last executing test programs: 12m58.452590579s ago: executing program 2 (id=339): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd2101000000000007010000f8ffffffb502020008000000b703000000000000850000001200000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 12m57.33337989s ago: executing program 2 (id=344): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x5, 0xcf, &(0x7f0000000480)=""/207, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc281, 0x2, 0xffffffff, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1020, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xed}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000280)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, &(0x7f00000002c0)=0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) close(0xffffffffffffffff) socketpair(0x2, 0x3, 0x0, &(0x7f0000000200)) 12m57.086186387s ago: executing program 2 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x29, 0x5, 0x3, 0x6, 0x25, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0xbc80, 0x3, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@deltclass={0xbc, 0x29, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x3, 0xe}, {0x6, 0xaa26333bc8f6ab57}, {0x0, 0x10}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x44, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x81}, @TCA_QFQ_LMAX={0x8, 0x2, 0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1000}, @TCA_QFQ_LMAX={0x8, 0x2, 0xa}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_LMAX={0x8, 0x2, 0xe}, @TCA_QFQ_LMAX={0x8, 0x2, 0xe00}]}}, @tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xa, 0x4}}, @TCA_RATE={0x6, 0x5, {0x4, 0x8}}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0xff}}, @TCA_RATE={0x6, 0x5, {0x9e, 0x8}}]}, 0xbc}}, 0x44) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r3 = dup(r2) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYBLOB="5ac569"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x8000) sendmsg$nl_xfrm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, &(0x7f0000000280)}, 0x20) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x58, &(0x7f00000002c0)}, 0x10) sendfile(r2, r4, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f00000000c0)) socket$l2tp6(0xa, 0x2, 0x73) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x240800, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r10, 0x0, 0x42010) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) 12m56.888478193s ago: executing program 2 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)="6459df536e39c72401df00e39f31", 0xe, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x0, 0x0, 0x10}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r2, 0x24, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) shutdown(r0, 0x1) 12m56.25800328s ago: executing program 2 (id=354): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180500000800000000000000000000008500000075000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)}], 0x2}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd2101000000000007010000f8ffffffb502020008000000b703000000000000850000001200000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xf, 0x4, 0x8, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 12m55.493925702s ago: executing program 2 (id=360): syz_io_uring_setup(0x4b3b, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x3, 0x15f}, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x124, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2) 12m55.466029862s ago: executing program 32 (id=360): syz_io_uring_setup(0x4b3b, &(0x7f0000000200)={0x0, 0x4, 0x2, 0x3, 0x15f}, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000440)=0x124, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (fail_nth: 2) 12m53.509943746s ago: executing program 4 (id=371): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000000)=0x6, 0x4) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r6 = socket(0x15, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x4, 0xffff}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x41, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x20008000) recvmmsg(r3, &(0x7f00000014c0), 0x3ffffffffffff42, 0x162, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x2, @void}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000811) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x40, 0x0, 0x0, 0x51, '\x00', 0x0, @sched_cls}, 0x94) 12m51.872239402s ago: executing program 4 (id=378): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, &(0x7f0000000300)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8, 0x0, 0x0}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7, 0xf60d}, 0x9092, 0x4, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 12m49.628393954s ago: executing program 4 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000040}, 0x240000c0) 12m49.582425575s ago: executing program 4 (id=391): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f00000000c0), 0x0, 0x236, &(0x7f0000000300)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x40, 0x0, '\x00', @b}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0x9, 0x4, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x4}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = syz_clone(0x4100c000, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r2, 0x0, 0x0, 0x0}, 0x30) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r4}, 0x38) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x84081, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x10a4aa, 0x10004, 0xfffffff8, 0x8, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x4000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x10, r1, 0x4) add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa11111111111111111111111111111111'}, 0x30) getpid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) fdatasync(r6) 12m48.581074853s ago: executing