &(0x7f0000000500)) socket$rds(0x15, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6gre0\x00', r10, 0x6, 0x3, 0x7, 0x4, 0x0, @local, @mcast1, 0x0, 0x7800, 0x5}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x80, 0x30, 0xb, 0x5, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc4}, 0x40) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) write$cgroup_devices(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT=r11], 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) 30.27915ms ago: executing program 7 (id=2919): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) eventfd(0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) 0s ago: executing program 4 (id=2920): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0x80000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x2d, 0x35, 0x80000a, 0x6, 0x1f, 0x3ff, 0x2, 0xac}) writev(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x320}, {&(0x7f0000000900), 0x4000}], 0xe) kernel console output (not intermixed with test programs): ocess `syz.1.2187'. [ 193.642375][T10025] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2184: corrupted inode contents [ 193.732603][T10032] ip6tnl2: entered allmulticast mode [ 193.740061][T10025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.740619][T10025] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.2184: mark_inode_dirty error [ 193.766495][T10041] xt_hashlimit: size too large, truncated to 1048576 [ 193.774461][T10025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.774657][T10025] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.2184: corrupted inode contents [ 193.841946][T10025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.847946][T10025] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.2184: mark_inode_dirty error [ 193.871720][T10025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.871884][T10025] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.2184: mark inode dirty (error -117) [ 193.894956][T10025] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 193.916575][T10025] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 193.949020][T10048] netlink: 'syz.5.2193': attribute type 1 has an invalid length. [ 193.958290][T10048] netlink: 'syz.5.2193': attribute type 2 has an invalid length. [ 193.972588][T10048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2193'. [ 193.989016][ T28] kauditd_printk_skb: 84 callbacks suppressed [ 193.989032][ T28] audit: type=1400 audit(2000005215.457:3304): avc: denied { mount } for pid=10051 comm="syz.1.2195" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 194.017948][T10025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.143979][T10057] syzkaller0: entered promiscuous mode [ 194.149471][T10057] syzkaller0: entered allmulticast mode [ 194.236938][T10062] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2184: bg 0: block 80: padding at end of block bitmap is not set [ 194.272249][T10062] ext4: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff5q+-aRw ǔ&hӉ84' [ 194.393581][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2196'. [ 194.531438][T10064] hub 8-0:1.0: USB hub found [ 194.549089][T10064] hub 8-0:1.0: 8 ports detected [ 194.587270][T10065] netlink: 'syz.6.2197': attribute type 36 has an invalid length. [ 194.601305][T10069] set_capacity_and_notify: 1 callbacks suppressed [ 194.601323][T10069] loop5: detected capacity change from 0 to 1024 [ 194.630956][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.655822][T10064] netlink: 'syz.6.2197': attribute type 10 has an invalid length. [ 194.670615][T10065] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 194.721958][T10069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.751509][T10065] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 194.763427][T10064] veth1_vlan: left allmulticast mode [ 195.080223][T10088] hsr0: left promiscuous mode [ 195.087428][T10088] macvlan0: left allmulticast mode [ 195.092928][T10088] macvlan1: left allmulticast mode [ 195.098912][T10088] macsec0: left allmulticast mode [ 195.108314][T10088] bond1: left promiscuous mode [ 195.239790][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2207'. [ 195.295698][T10086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.302945][T10086] IPv6: NLM_F_CREATE should be set when creating new route [ 195.517139][T10094] vlan3: entered promiscuous mode [ 195.522267][ T28] audit: type=1326 audit(2000002580.205:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 195.556694][T10094] vlan3: entered allmulticast mode [ 195.571903][T10094] hsr_slave_1: entered allmulticast mode [ 195.599170][T10096] program syz.1.2209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.627406][ T28] audit: type=1326 audit(2000002580.205:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 195.720116][ T28] audit: type=1326 audit(2000002580.205:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 195.770632][ T28] audit: type=1326 audit(2000002580.205:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 195.830703][ T28] audit: type=1326 audit(2000002580.205:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 195.959412][ T28] audit: type=1326 audit(2000002580.205:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 195.983924][ T28] audit: type=1326 audit(2000002580.205:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 196.007593][ T28] audit: type=1326 audit(2000002580.205:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 196.390584][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.400209][ T28] audit: type=1326 audit(2000002580.205:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.1.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b5dc819 code=0x7ffc0000 [ 196.890142][T10125] loop6: detected capacity change from 0 to 256 [ 196.897154][T10125] FAT-fs (loop6): bogus number of FAT sectors [ 196.911334][T10125] FAT-fs (loop6): Can't find a valid FAT filesystem [ 197.015060][T10134] SET target dimension over the limit! [ 197.163277][T10157] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7449 sclass=netlink_xfrm_socket pid=10157 comm=syz.2.2232 [ 197.177157][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 197.276706][T10170] loop2: detected capacity change from 0 to 1024 [ 197.283917][T10170] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 197.324557][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2239'. [ 197.805230][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'. [ 198.092136][T10212] loop5: detected capacity change from 0 to 1024 [ 198.143949][T10212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.260153][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.343474][T10227] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.2258'. [ 198.360636][T10227] 0XD: renamed from gretap0 [ 198.362347][T10229] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.2258'. [ 198.382739][T10199] loop1: detected capacity change from 0 to 32768 [ 198.422481][T10230] loop5: detected capacity change from 0 to 128 [ 198.442764][T10227] 0XD: entered allmulticast mode [ 198.458856][ T3305] loop1: p1 p2 p3 < p5 p6 > [ 198.464179][T10230] vfat: Unknown parameter '' [ 198.469137][ T3305] loop1: p2 size 16775168 extends beyond EOD, truncated [ 198.481633][T10229] 1XD: renamed from 00XD (while UP) [ 198.490278][ T3305] loop1: p5 start 4294970168 is beyond EOD, truncated [ 198.513969][T10199] loop1: p1 p2 p3 < p5 p6 > [ 198.519414][T10199] loop1: p2 size 16775168 extends beyond EOD, truncated [ 198.558458][T10199] loop1: p5 start 4294970168 is beyond EOD, truncated [ 199.009377][ T8335] udevd[8335]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 199.032074][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 199.044874][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 199.058139][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 199.476269][T10243] loop1: detected capacity change from 0 to 2048 [ 199.495208][T10249] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2265'. [ 199.594293][T10243] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 199.600064][T10253] batadv0: entered promiscuous mode [ 199.629676][T10253] vlan2: entered promiscuous mode [ 199.636663][T10243] FAT-fs (loop1): Filesystem has been set read-only [ 199.756395][T10252] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2267'. [ 199.792853][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 199.792866][ T28] audit: type=1400 audit(2000002584.466:3374): avc: denied { read } for pid=10262 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 199.819810][T10260] syzkaller1: entered promiscuous mode [ 199.827883][T10260] syzkaller1: entered allmulticast mode [ 199.879215][T10260] loop6: detected capacity change from 0 to 1024 [ 199.886855][T10260] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 199.902393][T10265] loop3: detected capacity change from 0 to 512 [ 200.732594][T10295] loop3: detected capacity change from 0 to 512 [ 200.771363][T10295] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.786714][T10294] loop2: detected capacity change from 0 to 8192 [ 200.823091][T10295] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.2284: bad orphan inode 131083 [ 200.847191][T10295] loop3: lost filesystem error report for type 5 error -117 [ 200.849367][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 200.853963][T10295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.856689][ C1] EXT4-fs (loop3): initial error at time 2000002585: ext4_orphan_get:1417 [ 200.883845][ C1] EXT4-fs (loop3): last error at time 2000002585: ext4_orphan_get:1417 [ 200.981331][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.011938][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2287'. [ 201.047524][T10310] lo speed is unknown, defaulting to 1000 [ 201.230889][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.278802][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.414262][T10316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2290'. [ 201.827107][T10333] netlink: 'syz.5.2297': attribute type 10 has an invalid length. [ 201.938336][T10343] netlink: 'syz.2.2303': attribute type 8 has an invalid length. [ 202.115704][ T28] audit: type=1400 audit(2000002586.796:3375): avc: denied { create } for pid=10368 comm="syz.2.2313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=caif_socket permissive=1 [ 202.213420][ T28] audit: type=1400 audit(2000002586.886:3376): avc: denied { create } for pid=10368 comm="syz.2.2313" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 202.240254][T10369] loop2: detected capacity change from 0 to 8192 [ 202.279393][ T3305] loop2: p1 < > p2 p4 < p5 > [ 202.284097][ T3305] loop2: partition table partially beyond EOD, truncated [ 202.309494][ T3305] loop2: p1 start 134217728 is beyond EOD, truncated [ 202.337732][ T3305] loop2: p2 size 591360 extends beyond EOD, truncated [ 202.360052][ T3305] loop2: p5 size 591360 extends beyond EOD, truncated [ 202.365572][T10380] lo speed is unknown, defaulting to 1000 [ 202.387438][T10369] loop2: p1 < > p2 p4 < p5 > [ 202.392226][T10369] loop2: partition table partially beyond EOD, truncated [ 202.399306][T10369] loop2: p1 start 134217728 is beyond EOD, truncated [ 202.406071][T10369] loop2: p2 size 591360 extends beyond EOD, truncated [ 202.417359][T10369] loop2: p5 size 591360 extends beyond EOD, truncated [ 202.598835][T10385] loop3: detected capacity change from 0 to 512 [ 202.939223][ T28] audit: type=1400 audit(2000002587.606:3377): avc: denied { read } for pid=10388 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 202.960241][T10385] EXT4-fs (loop3): mounted filesystem 0000ff07-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.979284][T10385] ext4 filesystem being mounted at /418/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.127087][ T3311] EXT4-fs (loop3): unmounting filesystem 0000ff07-0000-0000-0000-000000000000. [ 203.186306][ T28] audit: type=1400 audit(2000002587.866:3378): avc: denied { unmount } for pid=3860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.209708][T10394] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.265981][T10399] loop5: detected capacity change from 0 to 256 [ 203.286366][T10399] FAT-fs (loop5): bogus logical sector size 2056 [ 203.305566][T10399] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 203.326164][T10399] FAT-fs (loop5): Can't find a valid FAT filesystem [ 203.500455][T10412] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.2327'. [ 203.513270][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2327'. [ 203.656456][T10412] loop5: detected capacity change from 0 to 2048 [ 203.712509][T10424] loop6: detected capacity change from 0 to 1024 [ 203.737807][T10424] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 203.752928][T10424] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 203.763265][T10424] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.780293][T10424] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 203.788600][T10424] EXT4-fs (loop6): orphan cleanup on readonly fs [ 203.796937][T10424] EXT4-fs error (device loop6): ext4_read_inode_bitmap:167: comm syz.6.2326: Inode bitmap for bg 0 marked uninitialized [ 203.809799][T10424] loop6: lost filesystem error report for type 5 error -117 [ 203.810919][T10424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.912033][T10412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.944988][T10412] ext4 filesystem being mounted at /446/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.165628][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.389335][ T7458] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.540111][T10454] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.601227][T10454] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.660715][T10454] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.731412][T10454] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.799568][ T5362] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.823054][ T5362] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.859181][ T5362] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.887326][ T5362] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.273144][T10465] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.303432][T10467] usb usb3: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 205.310908][T10467] vhci_hcd vhci_hcd.1: invalid port number 96 [ 205.316993][T10467] vhci_hcd vhci_hcd.1: default hub control req: 1f0a vfffa i0060 l0 [ 205.326724][T10465] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.350345][T10465] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.408350][T10465] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.421915][T10470] tipc: Enabling of bearer rejected, already enabled [ 205.431771][T10470] loop2: detected capacity change from 0 to 512 [ 205.451072][T10470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.471764][T10470] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 205.483284][T10470] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 205.483914][ T7941] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.492960][T10470] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2346: Failed to acquire dquot type 0 [ 205.516504][ T7941] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.522825][T10470] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 205.531351][ T7941] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.541284][T10470] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 205.552608][ T3440] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.561232][T10470] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2346: Failed to acquire dquot type 0 [ 205.593983][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2348'. [ 205.635852][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.654129][T10483] FAULT_INJECTION: forcing a failure. [ 205.654129][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 205.670895][T10483] CPU: 0 UID: 0 PID: 10483 Comm: syz.3.2352 Tainted: G W syzkaller #0 PREEMPT(full) [ 205.670923][T10483] Tainted: [W]=WARN [ 205.670928][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.670938][T10483] Call Trace: [ 205.670991][T10483] [ 205.671000][T10483] __dump_stack+0x1d/0x30 [ 205.671026][T10483] dump_stack_lvl+0x95/0xd0 [ 205.671050][T10483] dump_stack+0x15/0x1b [ 205.671108][T10483] should_fail_ex+0x263/0x280 [ 205.671160][T10483] should_failslab+0x8c/0xb0 [ 205.671182][T10483] __kmalloc_noprof+0xb8/0x4e0 [ 205.671204][T10483] ? bpf_test_init+0x86/0x130 [ 205.671233][T10483] bpf_test_init+0x86/0x130 [ 205.671270][T10483] bpf_prog_test_run_xdp+0x306/0xa10 [ 205.671300][T10483] ? __rcu_read_unlock+0x4e/0x70 [ 205.671368][T10483] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 205.671393][T10483] bpf_prog_test_run+0x204/0x340 [ 205.671421][T10483] __sys_bpf+0x52e/0x7e0 [ 205.671444][T10483] __x64_sys_bpf+0x41/0x50 [ 205.671514][T10483] x64_sys_call+0x10cb/0x3020 [ 205.671535][T10483] do_syscall_64+0x12c/0x370 [ 205.671557][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.671637][T10483] RIP: 0033:0x7fa44144c819 [ 205.671654][T10483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.671670][T10483] RSP: 002b:00007fa43fe9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.671691][T10483] RAX: ffffffffffffffda RBX: 00007fa4416c5fa0 RCX: 00007fa44144c819 [ 205.671752][T10483] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 205.671834][T10483] RBP: 00007fa43fe9f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.671846][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.671857][T10483] R13: 00007fa4416c6038 R14: 00007fa4416c5fa0 R15: 00007ffee93c6128 [ 205.671886][T10483] [ 205.868345][T10486] loop5: detected capacity change from 0 to 1024 [ 205.901988][T10486] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.916502][T10486] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.977559][T10486] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: block 3: comm syz.5.2354: lblock 3 mapped to illegal pblock 3 (length 1) [ 206.029565][T10486] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 206.071244][T10510] FAULT_INJECTION: forcing a failure. [ 206.071244][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 206.091737][T10486] EXT4-fs (loop5): This should not happen!! Data will be lost [ 206.091737][T10486] [ 206.122933][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.2.2361 Tainted: G W syzkaller #0 PREEMPT(full) [ 206.122961][T10510] Tainted: [W]=WARN [ 206.122967][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.122979][T10510] Call Trace: [ 206.123049][T10510] [ 206.123058][T10510] __dump_stack+0x1d/0x30 [ 206.123184][T10510] dump_stack_lvl+0x95/0xd0 [ 206.123203][T10510] dump_stack+0x15/0x1b [ 206.123221][T10510] should_fail_ex+0x263/0x280 [ 206.123245][T10510] should_failslab+0x8c/0xb0 [ 206.123264][T10510] kmem_cache_alloc_noprof+0x66/0x400 [ 206.123310][T10510] ? create_new_namespaces+0x3c/0x440 [ 206.123341][T10510] create_new_namespaces+0x3c/0x440 [ 206.123368][T10510] unshare_nsproxy_namespaces+0xe6/0x120 [ 206.123473][T10510] ksys_unshare+0x3f2/0x6f0 [ 206.123498][T10510] ? ksys_write+0x194/0x1a0 [ 206.123516][T10510] __x64_sys_unshare+0x1f/0x30 [ 206.123555][T10510] x64_sys_call+0x1cef/0x3020 [ 206.123578][T10510] do_syscall_64+0x12c/0x370 [ 206.123654][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.123671][T10510] RIP: 0033:0x7f53d474c819 [ 206.123685][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.123763][T10510] RSP: 002b:00007f53d319f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 206.123780][T10510] RAX: ffffffffffffffda RBX: 00007f53d49c5fa0 RCX: 00007f53d474c819 [ 206.123792][T10510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000680 [ 206.123805][T10510] RBP: 00007f53d319f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.123819][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.123832][T10510] R13: 00007f53d49c6038 R14: 00007f53d49c5fa0 R15: 00007fff527fa508 [ 206.123878][T10510] [ 206.347836][T10517] syzkaller0: entered promiscuous mode [ 206.363289][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 206.378272][T10517] syzkaller0: entered allmulticast mode [ 206.378400][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 206.396243][T10514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2362'. [ 206.411745][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2362'. [ 206.566125][T10534] ip6tnl0: mtu less than device minimum [ 206.679432][T10536] hub 8-0:1.0: USB hub found [ 206.684303][T10536] hub 8-0:1.0: 8 ports detected [ 206.701994][T10536] netlink: 'syz.5.2368': attribute type 36 has an invalid length. [ 206.716139][T10536] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 206.726601][T10536] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 207.184238][T10538] loop1: detected capacity change from 0 to 164 [ 207.190815][T10538] iso9660: Unknown parameter '000000000000000000000x0000000000000000Ablock' [ 207.222868][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 207.303206][T10557] loop1: detected capacity change from 0 to 512 [ 207.315327][T10557] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.323054][T10557] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.340735][T10557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.353737][T10557] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.537449][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.556017][ T28] audit: type=1400 audit(2000002592.236:3379): avc: denied { mounton } for pid=10563 comm="syz.5.2380" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 207.580587][ T28] audit: type=1400 audit(2000002592.236:3380): avc: denied { mount } for pid=10563 comm="syz.5.2380" name="/" dev="rpc_pipefs" ino=34406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 207.580641][T10567] xt_HMARK: spi-set and port-set can't be combined [ 207.760447][T10573] hub 8-0:1.0: USB hub found [ 207.765318][T10573] hub 8-0:1.0: 8 ports detected [ 207.783207][T10573] netlink: 'syz.1.2381': attribute type 10 has an invalid length. [ 208.433813][T10580] loop1: detected capacity change from 0 to 2048 [ 208.455132][T10580] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 208.461648][T10580] EXT4-fs (loop1): mount failed [ 208.494320][T10580] loop1: detected capacity change from 0 to 2048 [ 208.513313][T10580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.545046][ T28] audit: type=1400 audit(2000002593.227:3381): avc: denied { rename } for pid=10579 comm="syz.1.2384" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 208.603705][ T3312] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 34: comm syz-executor: path /495/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 208.625820][ T3312] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 34: comm syz-executor: bad entry in directory: directory entry overrun - offset=4096, inode=0, rec_len=66560, size=2048 fake=0 [ 208.645611][ T3312] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 34: comm syz-executor: path /495/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 208.667539][ T3312] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 34: comm syz-executor: bad entry in directory: directory entry overrun - offset=4096, inode=0, rec_len=66560, size=2048 fake=0 [ 208.687366][ T3312] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 34: comm syz-executor: path /495/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 208.709557][ T3312] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 34: comm syz-executor: bad entry in directory: directory entry overrun - offset=4096, inode=0, rec_len=66560, size=2048 fake=0 [ 208.729527][ T3312] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 34: comm syz-executor: path /495/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 208.751033][ T3312] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 34: comm syz-executor: bad entry in directory: directory entry overrun - offset=4096, inode=0, rec_len=66560, size=2048 fake=0 [ 208.770707][ T3312] EXT4-fs error (device loop1): ext4_readdir:265: inode #11: block 34: comm syz-executor: path /495/file0/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=66560, size=2048 fake=0 [ 208.792379][ T3312] EXT4-fs error (device loop1): ext4_empty_dir:3118: inode #11: block 34: comm syz-executor: bad entry in directory: directory entry overrun - offset=4096, inode=0, rec_len=66560, size=2048 fake=0 [ 208.833581][T10587] netlink: 'syz.6.2386': attribute type 6 has an invalid length. [ 208.996279][T10593] loop6: detected capacity change from 0 to 128 [ 209.012231][T10593] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.041020][T10593] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 209.197561][T10600] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 209.215576][T10600] netlink: 'syz.2.2391': attribute type 2 has an invalid length. [ 209.240418][T10617] lo speed is unknown, defaulting to 1000 [ 209.247008][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2391'. [ 209.256672][ T7458] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.401633][T10632] loop5: detected capacity change from 0 to 4096 [ 209.469456][T10629] syzkaller0: entered promiscuous mode [ 209.474981][T10629] syzkaller0: entered allmulticast mode [ 209.488547][T10632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.513537][T10633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 209.524509][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.555564][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2402'. [ 209.619323][T10644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2406'. [ 209.765386][T10659] random: crng reseeded on system resumption [ 209.781758][T10659] bond4: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 209.796450][T10659] bond4 (unregistering): Released all slaves [ 209.838496][ T28] audit: type=1400 audit(2000002594.517:3382): avc: denied { create } for pid=10649 comm="syz.5.2409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 209.914891][T10670] loop2: detected capacity change from 0 to 128 [ 209.994857][T10672] loop2: detected capacity change from 0 to 4096 [ 210.029361][T10672] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 210.041079][T10585] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.050724][T10672] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 210.068398][T10672] EXT4-fs (loop2): mount failed [ 210.266397][T10689] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10689 comm=syz.6.2423 [ 210.401770][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2426'. [ 210.413369][T10691] lo speed is unknown, defaulting to 1000 [ 210.435002][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2426'. [ 210.490689][T10691] chnl_net:caif_netlink_parms(): no params data found [ 210.590767][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.597997][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.605623][T10691] bridge_slave_0: entered allmulticast mode [ 210.615927][T10691] bridge_slave_0: entered promiscuous mode [ 210.622839][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.630513][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.638455][T10691] bridge_slave_1: entered allmulticast mode [ 210.650773][T10691] bridge_slave_1: entered promiscuous mode [ 210.671398][T10691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.682995][T10718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2430'. [ 210.690066][T10691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.712512][T10691] team0: Port device team_slave_0 added [ 210.719535][T10691] team0: Port device team_slave_1 added [ 210.736387][T10691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.743549][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.777842][T10691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.802888][T10723] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2432'. [ 210.819034][T10691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.827238][T10721] loop3: detected capacity change from 0 to 4096 [ 210.836186][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 210.891855][T10721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.911432][T10691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.923050][T10725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=10725 comm=syz.5.2433 [ 210.977507][T10691] hsr_slave_0: entered promiscuous mode [ 210.983947][T10691] hsr_slave_1: entered promiscuous mode [ 210.987775][ T3311] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 210.990144][T10691] debugfs: 'hsr0' already exists in 'hsr' [ 211.013542][T10691] Cannot create hsr debugfs directory [ 211.029788][ T3311] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 211.108296][T10691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 211.120059][T10691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 211.129101][T10691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 211.138251][T10691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 211.246461][T10745] hub 8-0:1.0: USB hub found [ 211.251276][T10745] hub 8-0:1.0: 8 ports detected [ 211.262051][T10745] netlink: 'syz.5.2438': attribute type 36 has an invalid length. [ 211.314372][T10747] netlink: 'syz.5.2438': attribute type 10 has an invalid length. [ 211.395955][T10745] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 211.406097][T10745] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 211.420314][T10747] macvlan1: entered allmulticast mode [ 211.461170][T10731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.509177][T10691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.530022][T10691] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.544777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.551881][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.645321][T10691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.659916][T10691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.673429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.680601][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.808478][T10691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.197794][T10765] lo speed is unknown, defaulting to 1000 [ 212.328273][ T28] audit: type=1326 audit(2000002596.967:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10781 comm="syz.6.2447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f35c3c819 code=0x0 [ 212.388801][T10765] chnl_net:caif_netlink_parms(): no params data found [ 212.481049][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.488634][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.523962][T10765] bridge_slave_0: entered allmulticast mode [ 212.533254][T10765] bridge_slave_0: entered promiscuous mode [ 212.542375][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.549981][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.557360][T10765] bridge_slave_1: entered allmulticast mode [ 212.565834][T10765] bridge_slave_1: entered promiscuous mode [ 212.595533][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.608893][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.641653][T10765] team0: Port device team_slave_0 added [ 212.651061][T10765] team0: Port device team_slave_1 added [ 212.674831][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.682743][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.711165][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.723870][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.731067][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.758486][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.841362][T10765] hsr_slave_0: entered promiscuous mode [ 212.868989][T10765] hsr_slave_1: entered promiscuous mode [ 212.877672][T10765] debugfs: 'hsr0' already exists in 'hsr' [ 212.883815][T10765] Cannot create hsr debugfs directory [ 213.175347][T10765] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 213.208573][T10765] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 213.221601][T10691] veth0_vlan: entered promiscuous mode [ 213.231952][T10765] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 213.242590][T10691] veth1_vlan: entered promiscuous mode [ 213.250772][T10765] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 213.283341][T10691] veth0_macvtap: entered promiscuous mode [ 213.296799][T10691] veth1_macvtap: entered promiscuous mode [ 213.322280][T10691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.335992][T10691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.357135][ T123] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.377180][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.391461][ T123] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.406495][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.423734][ T7938] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.433439][ T7938] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.551132][ T28] audit: type=1400 audit(2000002598.217:3384): avc: denied { mount } for pid=10691 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.657358][T10836] hub 8-0:1.0: USB hub found [ 213.724226][T10836] hub 8-0:1.0: 8 ports detected [ 213.737569][T10839] netlink: 'syz.5.2457': attribute type 36 has an invalid length. [ 213.792041][T10836] netlink: 'syz.5.2457': attribute type 10 has an invalid length. [ 213.902470][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.909580][ T5362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.067369][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.074488][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.145354][T10839] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 214.155306][T10839] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 214.509585][T10841] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.581882][T10765] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.664971][T10841] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.714441][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.822183][T10841] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.878893][T10765] veth0_vlan: entered promiscuous mode [ 214.886762][T10765] veth1_vlan: entered promiscuous mode [ 214.900666][T10841] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.914739][T10765] veth0_macvtap: entered promiscuous mode [ 214.924418][T10765] veth1_macvtap: entered promiscuous mode [ 214.935263][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.946142][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.958198][ T7938] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.967054][ T7938] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.978351][ T7938] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.987380][ T7938] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.999517][ T7938] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.013730][ T7938] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.051200][ T12] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.063965][ T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.136970][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2443'. [ 215.150722][T10874] batadv_slave_1: entered promiscuous mode [ 215.208044][T10873] batadv_slave_1: left promiscuous mode [ 215.284205][T10882] lo speed is unknown, defaulting to 1000 [ 215.349374][T10888] loop7: detected capacity change from 0 to 16384 [ 215.451789][T10890] hub 8-0:1.0: USB hub found [ 215.456564][T10890] hub 8-0:1.0: 8 ports detected [ 215.473973][T10890] netlink: 'syz.2.2466': attribute type 36 has an invalid length. [ 215.493167][T10890] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 215.503163][T10890] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 215.897595][ T28] audit: type=1400 audit(2000002600.577:3385): avc: denied { mount } for pid=10895 comm="syz.6.2470" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 215.937764][ T28] audit: type=1400 audit(2000002600.617:3386): avc: denied { unmount } for pid=7458 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 216.012630][T10910] FAULT_INJECTION: forcing a failure. [ 216.012630][T10910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.046491][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.6.2473 Tainted: G W syzkaller #0 PREEMPT(full) [ 216.046563][T10910] Tainted: [W]=WARN [ 216.046569][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 216.046616][T10910] Call Trace: [ 216.046623][T10910] [ 216.046630][T10910] __dump_stack+0x1d/0x30 [ 216.046655][T10910] dump_stack_lvl+0x95/0xd0 [ 216.046679][T10910] dump_stack+0x15/0x1b [ 216.046701][T10910] should_fail_ex+0x263/0x280 [ 216.046726][T10910] should_fail+0xb/0x20 [ 216.046762][T10910] should_fail_usercopy+0x1a/0x20 [ 216.046896][T10910] _copy_from_user+0x1c/0xb0 [ 216.046927][T10910] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 216.046955][T10910] map_update_elem+0x4b6/0x6d0 [ 216.046978][T10910] __sys_bpf+0x5e1/0x7e0 [ 216.047002][T10910] __x64_sys_bpf+0x41/0x50 [ 216.047149][T10910] x64_sys_call+0x10cb/0x3020 [ 216.047196][T10910] do_syscall_64+0x12c/0x370 [ 216.047224][T10910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.047247][T10910] RIP: 0033:0x7f3f35c3c819 [ 216.047265][T10910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.047350][T10910] RSP: 002b:00007f3f3468f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.047372][T10910] RAX: ffffffffffffffda RBX: 00007f3f35eb5fa0 RCX: 00007f3f35c3c819 [ 216.047387][T10910] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000002 [ 216.047400][T10910] RBP: 00007f3f3468f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.047459][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.047471][T10910] R13: 00007f3f35eb6038 R14: 00007f3f35eb5fa0 R15: 00007fff03479a18 [ 216.047488][T10910] [ 216.301458][T10918] loop2: detected capacity change from 0 to 512 [ 216.372656][T10921] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2478'. [ 216.385044][T10902] loop7: detected capacity change from 0 to 1024 [ 216.430600][T10902] EXT4-fs: Ignoring removed orlov option [ 216.439036][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2480'. [ 216.448343][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2480'. [ 216.481645][T10925] netlink: 'syz.5.2480': attribute type 19 has an invalid length. [ 216.508323][T10925] netlink: 'syz.5.2480': attribute type 20 has an invalid length. [ 216.541035][T10902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.557340][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2482'. [ 