program 4 (id=400): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) 12m48.189534914s ago: executing program 4 (id=404): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m48.189157424s ago: executing program 33 (id=404): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r3, 0x0, 0xee01) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m24.972524636s ago: executing program 6 (id=5352): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000024000000230000000200000000000d00000000000000000000000000010000850000000000000000010000000000000000006e9a7e31377c4f72f86e7ce7a414db212bfb68e30a4d5bb23fc2dc26cec229a04636949a981f273e96c4bd2e5b9c4c30f0d925efbcd00517f180b73a2e57ef8e53f4844ef65d5bf75a964b5f77a53bf423d8463aa9d15a1cac00685338a7ce6876927504679228fc2f7e56c735f57d42e050b7ef1752be7d3f1675d6260995663df4ca70ac"], &(0x7f0000001f40)=""/4092, 0x3e, 0xffc, 0xa}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x1e, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000070000001400018008000700", @ANYRES32=0x0, @ANYBLOB="09a68044c384140a8145d0f6476717411b590ad3b9230901ad02"], 0x28}}, 0x80) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x5) r2 = getpgid(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) setns(r4, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) umount2(0x0, 0x2) 5m24.924209177s ago: executing program 6 (id=5353): socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x1}, 0xa397, 0x6, 0x11000, 0x4, 0x9, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r3 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000000010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32, @ANYBLOB="0006000000000000240012800b00010067656e657665"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xa, r0, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xf7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1d, 0xfe}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc7fffff00000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 5m24.267977905s ago: executing program 6 (id=5359): socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) r2 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000000000010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9400000010000100"/20, @ANYRES32, @ANYBLOB="0006000000000000240012800b00010067656e657665"], 0x94}, 0x1, 0x2, 0x0, 0x804}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x9) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc22e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x9, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0xf7, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x1d, 0xfe}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc7fffff00000000000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, r9, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 5m23.652674552s ago: executing program 6 (id=5368): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10005, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x2) 5m22.801159506s ago: executing program 6 (id=5376): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0xffffffffffffff51, 0x65, 0xffff, 0x5, 0x6, '9P2000.L'}, 0x27848c70) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@block={'block', 0x3d, 0x400}}, {@map_normal}, {}, {@map_off}, {@check_relaxed}, {@block={'block', 0x3d, 0x800}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@map_acorn}, {@cruft}, {@dmode={'dmode', 0x3d, 0x1}}]}, 0x0, 0x53f, &(0x7f0000000a80)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 5m22.612643841s ago: executing program 6 (id=5380): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r3], &(0x7f00002bf000)='GPL\x00', 0x104, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000b80)={r5, r4}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f00000001c0)=0x2) bind$inet6(r7, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r8 = socket$inet(0x2, 0x2, 0x1) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r10, 0x11b, 0x20, 0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000000, 0x0, 0x0, 0x100000c03, 0x17, 0x0, 0x28, 0xe}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[@ANYRES64=r8, @ANYRES64=r9], 0x3, 0x805, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) setsockopt$inet6_buf(r9, 0x29, 0x23, &(0x7f0000000680)="6d020239a1ddd52077224d4a658186974b183e371b2685df896dbc8c517190df404579dc605e84d882390afb09975eb7c7cd4d418ef1a04b41236055dfbc154effe0718b83984a6c5a429d60c5a6266a5d01a74231d3c36e50fc109be2be88c551e750132fc4bce1fe99ceacc107b24c8c131e8992e0f783e055acd1a40f8c057b99b0b7218e882357f44e0ab647f333b5c0f7516d2e64fc61e40db7a846f9f60ae8327b99921e89ba3995ba7949254e97417183a7be302ef0ce7b4d9248bbc3bb1e634d84ba166f82ec0771ae37255e84d16d50229008c31464a3c557782c483c348903", 0xe4) 5m8.239766902s ago: executing program 34 (id=5380): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESOCT=r3], &(0x7f00002bf000)='GPL\x00', 0x104, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000b80)={r5, r4}) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f00000001c0)=0x2) bind$inet6(r7, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r7, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {0x0}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r8 = socket$inet(0x2, 0x2, 0x1) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r10 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r10, 0x11b, 0x20, 0x0, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000400)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000000, 0x0, 0x0, 0x100000c03, 0x17, 0x0, 0x28, 0xe}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f00000000c0)=ANY=[@ANYRES64=r8, @ANYRES64=r9], 0x3, 0x805, &(0x7f0000001580)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) setsockopt$inet6_buf(r9, 0x29, 