216.764048][T10935] loop6: detected capacity change from 0 to 2048 [ 216.810722][T10939] loop5: detected capacity change from 0 to 1024 [ 216.885446][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.947084][T10939] EXT4-fs: inline encryption not supported [ 216.979368][T10939] ext2: Bad value for 'errors' [ 217.109210][T10952] bond3: entered promiscuous mode [ 217.153455][T10956] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.220384][T10956] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.312201][T10956] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.380967][T10956] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.476880][T10977] loop7: detected capacity change from 0 to 512 [ 217.485428][T10977] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.500317][T10977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.523690][T10961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.534483][T10961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.550347][T10977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.557196][T10981] loop8: detected capacity change from 0 to 2048 [ 217.571041][T10977] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.589312][T10981] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.602289][T10981] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.645638][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.676334][T10985] loop7: detected capacity change from 0 to 512 [ 217.683951][T10985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 217.692852][T10765] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.702933][T10985] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2502: invalid indirect mapped block 4294967295 (level 1) [ 217.717125][T10985] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.717309][T10985] EXT4-fs (loop7): Remounting filesystem read-only [ 217.717393][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 217.717410][ C1] EXT4-fs (loop7): initial error at time 2000002602: ext4_free_branches:1023: inode 11 [ 217.717460][ C1] EXT4-fs (loop7): last error at time 2000002602: ext4_free_branches:1023: inode 11 [ 217.759919][T10985] EXT4-fs (loop7): 2 truncates cleaned up [ 217.767878][T10985] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.791419][T10988] kernel profiling enabled (shift: 63) [ 217.796892][T10988] profiling shift: 63 too large [ 217.821311][T10988] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 217.828596][T10988] IPv6: NLM_F_CREATE should be set when creating new route [ 217.836689][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.509565][T11015] FAULT_INJECTION: forcing a failure. [ 218.509565][T11015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.523037][T11015] CPU: 0 UID: 0 PID: 11015 Comm: syz.5.2513 Tainted: G W syzkaller #0 PREEMPT(full) [ 218.523085][T11015] Tainted: [W]=WARN [ 218.523091][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.523108][T11015] Call Trace: [ 218.523114][T11015] [ 218.523121][T11015] __dump_stack+0x1d/0x30 [ 218.523144][T11015] dump_stack_lvl+0x95/0xd0 [ 218.523182][T11015] dump_stack+0x15/0x1b [ 218.523230][T11015] should_fail_ex+0x263/0x280 [ 218.523253][T11015] should_fail+0xb/0x20 [ 218.523271][T11015] should_fail_usercopy+0x1a/0x20 [ 218.523371][T11015] _copy_from_user+0x1c/0xb0 [ 218.523444][T11015] do_ipv6_setsockopt+0x124/0x21d0 [ 218.523474][T11015] ? kstrtoull+0x111/0x140 [ 218.523534][T11015] ? __rcu_read_unlock+0x4e/0x70 [ 218.523552][T11015] ? avc_has_perm_noaudit+0xab/0x130 [ 218.523621][T11015] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 218.523655][T11015] ipv6_setsockopt+0x59/0x130 [ 218.523715][T11015] tcp_setsockopt+0x98/0xb0 [ 218.523745][T11015] sock_common_setsockopt+0x69/0x80 [ 218.523771][T11015] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 218.523860][T11015] __sys_setsockopt+0x184/0x200 [ 218.523892][T11015] __x64_sys_setsockopt+0x64/0x80 [ 218.523988][T11015] x64_sys_call+0x2327/0x3020 [ 218.524025][T11015] do_syscall_64+0x12c/0x370 [ 218.524083][T11015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.524106][T11015] RIP: 0033:0x7fe72b28c819 [ 218.524122][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.524140][T11015] RSP: 002b:00007fe729cdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.524189][T11015] RAX: ffffffffffffffda RBX: 00007fe72b505fa0 RCX: 00007fe72b28c819 [ 218.524262][T11015] RDX: 000000000000002f RSI: 0000000000000029 RDI: 0000000000000003 [ 218.524299][T11015] RBP: 00007fe729cdf090 R08: 0000000000000108 R09: 0000000000000000 [ 218.524335][T11015] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001 [ 218.524370][T11015] R13: 00007fe72b506038 R14: 00007fe72b505fa0 R15: 00007ffdecadecb8 [ 218.524442][T11015] [ 218.612582][T11013] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.2512'. [ 218.691634][T11020] loop5: detected capacity change from 0 to 512 [ 218.793429][T11020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.798625][T11024] xt_recent: Unsupported userspace flags (000000de) [ 218.806855][T11020] ext4 filesystem being mounted at /492/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.835252][T11031] loop2: detected capacity change from 0 to 128 [ 218.863796][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2514'. [ 218.872920][T11020] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2514'. [ 218.958713][T11031] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.978356][T11031] ext4 filesystem being mounted at /509/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 219.015765][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.128639][ T123] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.139780][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.149045][ T123] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.158232][ T123] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.166854][ T123] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.266478][ T28] audit: type=1400 audit(2000002603.948:3387): avc: denied { create } for pid=11051 comm="syz.2.2525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.312557][ T28] audit: type=1400 audit(2000002603.988:3388): avc: denied { remount } for pid=11051 comm="syz.2.2525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 219.341369][T11055] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2526'. [ 219.351740][T11055] netlink: 'syz.5.2526': attribute type 10 has an invalid length. [ 219.360990][T11055] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2526'. [ 219.371378][T11055] bond0: entered promiscuous mode [ 219.379045][T11055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.431004][T11057] loop5: detected capacity change from 0 to 512 [ 219.441198][T11057] EXT4-fs: Ignoring removed oldalloc option [ 219.455146][T11057] EXT4-fs (loop5): invalid inodes per group: 1 [ 219.455146][T11057] [ 219.896732][T11071] batadv0: entered promiscuous mode [ 219.951257][T11071] vlan2: entered promiscuous mode [ 220.097023][T11076] tipc: Enabling of bearer rejected, failed to enable media [ 220.145910][ T28] audit: type=1326 audit(2000000000.729:3389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.171654][ T28] audit: type=1326 audit(2000000000.769:3390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.203192][ T28] audit: type=1326 audit(2000000000.769:3391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.227107][ T28] audit: type=1326 audit(2000000000.769:3392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.254330][ T28] audit: type=1326 audit(2000000000.769:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.279843][ T28] audit: type=1326 audit(2000000000.789:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.309270][ T28] audit: type=1326 audit(2000000000.789:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.335647][ T28] audit: type=1326 audit(2000000000.789:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11086 comm="syz.8.2539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 220.883449][T11124] hsr0: entered promiscuous mode [ 220.906543][T11127] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 221.018138][T11133] syzkaller0: entered promiscuous mode [ 221.023665][T11133] syzkaller0: entered allmulticast mode [ 221.416874][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2561'. [ 221.540779][ T6126] IPVS: starting estimator thread 0... [ 221.647257][T11160] IPVS: using max 2544 ests per chain, 127200 per kthread [ 221.685207][T11166] ip6t_srh: unknown srh invflags 4000 [ 221.826851][T11172] syzkaller0: entered promiscuous mode [ 221.832452][T11172] syzkaller0: entered allmulticast mode [ 221.968655][T11180] set_capacity_and_notify: 1 callbacks suppressed [ 221.968667][T11180] loop7: detected capacity change from 0 to 512 [ 221.995046][T11180] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.014706][T11180] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2572: Failed to acquire dquot type 0 [ 222.032926][T11187] loop8: detected capacity change from 0 to 1024 [ 222.052901][T11187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.065936][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.068854][T11187] netlink: 'syz.8.2574': attribute type 1 has an invalid length. [ 222.125389][T10765] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.153301][T11194] loop7: detected capacity change from 0 to 164 [ 222.160709][T11194] iso9660: Unknown parameter '0x000000000000000f0xffffffffffffffff 0x000000000000000e0x0000000000000005^jwW[ACXJ/Y[l^+hZT`i*<}ySLWlX.CROeƼV)4p9%_%T̞GCu ĹL<!_8<TbV' [ 222.290779][T11204] syzkaller0: entered promiscuous mode [ 222.297984][T11204] syzkaller0: entered allmulticast mode [ 222.417158][T11212] netlink: 'syz.2.2586': attribute type 1 has an invalid length. [ 222.471032][T11212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2586'. [ 222.617505][T11231] lo speed is unknown, defaulting to 1000 [ 222.821377][T11233] loop8: detected capacity change from 0 to 512 [ 222.843515][T11233] EXT4-fs: Ignoring removed bh option [ 222.863857][T11233] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 222.933476][T11233] EXT4-fs (loop8): 1 truncate cleaned up [ 222.958328][T11233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.020745][T10765] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.061927][T11231] loop2: detected capacity change from 0 to 2048 [ 223.137365][ T9] hid (null): unknown global tag 0x10 [ 223.187489][ T9] hid (null): invalid report_size 64966 [ 223.193076][ T9] hid (null): unknown global tag 0xaa [ 223.205593][T11231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.234733][ T9] hid (null): unknown global tag 0xe0 [ 223.243716][ T9] hid (null): invalid report_count -1274838304 [ 223.265643][ T9] hid (null): unknown global tag 0xd [ 223.266270][T11231] ext4 filesystem being mounted at /531/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.281237][ T9] hid (null): unknown global tag 0xe [ 223.317495][ T9] hid (null): invalid report_count 342794368 [ 223.324880][ T9] hid (null): invalid report_count 496347337 [ 223.332983][T11248] lo speed is unknown, defaulting to 1000 [ 223.342464][ T9] hid (null): unknown global tag 0xe [ 223.357313][ T9] hid (null): invalid report_count 44313 [ 223.363062][ T9] hid (null): unknown global tag 0xe [ 223.381333][ T9] hid (null): unknown global tag 0xe [ 223.386712][ T9] hid (null): unknown global tag 0xd [ 223.409810][ T9] hid (null): invalid report_size 19273 [ 223.415387][ T9] hid (null): unknown global tag 0xe [ 223.434034][ T9] hid (null): bogus close delimiter [ 223.448334][ T9] hid (null): unknown global tag 0xd [ 223.453675][ T9] hid (null): unknown global tag 0xe [ 223.462613][T11248] chnl_net:caif_netlink_parms(): no params data found [ 223.475271][ T9] hid (null): unknown global tag 0xc [ 223.490502][T11266] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2593: bg 0: block 345: padding at end of block bitmap is not set [ 223.506431][ T9] hid (null): unknown global tag 0x24 [ 223.524037][ T9] hid (null): report_id 21852 is invalid [ 223.535063][T11267] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2603'. [ 223.544082][ T9] hid (null): report_id 2957101466 is invalid [ 223.553019][ T9] hid (null): unknown global tag 0xc [ 223.573243][ T9] hid (null): global environment stack underflow [ 223.598801][T11266] EXT4-fs (loop2): Remounting filesystem read-only [ 223.623911][ T9] hid (null): global environment stack underflow [ 223.642507][ T9] hid (null): unknown global tag 0x29 [ 223.648770][ T9] hid (null): unknown global tag 0xe [ 223.654210][ T9] hid (null): unknown global tag 0xd [ 223.659737][ T9] hid (null): unknown global tag 0xe [ 223.665115][ T9] hid (null): unknown global tag 0xe [ 223.670652][ T9] hid (null): unknown global tag 0xd [ 223.676052][ T9] hid (null): unknown global tag 0xd [ 223.683422][T11248] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.697506][ T9] hid (null): global environment stack underflow [ 223.703958][ T9] hid (null): unknown global tag 0xd [ 223.714717][T11274] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2605'. [ 223.724691][ T9] hid (null): unknown global tag 0xe [ 223.728704][T11248] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.733193][ T9] hid (null): invalid report_count -1268160677 [ 223.743231][T11248] bridge_slave_0: entered allmulticast mode [ 223.751067][T11248] bridge_slave_0: entered promiscuous mode [ 223.758109][T11248] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.765300][ T9] hid (null): unknown global tag 0xd [ 223.772061][T11248] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.779543][ T9] hid (null): unknown global tag 0xd [ 223.787756][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.797019][T11248] bridge_slave_1: entered allmulticast mode [ 223.803088][ T9] hid (null): report_id 0 is invalid [ 223.809212][T11248] bridge_slave_1: entered promiscuous mode [ 223.815129][ T9] hid (null): invalid report_size 52126 [ 223.859301][ T9] hid (null): invalid report_count 43994 [ 223.882520][ T9] hid (null): report_id 12125 is invalid [ 223.895593][T11248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.905299][ T9] hid (null): unknown global tag 0xc [ 223.912477][ T9] hid (null): report_id 0 is invalid [ 223.917997][ T9] hid (null): unknown global tag 0xd [ 223.926018][ T9] hid-generic 0004:0002:097B.0004: unexpected long global item [ 223.934974][ T9] hid-generic 0004:0002:097B.0004: probe with driver hid-generic failed with error -22 [ 223.959414][T11248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.994642][T11248] team0: Port device team_slave_0 added [ 224.009847][T11248] team0: Port device team_slave_1 added [ 224.049574][T11248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.056660][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.099757][T11287] FAULT_INJECTION: forcing a failure. [ 224.099757][T11287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.114010][T11287] CPU: 1 UID: 0 PID: 11287 Comm: syz.7.2609 Tainted: G W syzkaller #0 PREEMPT(full) [ 224.114040][T11287] Tainted: [W]=WARN [ 224.114047][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.114060][T11287] Call Trace: [ 224.114066][T11287] [ 224.114074][T11287] __dump_stack+0x1d/0x30 [ 224.114176][T11287] dump_stack_lvl+0x95/0xd0 [ 224.114201][T11287] dump_stack+0x15/0x1b [ 224.114221][T11287] should_fail_ex+0x263/0x280 [ 224.114244][T11287] should_fail+0xb/0x20 [ 224.114300][T11287] should_fail_usercopy+0x1a/0x20 [ 224.114326][T11287] _copy_from_user+0x1c/0xb0 [ 224.114357][T11287] bpf_test_init+0xb9/0x130 [ 224.114412][T11287] bpf_prog_test_run_xdp+0x306/0xa10 [ 224.114445][T11287] ? __rcu_read_unlock+0x4e/0x70 [ 224.114537][T11287] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 224.114641][T11287] bpf_prog_test_run+0x204/0x340 [ 224.114698][T11287] __sys_bpf+0x52e/0x7e0 [ 224.114728][T11287] __x64_sys_bpf+0x41/0x50 [ 224.114747][T11287] x64_sys_call+0x10cb/0x3020 [ 224.114773][T11287] do_syscall_64+0x12c/0x370 [ 224.114796][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.114824][T11287] RIP: 0033:0x7fe3c320c819 [ 224.114916][T11287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.114934][T11287] RSP: 002b:00007fe3c1c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.114954][T11287] RAX: ffffffffffffffda RBX: 00007fe3c3485fa0 RCX: 00007fe3c320c819 [ 224.114968][T11287] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 224.114981][T11287] RBP: 00007fe3c1c67090 R08: 0000000000000000 R09: 0000000000000000 [ 224.114996][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.115009][T11287] R13: 00007fe3c3486038 R14: 00007fe3c3485fa0 R15: 00007ffca490a5b8 [ 224.115028][T11287] [ 224.227272][T11248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.320177][T11248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.327224][T11248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.353338][T11248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.385160][T11248] hsr_slave_0: entered promiscuous mode [ 224.400834][T11248] hsr_slave_1: entered promiscuous mode [ 224.406806][T11248] debugfs: 'hsr0' already exists in 'hsr' [ 224.412565][T11248] Cannot create hsr debugfs directory [ 224.421026][T11292] loop8: detected capacity change from 0 to 512 [ 224.437251][T11292] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.2611: inode has both inline data and extents flags [ 224.450496][T11292] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 224.460604][T11292] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.2611: couldn't read orphan inode 15 (err -117) [ 224.469767][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 224.469794][ C0] EXT4-fs (loop8): initial error at time 2000000005: ext4_orphan_get:1391: inode 15 [ 224.469825][ C0] EXT4-fs (loop8): last error at time 2000000005: ext4_orphan_get:1391: inode 15 [ 224.507245][T11292] loop8: lost filesystem error report for type 5 error -117 [ 224.507993][T11292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.556572][T11248] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 224.566542][T11292] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.568124][T11248] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 224.578759][T11292] vhci_hcd vhci_hcd.2: invalid port number 96 [ 224.586617][T11292] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 224.589123][T11248] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 224.605036][T11248] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 224.624117][T10765] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.676297][T11248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.710865][T11308] hub 8-0:1.0: USB hub found [ 224.715586][T11308] hub 8-0:1.0: 8 ports detected [ 224.723094][T11308] netlink: 'syz.7.2613': attribute type 36 has an invalid length. [ 224.734086][T11308] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 224.744679][T11308] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 224.756064][T11308] netlink: 'syz.7.2613': attribute type 10 has an invalid length. [ 224.808421][T11308] macvlan1: entered allmulticast mode [ 224.815772][T11308] veth1_vlan: entered allmulticast mode [ 224.826033][T11308] team0: Port device macvlan1 added [ 224.870350][T11248] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.906804][ T123] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.913975][ T123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.980270][ T123] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.987452][ T123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.075723][T11248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.196254][T11248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.398777][T11335] lo speed is unknown, defaulting to 1000 [ 225.447923][T11344] netlink: 'syz.7.2620': attribute type 8 has an invalid length. [ 225.589551][T11248] veth0_vlan: entered promiscuous mode [ 225.613126][T11248] veth1_vlan: entered promiscuous mode [ 225.632740][T11356] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.644910][T11248] veth0_macvtap: entered promiscuous mode [ 225.653524][T11248] veth1_macvtap: entered promiscuous mode [ 225.668146][T11248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.680569][T11248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.691028][T11356] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.704939][ T7941] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.713839][ T7941] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.723332][ T7941] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.733832][ T7941] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.745708][T11356] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.790278][T11356] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.857173][ T1649] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.878758][ T1649] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.895569][ T1649] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.910356][ T1649] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.931329][T11361] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.965774][T11364] lo speed is unknown, defaulting to 1000 [ 226.022866][T11361] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.089487][T11361] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.154620][T11366] loop5: detected capacity change from 0 to 164 [ 226.168229][T11361] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.179653][T11366] iso9660: Unknown parameter '000000000000000000000x0000000000000000Ablock' [ 226.251540][ T7938] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.277519][ T7941] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.295904][ T7941] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.309139][ T7941] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.454948][T11381] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 226.762119][T11392] syzkaller0: entered promiscuous mode [ 226.767804][T11392] syzkaller0: entered allmulticast mode [ 226.986483][T11395] netlink: 'syz.7.2636': attribute type 12 has an invalid length. [ 226.994430][T11395] netlink: 'syz.7.2636': attribute type 29 has an invalid length. [ 227.005917][T11395] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2636'. [ 227.015762][T11395] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2636'. [ 227.127810][T11406] loop7: detected capacity change from 0 to 512 [ 227.150083][T11406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.185712][T11408] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.224935][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.236664][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.257367][T11408] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.279068][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 227.279082][ T28] audit: type=1400 audit(2000000007.869:3614): avc: denied { accept } for pid=11405 comm="syz.7.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 227.308115][T11408] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.351790][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.400949][T11408] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.431604][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'. [ 227.510294][T11420] bridge_slave_0: left allmulticast mode [ 227.526005][T11421] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2645'. [ 227.545806][T11420] bridge_slave_0: left promiscuous mode [ 227.551697][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'. [ 227.628149][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.659419][T11420] bridge_slave_1: left allmulticast mode [ 227.665201][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.675201][T11420] bond0: (slave bond_slave_0): Releasing backup interface [ 227.690257][T11420] bond0: (slave bond_slave_1): Releasing backup interface [ 227.710182][T11420] team0: Port device team_slave_0 removed [ 227.728610][T11420] team0: Port device team_slave_1 removed [ 227.743670][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.763620][T11420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.774938][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.788154][T11420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.799856][T11420] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 227.941433][T11427] hub 8-0:1.0: USB hub found [ 227.946276][T11427] hub 8-0:1.0: 8 ports detected [ 227.957159][T11427] netlink: 'syz.9.2646': attribute type 36 has an invalid length. [ 227.971811][T11427] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 227.981948][T11427] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 227.996000][T11427] netlink: 'syz.9.2646': attribute type 10 has an invalid length. [ 228.014145][T11427] macvlan1: entered allmulticast mode [ 228.024266][T11427] veth1_vlan: entered allmulticast mode [ 228.034646][T11427] team0: Port device macvlan1 added [ 228.060557][T11426] loop7: detected capacity change from 0 to 512 [ 228.104360][T11426] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.116341][T11426] EXT4-fs: Ignoring removed mblk_io_submit option [ 228.143335][T11426] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #2: block 4: comm syz.7.2647: lblock 0 mapped to illegal pblock 4 (length 1) [ 228.180612][T11426] loop7: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 228.180921][T11426] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.2647: error -117 reading directory block [ 228.190000][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 228.190018][ C1] EXT4-fs (loop7): initial error at time 2000000008: ext4_map_blocks:776: inode 2: block 4 [ 228.190053][ C1] EXT4-fs (loop7): last error at time 2000000008: ext4_map_blocks:776: inode 2: block 4 [ 228.307554][T11426] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 228.316132][T11426] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.341230][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.387801][T11432] Cannot find del_set index 0 as target [ 228.478992][T11436] ipt_REJECT: TCP_RESET invalid for non-tcp [ 228.999573][T11442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2652'. [ 229.255571][T11447] Cannot find set identified by id 0 to match [ 229.345426][T11452] loop7: detected capacity change from 0 to 512 [ 229.356080][T11452] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 229.366118][T11452] EXT4-fs (loop7): warning: checktime reached, running e2fsck is recommended [ 229.378648][T11452] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 229.386710][T11452] System zones: 0-2, 18-18, 34-34 [ 229.392297][T11452] EXT4-fs error (device loop7): ext4_orphan_get:1417: comm syz.7.2656: bad orphan inode 15 [ 229.402365][T11452] loop7: lost filesystem error report for type 5 error -117 [ 229.402516][T11452] ext4_test_bit(bit=14, block=18) = 1 [ 229.409940][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 229.409951][ C0] EXT4-fs (loop7): initial error at time 2000000009: ext4_orphan_get:1417 [ 229.409964][ C0] EXT4-fs (loop7): last error at time 2000000009: ext4_orphan_get:1417 [ 229.439159][T11452] is_bad_inode(inode)=0 [ 229.443354][T11452] NEXT_ORPHAN(inode)=2264924160 [ 229.448243][T11452] max_ino=32 [ 229.451515][T11452] i_nlink=0 [ 229.454755][T11452] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2656: corrupted inode contents [ 229.466601][T11452] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.466814][T11452] EXT4-fs error (device loop7): ext4_dirty_inode:6450: inode #15: comm syz.7.2656: mark_inode_dirty error [ 229.488071][T11452] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.488276][T11452] EXT4-fs error (device loop7): ext4_do_update_inode:5569: inode #15: comm syz.7.2656: corrupted inode contents [ 229.509977][T11452] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.510205][T11452] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.2656: mark_inode_dirty error [ 229.531612][T11452] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.531746][T11452] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.2656: mark inode dirty (error -117) [ 229.559031][T11452] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 229.562142][T11452] EXT4-fs warning (device loop7): ext4_evict_inode:275: xattr delete (err -117) [ 229.581775][T11452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.668367][T11457] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.793530][T11460] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2656: bg 0: block 80: padding at end of block bitmap is not set [ 229.824855][T11460] ext4: Unknown parameter '184467440737095516150xffffffffffffffff0xffffffffffffffff5q+-aRw ǔ&hӉ84' [ 229.980193][T11466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 230.137377][ T28] audit: type=1400 audit(2000000000.239:3615): avc: denied { execute } for pid=11470 comm="syz.2.2661" path="/memory.swap.current" dev="ramfs" ino=38851 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 230.228473][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.256779][T11466] loop5: detected capacity change from 0 to 512 [ 230.301726][T11466] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.329242][T11466] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.346623][T11466] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.2660: iget: bad i_size value: 2533274857506816 [ 230.385219][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.609296][T11489] siw: device registration error -23 [ 230.624865][T11487] lo speed is unknown, defaulting to 1000 [ 230.988284][ T5362] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.996503][ T5362] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.012235][ T5362] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.029196][ T5362] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.099862][T11499] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11499 comm=syz.7.2669 [ 231.220653][T11457] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.327115][T11457] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.401766][T11457] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.528213][ T7944] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.544915][ T123] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.572606][ T28] audit: type=1326 audit(2000000001.709:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d474c819 code=0x7ffc0000 [ 231.601619][ T7944] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.613074][ T28] audit: type=1326 audit(2000000001.709:3617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d474c819 code=0x7ffc0000 [ 231.631278][ T7944] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.713666][ T28] audit: type=1326 audit(2000000001.709:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d474c819 code=0x7ffc0000 [ 231.749892][T11535] loop5: detected capacity change from 0 to 128 [ 231.785958][ T28] audit: type=1326 audit(2000000001.709:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f53d474c819 code=0x7ffc0000 [ 231.820529][ T28] audit: type=1326 audit(2000000001.709:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d474c819 code=0x7ffc0000 [ 231.878299][ T28] audit: type=1326 audit(2000000001.749:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d474c819 code=0x7ffc0000 [ 232.066697][ T28] audit: type=1326 audit(2000000001.749:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f53d474c582 code=0x7ffc0000 [ 232.090797][ T28] audit: type=1326 audit(2000000001.749:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11525 comm="syz.2.2681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f53d474c617 code=0x7ffc0000 [ 232.599455][T11558] loop9: detected capacity change from 0 to 512 [ 232.606791][T11558] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 232.650136][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 232.650149][ T28] audit: type=1400 audit(2000000002.789:3658): avc: denied { unmount } for pid=11248 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 232.728066][T11567] FAULT_INJECTION: forcing a failure. [ 232.728066][T11567] name failslab, interval 1, probability 0, space 0, times 0 [ 232.740897][T11567] CPU: 0 UID: 0 PID: 11567 Comm: syz.9.2696 Tainted: G W syzkaller #0 PREEMPT(full) [ 232.740965][T11567] Tainted: [W]=WARN [ 232.740969][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.740976][T11567] Call Trace: [ 232.740980][T11567] [ 232.740984][T11567] __dump_stack+0x1d/0x30 [ 232.741000][T11567] dump_stack_lvl+0x95/0xd0 [ 232.741075][T11567] dump_stack+0x15/0x1b [ 232.741086][T11567] should_fail_ex+0x263/0x280 [ 232.741101][T11567] ? rtnl_newlink+0x5c/0x1330 [ 232.741157][T11567] should_failslab+0x8c/0xb0 [ 232.741170][T11567] __kmalloc_cache_noprof+0x5f/0x410 [ 232.741184][T11567] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.741238][T11567] rtnl_newlink+0x5c/0x1330 [ 232.741263][T11567] ? __memcg_slab_free_hook+0x14b/0x240 [ 232.741280][T11567] ? __rcu_read_unlock+0x4e/0x70 [ 232.741292][T11567] ? avc_has_perm_noaudit+0xab/0x130 [ 232.741347][T11567] ? cred_has_capability+0x224/0x2a0 [ 232.741431][T11567] ? selinux_capable+0x31/0x40 [ 232.741447][T11567] ? security_capable+0x7b/0x90 [ 232.741461][T11567] ? ns_capable+0x7c/0xb0 [ 232.741505][T11567] ? __pfx_rtnl_newlink+0x10/0x10 [ 232.741517][T11567] rtnetlink_rcv_msg+0x64b/0x720 [ 232.741531][T11567] netlink_rcv_skb+0x123/0x220 [ 232.741547][T11567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 232.741611][T11567] rtnetlink_rcv+0x1c/0x30 [ 232.741621][T11567] netlink_unicast+0x5c0/0x690 [ 232.741638][T11567] netlink_sendmsg+0x5c8/0x6f0 [ 232.741650][T11567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.741660][T11567] ____sys_sendmsg+0x563/0x5b0 [ 232.741710][T11567] ___sys_sendmsg+0x195/0x1e0 [ 232.741735][T11567] __x64_sys_sendmsg+0xd4/0x160 [ 232.741766][T11567] x64_sys_call+0x194c/0x3020 [ 232.741780][T11567] do_syscall_64+0x12c/0x370 [ 232.741853][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.741906][T11567] RIP: 0033:0x7f4c3498c819 [ 232.741990][T11567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.742000][T11567] RSP: 002b:00007f4c333df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.742012][T11567] RAX: ffffffffffffffda RBX: 00007f4c34c05fa0 RCX: 00007f4c3498c819 [ 232.742019][T11567] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 232.742026][T11567] RBP: 00007f4c333df090 R08: 0000000000000000 R09: 0000000000000000 [ 232.742034][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.742041][T11567] R13: 00007f4c34c06038 R14: 00007f4c34c05fa0 R15: 00007ffc3ea53488 [ 232.742086][T11567] [ 233.024866][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2698'. [ 233.034122][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2698'. [ 233.050858][T11573] tmpfs: Bad value for 'mpol' [ 233.058566][ T28] audit: type=1400 audit(2000000003.189:3659): avc: denied { mounton } for pid=11572 comm="syz.5.2699" path="/syzcgroup/unified/syz5" dev="rpc_pipefs" ino=34406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 233.083522][T11571] wireguard0: entered promiscuous mode [ 233.089899][T11571] wireguard0: entered allmulticast mode [ 233.189945][T11582] ieee802154 phy0 wpan0: encryption failed: -22 [ 233.815873][ T28] audit: type=1400 audit(2000000003.949:3660): avc: denied { map } for pid=11609 comm="syz.5.2713" path="socket:[41068]" dev="sockfs" ino=41068 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 233.877270][ T28] audit: type=1326 audit(2000000003.989:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3498c819 code=0x7ffc0000 [ 233.967408][ T28] audit: type=1326 audit(2000000003.989:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3498c819 code=0x7ffc0000 [ 234.026573][ T28] audit: type=1326 audit(2000000003.989:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3498c819 code=0x7ffc0000 [ 234.087458][ T28] audit: type=1326 audit(2000000003.989:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4c3498c819 code=0x7ffc0000 [ 234.113621][ T28] audit: type=1326 audit(2000000004.049:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3498c819 code=0x7ffc0000 [ 234.139968][ T28] audit: type=1326 audit(2000000004.049:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4c3498c582 code=0x7ffc0000 [ 234.164046][ T28] audit: type=1326 audit(2000000004.049:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.9.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4c3498c617 code=0x7ffc0000 [ 234.509443][T11621] bridge_slave_0: left allmulticast mode [ 234.525314][T11621] bridge_slave_0: left promiscuous mode [ 234.538406][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.557161][T11621] bridge_slave_1: left allmulticast mode [ 234.570059][T11621] bridge_slave_1: left promiscuous mode [ 234.582459][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.603762][T11621] bond0: (slave bond_slave_0): Releasing backup interface [ 234.618365][T11621] bond0: (slave bond_slave_1): Releasing backup interface [ 234.631212][T11621] team0: Port device team_slave_0 removed [ 234.642390][T11621] team0: Port device team_slave_1 removed [ 234.649517][T11621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.656924][T11621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.666316][T11621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.674793][T11621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.685150][T11621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 234.745929][T11624] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2718'. [ 234.761068][T11626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11626 comm=syz.2.2719 [ 234.776007][T11627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11627 comm=syz.2.2719 [ 235.088148][T11653] loop2: detected capacity change from 0 to 2048 [ 235.152165][T11649] loop9: detected capacity change from 0 to 164 [ 235.165751][T11649] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.205029][T11649] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.212224][T11663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2733'. [ 235.216816][T11649] rock: directory entry would overflow storage [ 235.228309][T11649] rock: sig=0x4f50, size=4, remaining=3 [ 235.233877][T11649] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 235.280220][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2734'. [ 235.306548][T11654] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.322216][T11654] rock: directory entry would overflow storage [ 235.330512][T11654] rock: sig=0x4f50, size=4, remaining=3 [ 235.336106][T11654] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 235.365414][T11654] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 235.374673][T11672] Cannot find del_set index 29 as target [ 235.397676][T11654] Symlink component flag not implemented [ 235.403405][T11654] Symlink component flag not implemented [ 235.420860][T11654] Symlink component flag not implemented (7) [ 235.427541][T11654] Symlink component flag not implemented (116) [ 235.483377][T11680] batadv0: entered promiscuous mode [ 235.489265][T11680] vlan2: entered promiscuous mode [ 235.730988][T11690] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2745'. [ 235.786010][T11690] netlink: 'syz.8.2745': attribute type 32 has an invalid length. [ 235.831412][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2745'. [ 235.844783][T11693] loop7: detected capacity change from 0 to 8192 [ 235.888042][T11690] bond1: option coupled_control: invalid value (18) [ 235.905341][T11690] bond1 (unregistering): Released all slaves [ 235.918194][T11693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11693 comm=syz.7.2746 [ 235.949993][T11693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11693 comm=syz.7.2746 [ 235.973196][T11698] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2747'. [ 236.160856][T11713] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 236.210670][T11717] syzkaller0: entered promiscuous mode [ 236.216364][T11717] syzkaller0: entered allmulticast mode [ 236.320740][T11729] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2758'. [ 236.458287][T11739] loop2: detected capacity change from 0 to 512 [ 236.466763][T11742] netlink: 'syz.7.2764': attribute type 10 has an invalid length. [ 236.479513][T11739] EXT4-fs: Ignoring removed nobh option [ 236.485116][T11739] EXT4-fs: Ignoring removed bh option [ 236.490942][T11742] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2764'. [ 236.501144][T11742] hsr0: entered promiscuous mode [ 236.506734][T11739] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.520231][T11742] bridge0: port 1(hsr0) entered blocking state [ 236.530999][T11739] EXT4-fs (loop2): 1 truncate cleaned up [ 236.537013][T11739] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.549702][T11742] bridge0: port 1(hsr0) entered disabled state [ 236.556916][T11742] hsr0: entered allmulticast mode [ 236.562415][T11742] hsr_slave_0: entered allmulticast mode [ 236.568451][T11742] hsr_slave_1: entered allmulticast mode [ 236.580057][T11742] bridge0: port 1(hsr0) entered blocking state [ 236.586652][T11742] bridge0: port 1(hsr0) entered forwarding state [ 236.656442][T11756] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.682252][ T3420] kernel write not supported for file bpf-prog (pid: 3420 comm: kworker/1:6) [ 236.702551][ T3321] EXT4-fs error (device loop2): mb_free_blocks:2047: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 236.733569][ T3321] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 236.745746][ T3321] EXT4-fs error (device loop2): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 236.774114][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.785386][ T123] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.810213][T11756] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.839636][ T123] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.860244][T11756] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.890679][ T123] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.943589][T11756] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.980040][ T123] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.005594][T11776] lo speed is unknown, defaulting to 1000 [ 237.041728][ T1649] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.058222][ T1649] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.078699][ T7941] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.125498][ T7941] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.151735][T11794] FAULT_INJECTION: forcing a failure. [ 237.151735][T11794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.165344][T11794] CPU: 1 UID: 0 PID: 11794 Comm: syz.7.2782 Tainted: G W syzkaller #0 PREEMPT(full) [ 237.165371][T11794] Tainted: [W]=WARN [ 237.165376][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.165387][T11794] Call Trace: [ 237.165410][T11794] [ 237.165417][T11794] __dump_stack+0x1d/0x30 [ 237.165442][T11794] dump_stack_lvl+0x95/0xd0 [ 237.165461][T11794] dump_stack+0x15/0x1b [ 237.165564][T11794] should_fail_ex+0x263/0x280 [ 237.165587][T11794] should_fail+0xb/0x20 [ 237.165641][T11794] should_fail_usercopy+0x1a/0x20 [ 237.165709][T11794] _copy_from_user+0x1c/0xb0 [ 237.165738][T11794] ucma_write+0xd8/0x260 [ 237.165767][T11794] vfs_writev+0x42b/0x900 [ 237.165818][T11794] ? __pfx_ucma_write+0x10/0x10 [ 237.165845][T11794] do_writev+0xe9/0x210 [ 237.165868][T11794] __x64_sys_writev+0x45/0x50 [ 237.165889][T11794] x64_sys_call+0x1c0c/0x3020 [ 237.165967][T11794] do_syscall_64+0x12c/0x370 [ 237.166033][T11794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.166051][T11794] RIP: 0033:0x7fe3c320c819 [ 237.166067][T11794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.166085][T11794] RSP: 002b:00007fe3c1c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 237.166138][T11794] RAX: ffffffffffffffda RBX: 00007fe3c3485fa0 RCX: 00007fe3c320c819 [ 237.166150][T11794] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 000000000000000c [ 237.166161][T11794] RBP: 00007fe3c1c67090 R08: 0000000000000000 R09: 0000000000000000 [ 237.166172][T11794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.166183][T11794] R13: 00007fe3c3486038 R14: 00007fe3c3485fa0 R15: 00007ffca490a5b8 [ 237.166201][T11794] [ 237.167192][ T123] bridge_slave_1: left allmulticast mode [ 237.349242][ T123] bridge_slave_1: left promiscuous mode [ 237.355026][ T123] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.362980][ T123] bridge_slave_0: left allmulticast mode [ 237.368780][ T123] bridge_slave_0: left promiscuous mode [ 237.374531][ T123] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.456837][T11821] loop7: detected capacity change from 0 to 1024 [ 237.465637][T11821] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 238.590079][ T123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.598930][ T123] bond_slave_0: left promiscuous mode [ 238.605400][ T123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.614430][ T123] bond_slave_1: left promiscuous mode [ 238.621554][ T123] bond0 (unregistering): Released all slaves [ 238.629523][ T123] bond1 (unregistering): Released all slaves [ 238.639124][ T123] bond2 (unregistering): Released all slaves [ 238.648231][ T123] bond3 (unregistering): Released all slaves [ 238.656584][ T123] bond4 (unregistering): Released all slaves [ 238.669108][T11776] chnl_net:caif_netlink_parms(): no params data found [ 238.681277][T11818] syzkaller1: entered promiscuous mode [ 238.686770][T11818] syzkaller1: entered allmulticast mode [ 238.763011][T11837] loop5: detected capacity change from 0 to 1024 [ 238.781180][T11837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 238.793366][T11837] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.805042][ T123] tipc: Disabling bearer [ 238.810838][ T123] tipc: Left network mode [ 238.858617][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.865854][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.873419][T11776] bridge_slave_0: entered allmulticast mode [ 238.880182][T11776] bridge_slave_0: entered promiscuous mode [ 238.886806][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.894812][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.908341][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 238.913503][T11776] bridge_slave_1: entered allmulticast mode [ 238.928064][T11776] bridge_slave_1: entered promiscuous mode [ 238.977014][ T123] hsr_slave_0: left promiscuous mode [ 238.984347][T11862] netlink: 'syz.8.2795': attribute type 10 has an invalid length. [ 238.992832][ T123] hsr_slave_1: left promiscuous mode [ 239.001826][ T123] veth1_macvtap: left promiscuous mode [ 239.010227][ T123] veth0_macvtap: left promiscuous mode [ 239.015734][ T123] veth1_vlan: left promiscuous mode [ 239.033179][ T123] veth0_vlan: left promiscuous mode [ 239.081939][ T123] team0 (unregistering): Port device macvlan1 removed [ 239.105666][ T123] team0 (unregistering): Port device team_slave_1 removed [ 239.114851][ T123] team0 (unregistering): Port device team_slave_0 removed [ 239.148835][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.169026][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.205654][T11776] team0: Port device team_slave_0 added [ 239.212394][T11776] team0: Port device team_slave_1 added [ 239.228375][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.235413][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.282200][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.293960][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.301040][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.327913][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.361664][T11776] hsr_slave_0: entered promiscuous mode [ 239.367953][T11776] hsr_slave_1: entered promiscuous mode [ 239.373916][T11776] debugfs: 'hsr0' already exists in 'hsr' [ 239.387226][T11776] Cannot create hsr debugfs directory [ 239.427546][T11887] netlink: 'syz.9.2800': attribute type 13 has an invalid length. [ 239.435499][T11887] netlink: 'syz.9.2800': attribute type 17 has an invalid length. [ 239.464707][T11892] loop5: detected capacity change from 0 to 512 [ 239.694693][T11887] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.954044][T11915] batadv0: entered promiscuous mode [ 239.961478][T11915] vlan2: entered promiscuous mode [ 239.976641][T11917] loop7: detected capacity change from 0 to 16384 [ 239.984877][ T123] IPVS: stop unused estimator thread 0... [ 240.194397][T11935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11935 comm=syz.9.2810 [ 240.251935][T11776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 240.303116][ T28] kauditd_printk_skb: 392 callbacks suppressed [ 240.303182][ T28] audit: type=1400 audit(2000000010.439:4060): avc: denied { ioctl } for pid=11945 comm="syz.7.2813" path="socket:[40826]" dev="sockfs" ino=40826 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 240.351300][T11776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 240.407486][T11776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 240.470256][T11776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 240.585846][ T28] audit: type=1326 audit(2000000010.709:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 240.596035][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.651887][ T28] audit: type=1326 audit(2000000010.709:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 240.708681][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.733539][ T28] audit: type=1326 audit(2000000010.709:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 240.758164][ T5362] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.765295][ T5362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.796246][ T5362] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.803361][ T5362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.815849][ T28] audit: type=1326 audit(2000000010.709:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 240.893710][ T28] audit: type=1326 audit(2000000010.709:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 240.920170][T11776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 240.966022][ T28] audit: type=1326 audit(2000000010.719:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 241.011355][ T28] audit: type=1326 audit(2000000010.719:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 241.049672][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.058084][ T28] audit: type=1326 audit(2000000010.719:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 241.107590][ T28] audit: type=1326 audit(2000000010.719:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11957 comm="syz.5.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe72b28c819 code=0x7ffc0000 [ 241.203514][T11776] veth0_vlan: entered promiscuous mode [ 241.213041][T11776] veth1_vlan: entered promiscuous mode [ 241.230722][T11776] veth0_macvtap: entered promiscuous mode [ 241.239482][T11776] veth1_macvtap: entered promiscuous mode [ 241.251563][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.265051][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.278875][ T7941] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.293534][ T7941] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.328825][ T7941] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.360628][ T7941] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.576425][T12075] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 241.699207][T12097] loop7: detected capacity change from 0 to 256 [ 241.717163][T12097] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.739202][T12097] __nla_validate_parse: 1 callbacks suppressed [ 241.739245][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2828'. [ 241.789366][T12097] xt_TCPMSS: Only works on TCP SYN packets [ 242.335697][T12156] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.2834'. [ 242.614903][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2842'. [ 242.711974][T12200] program syz.4.2844 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.127199][T12208] loop9: detected capacity change from 0 to 512 [ 243.138947][T12207] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 243.147698][T12208] ext4: Unknown parameter 'fsuuid' [ 243.153416][T12207] syzkaller0: entered promiscuous mode [ 243.166779][T12207] syzkaller0: entered allmulticast mode [ 243.190162][T12207] tipc: Started in network mode [ 243.208093][T12207] tipc: Node identity 2eb8ea3e494e, cluster identity 4711 [ 243.232655][T12207] tipc: Enabled bearer , priority 0 [ 243.250457][T12204] loop5: detected capacity change from 0 to 512 [ 243.259725][T12205] tipc: Resetting bearer [ 243.270419][T12205] tipc: Disabling bearer [ 243.304740][T12204] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 243.371600][T12204] EXT4-fs (loop5): 1 truncate cleaned up [ 243.393602][T12204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.573346][T12255] loop9: detected capacity change from 0 to 512 [ 243.605226][T12255] EXT4-fs (loop9): mounted filesystem 0000ff07-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.617964][T12255] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.640908][ T3860] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.678576][T12259] hub 8-0:1.0: USB hub found [ 243.687993][T12261] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2858'. [ 243.691181][T12259] hub 8-0:1.0: 8 ports detected [ 243.713232][T12259] netlink: 'syz.4.2856': attribute type 36 has an invalid length. [ 243.724210][T12259] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 243.734196][T12259] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.745321][T11248] EXT4-fs (loop9): unmounting filesystem 0000ff07-0000-0000-0000-000000000000. [ 243.747401][T12259] netlink: 'syz.4.2856': attribute type 10 has an invalid length. [ 243.763840][T12259] macvlan1: entered allmulticast mode [ 243.818165][T12259] veth1_vlan: entered allmulticast mode [ 243.828179][T12259] team0: Port device macvlan1 added [ 243.833824][T12263] hub 8-0:1.0: USB hub found [ 243.838576][T12263] hub 8-0:1.0: 8 ports detected [ 243.846265][T12263] netlink: 'syz.9.2859': attribute type 36 has an invalid length. [ 243.857983][T12263] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 243.867818][T12263] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 243.879859][T12263] netlink: 'syz.9.2859': attribute type 10 has an invalid length. [ 243.887851][T12263] veth1_vlan: left allmulticast mode [ 244.218096][T12284] loop7: detected capacity change from 0 to 512 [ 244.343342][T12284] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.376890][T12284] EXT4-fs error (device loop7): ext4_acquire_dquot:7001: comm syz.7.2869: Failed to acquire dquot type 0 [ 244.410079][T12293] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2872'. [ 244.459804][T10691] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.523252][T12298] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2873'. [ 244.767054][T12323] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2886'. [ 244.812748][T12321] syzkaller0: entered promiscuous mode [ 244.818545][T12321] syzkaller0: entered allmulticast mode [ 244.838540][T12323] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.933142][T12323] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.960735][T12327] FAULT_INJECTION: forcing a failure. [ 244.960735][T12327] name failslab, interval 1, probability 0, space 0, times 0 [ 245.003498][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.8.2887 Tainted: G W syzkaller #0 PREEMPT(full) [ 245.003533][T12327] Tainted: [W]=WARN [ 245.003566][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 245.003579][T12327] Call Trace: [ 245.003585][T12327] [ 245.003592][T12327] __dump_stack+0x1d/0x30 [ 245.003699][T12327] dump_stack_lvl+0x95/0xd0 [ 245.003719][T12327] dump_stack+0x15/0x1b [ 245.003836][T12327] should_fail_ex+0x263/0x280 [ 245.003860][T12327] should_failslab+0x8c/0xb0 [ 245.003879][T12327] __kvmalloc_node_noprof+0x155/0x650 [ 245.003975][T12327] ? bpf_test_run_xdp_live+0x137/0x1360 [ 245.004003][T12327] ? mutex_unlock+0x4e/0x90 [ 245.004022][T12327] bpf_test_run_xdp_live+0x137/0x1360 [ 245.004127][T12327] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 245.004150][T12327] ? __pfx_autoremove_wake_function+0x10/0x10 [ 245.004190][T12327] ? mutex_unlock+0x4e/0x90 [ 245.004227][T12327] ? 0xffffffffa0205240 [ 245.004240][T12327] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 245.004272][T12327] ? 0xffffffffa0205240 [ 245.004313][T12327] ? 0xffffffffa0201a10 [ 245.004390][T12327] ? 0xffffffffa0202a0c [ 245.004412][T12327] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 245.004440][T12327] bpf_prog_test_run_xdp+0x57b/0xa10 [ 245.004478][T12327] ? __rcu_read_unlock+0x4e/0x70 [ 245.004547][T12327] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 245.004626][T12327] bpf_prog_test_run+0x204/0x340 [ 245.004722][T12327] __sys_bpf+0x52e/0x7e0 [ 245.004748][T12327] __x64_sys_bpf+0x41/0x50 [ 245.004767][T12327] x64_sys_call+0x10cb/0x3020 [ 245.004867][T12327] do_syscall_64+0x12c/0x370 [ 245.004889][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.004962][T12327] RIP: 0033:0x7f2b5ae4c819 [ 245.004978][T12327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.004993][T12327] RSP: 002b:00007f2b5989f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 245.005013][T12327] RAX: ffffffffffffffda RBX: 00007f2b5b0c5fa0 RCX: 00007f2b5ae4c819 [ 245.005050][T12327] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 245.005061][T12327] RBP: 00007f2b5989f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.005073][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.005101][T12327] R13: 00007f2b5b0c6038 R14: 00007f2b5b0c5fa0 R15: 00007ffc7d2fbf38 [ 245.005121][T12327] [ 245.290882][T12323] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.314557][T12337] loop9: detected capacity change from 0 to 2048 [ 245.326340][T12337] EXT4-fs (loop9): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 245.336121][T12337] EXT4-fs (loop9): group descriptors corrupted! [ 245.422214][T12323] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.477425][ T5362] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.491903][ T5362] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.500823][ T5362] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.517760][ T5362] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.627038][T12356] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2900'. [ 245.774434][ T28] kauditd_printk_skb: 158 callbacks suppressed [ 245.774449][ T28] audit: type=1326 audit(2000000015.909:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.812756][ T28] audit: type=1326 audit(2000000015.949:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.836967][ T28] audit: type=1326 audit(2000000015.949:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.861059][ T28] audit: type=1326 audit(2000000015.949:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.885002][ T28] audit: type=1326 audit(2000000015.949:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.909906][ T28] audit: type=1326 audit(2000000015.949:4231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.933529][ T28] audit: type=1326 audit(2000000015.949:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.957674][ T28] audit: type=1326 audit(2000000015.949:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 245.981426][ T28] audit: type=1326 audit(2000000015.949:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 246.005512][ T28] audit: type=1326 audit(2000000015.949:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12368 comm="syz.8.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b5ae4c819 code=0x7ffc0000 [ 246.056804][T12373] program syz.8.2908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.115182][T12379] FAULT_INJECTION: forcing a failure. [ 246.115182][T12379] name failslab, interval 1, probability 0, space 0, times 0 [ 246.128900][T12379] CPU: 1 UID: 0 PID: 12379 Comm: syz.7.2911 Tainted: G W syzkaller #0 PREEMPT(full) [ 246.128928][T12379] Tainted: [W]=WARN [ 246.128935][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.128992][T12379] Call Trace: [ 246.129034][T12379] [ 246.129042][T12379] __dump_stack+0x1d/0x30 [ 246.129065][T12379] dump_stack_lvl+0x95/0xd0 [ 246.129084][T12379] dump_stack+0x15/0x1b [ 246.129143][T12379] should_fail_ex+0x263/0x280 [ 246.129217][T12379] should_failslab+0x8c/0xb0 [ 246.129241][T12379] __kmalloc_noprof+0xb8/0x4e0 [ 246.129260][T12379] ? copy_net_ns+0xd6/0x450 [ 246.129280][T12379] copy_net_ns+0xd6/0x450 [ 246.129305][T12379] create_new_namespaces+0x20e/0x440 [ 246.129360][T12379] unshare_nsproxy_namespaces+0xe6/0x120 [ 246.129390][T12379] ksys_unshare+0x3f2/0x6f0 [ 246.129478][T12379] ? ksys_write+0x194/0x1a0 [ 246.129500][T12379] __x64_sys_unshare+0x1f/0x30 [ 246.129521][T12379] x64_sys_call+0x1cef/0x3020 [ 246.129597][T12379] do_syscall_64+0x12c/0x370 [ 246.129620][T12379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.129638][T12379] RIP: 0033:0x7fe3c320c819 [ 246.129716][T12379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.129733][T12379] RSP: 002b:00007fe3c1c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 246.129822][T12379] RAX: ffffffffffffffda RBX: 00007fe3c3485fa0 RCX: 00007fe3c320c819 [ 246.129836][T12379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000042000680 [ 246.129854][T12379] RBP: 00007fe3c1c67090 R08: 0000000000000000 R09: 0000000000000000 [ 246.129868][T12379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.129881][T12379] R13: 00007fe3c3486038 R14: 00007fe3c3485fa0 R15: 00007ffca490a5b8 [ 246.129904][T12379] [ 246.135728][T12381] loop4: detected capacity change from 0 to 1024 [ 246.251303][T12389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.335321][T12381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.341121][T12389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.344150][T12381] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.382749][T12384] hub 8-0:1.0: USB hub found [ 246.388011][T12384] hub 8-0:1.0: 8 ports detected [ 246.395020][T12384] netlink: 'syz.7.2914': attribute type 36 has an invalid length. [ 246.408192][T12384] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 246.418905][T12384] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 246.430219][T12384] netlink: 'syz.7.2914': attribute type 10 has an invalid length. [ 246.438219][T12384] veth1_vlan: left allmulticast mode [ 246.483176][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2918'. [ 246.501754][T11776] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.527204][T12400] ================================================================== [ 246.535301][T12400] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 246.543180][T12400] [ 246.545490][T12400] write to 0xffff888146622a40 of 8 bytes by task 12401 on cpu 0: [ 246.553188][T12400] cpu_map_kthread_run+0x4fe/0x1680 [ 246.558382][T12400] kthread+0x22a/0x280 [ 246.562452][T12400] ret_from_fork+0x150/0x360 [ 246.567061][T12400] ret_from_fork_asm+0x1a/0x30 [ 246.571835][T12400] [ 246.574150][T12400] read to 0xffff888146622a40 of 8 bytes by task 12400 on cpu 1: [ 246.581791][T12400] bq_flush_to_queue+0x124/0x360 [ 246.586716][T12400] cpu_map_enqueue+0x1ad/0x1c0 [ 246.591463][T12400] xdp_do_redirect_frame+0x27b/0x580 [ 246.596731][T12400] bpf_test_run_xdp_live+0xac3/0x1360 [ 246.602157][T12400] bpf_prog_test_run_xdp+0x57b/0xa10 [ 246.607436][T12400] bpf_prog_test_run+0x204/0x340 [ 246.612362][T12400] __sys_bpf+0x52e/0x7e0 [ 246.616590][T12400] __x64_sys_bpf+0x41/0x50 [ 246.620991][T12400] x64_sys_call+0x10cb/0x3020 [ 246.625658][T12400] do_syscall_64+0x12c/0x370 [ 246.630271][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.636172][T12400] [ 246.638481][T12400] value changed: 0xffff888116e31070 -> 0x0000000000000000 [ 246.645570][T12400] [ 246.648054][T12400] Reported by Kernel Concurrency Sanitizer on: [ 246.654190][T12400] CPU: 1 UID: 0 PID: 12400 Comm: syz.9.2918 Tainted: G W syzkaller #0 PREEMPT(full) [ 246.665133][T12400] Tainted: [W]=WARN [ 246.669095][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 246.679229][T12400] ==================================================================