0x23, &(0x7f0000000680)="6d020239a1ddd52077224d4a658186974b183e371b2685df896dbc8c517190df404579dc605e84d882390afb09975eb7c7cd4d418ef1a04b41236055dfbc154effe0718b83984a6c5a429d60c5a6266a5d01a74231d3c36e50fc109be2be88c551e750132fc4bce1fe99ceacc107b24c8c131e8992e0f783e055acd1a40f8c057b99b0b7218e882357f44e0ab647f333b5c0f7516d2e64fc61e40db7a846f9f60ae8327b99921e89ba3995ba7949254e97417183a7be302ef0ce7b4d9248bbc3bb1e634d84ba166f82ec0771ae37255e84d16d50229008c31464a3c557782c483c348903", 0xe4) 2.255422506s ago: executing program 0 (id=8472): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0xa00, &(0x7f0000000080)="259a001471a76d2688a24e6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 2.199660368s ago: executing program 1 (id=8473): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) setuid(0xee00) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0xf, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x2, 0x9, 0x10000, 0x2, 0xb9d2, 0x4}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.186081999s ago: executing program 1 (id=8474): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x9, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, 0x0) 2.104071721s ago: executing program 0 (id=8476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x9, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 1.819900819s ago: executing program 3 (id=8481): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x3fffe000) prlimit64(0x0, 0x8, &(0x7f0000000200)={0x1, 0xffffffff}, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) syz_ublk_setup_io_uring(0x25cd, &(0x7f0000000240)={0x0, 0x39fa, 0x2000, 0x0, 0x277}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000006000000080000000500000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000020000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8020, 0x3e, 0x0, 0x3, 0x2, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x1, 0xfffffffe}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r3, 0x0, 0x0, 0x0) 1.77973977s ago: executing program 3 (id=8482): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x2000002}}, 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f075a44d20fa6b66322c12f649aba91e"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x2, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000000c0)={r7, 0x12, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc179fd183dda1af0100b900deff120010000000000000000000000000080000000001000000000000000000004000", "2809fedbe130b93e4db420a1a90000fdff0000000008000f0000faffff0900000000e9ffffff000000001000", "e74600220a2000000000e44400003cbb33f831e3141a00000040088bd02800", [0xe0, 0x2]}}) dup2(0xffffffffffffffff, r0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000400000000000000ffffff3fb7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000001007010000f8ffffffbfa40000000000182300000000000000000000000000000000000000bb36ef3a8e2c03fd0c1a13", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018330000050000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000185600000b000000000000000000000015a0d000040000001837000003000000000000000000000018390000030000000000000000000000b7080000000000007b8af8ff00000000b7080000000001007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018270000", @ANYRES32, @ANYBLOB="00000000080000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000001}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f00000000c0)=0x8004) 1.711538992s ago: executing program 7 (id=8484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@bridge_getlink={0x20, 0x12, 0x1f, 0x709d2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x5081, 0x4}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) 1.601644095s ago: executing program 7 (id=8485): unshare(0x6a040000) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r4, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x36) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$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") 754.684868ms ago: executing program 3 (id=8486): membarrier(0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSBRK(r0, 0x5427) capset(&(0x7f0000000dc0)={0x20080522}, 0x0) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="280000001800ffff7000000000010a000000ef00000800090000080010008b010000040008800000"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000053c0)=@deltfilter={0x1eac, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0x1e74, 0x2, [@TCA_CGROUP_ACT={0x1e70, 0x1, [@m_connmark={0xd0, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x2d, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697488dd9d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_pedit={0xec8, 0xb, 0x0, 0x0, {{0xa}, {0xe9c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0x1, 0x1, 0x20000000, 0xfffffffa, 0x3}, 0x9, 0x3, [{0x3, 0x3, 0x7, 0x5, 0x2, 0x3}, {0x200, 0x1, 0xc, 0x5, 0x9, 0x52e}, {0x3, 0x8382, 0x8, 0x3ff, 0x5, 0x764}, {0xa, 0x0, 0x10, 0x0, 0xfffffff3, 0xe}, {0x7f, 0xd, 0xae6c, 0x401, 0x100, 0x7}]}, [{0x9, 0x2, 0xc, 0x0, 0x7, 0x5}, {0x5, 0x40, 0x0, 0xda2, 0x8, 0x2db}, {0x10000, 0x3, 0xfff, 0x7, 0x0, 0xffffffff}, {0x1, 0x9, 0x2, 0x4a, 0x8, 0x10001}, {0x1000, 0x3, 0x1, 0x80, 0x7ff, 0xffffffff}, {0x8000, 0x81, 0xe, 0x6cdc, 0x9, 0xb5a7}, {0x2, 0x9, 0x40, 0x9, 0x2, 0xff}, {0x4, 0xfaa, 0x81, 0x400, 0xa395, 0x81}, {0x20000000, 0x0, 0x1, 0x8, 0x100, 0x2}, {0x2, 0x9, 0x5, 0x7, 0x0, 0xf33}, {0xb7a, 0x2, 0x3fe0000, 0x9, 0x2, 0x1}, {0x3, 0xff, 0x9, 0x4, 0xffff, 0x1}, {0x3, 0x4, 0xff, 0x3, 0x101, 0xfff}, {0x9, 0x2, 0x1000, 0x8001, 0x3, 0x3}, {0xc8, 0xffff8001, 0x9, 0x3, 0x1, 0x5}, {0x8, 0x8, 0x8, 0xff, 0x8001, 0x5}, {0x4, 0xffffffff, 0xda, 0x7, 0xfffffffc, 0xfffffff5}, {0x6, 0x8e91, 0xbea8, 0xfd4a, 0x0, 0xb07}, {0x3, 0x3, 0x5325, 0x9, 0x1, 0x8}, {0x2, 0xa97, 0x6, 0x0, 0x2000, 0x9}, {0x101, 0x5, 0x8d60, 0x0, 0x64, 0xb4}, {0x6, 0xda34, 0x3, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x8, 0x1ff, 0x7, 0x4}, {0xeb6, 0x4, 0x8, 0x9, 0xfffffff0, 0xfffffff9}, {0xe2d, 0x2, 0x6, 0x5, 0xa, 0x8}, {0x2, 0xbc15, 0x1, 0x2, 0x6, 0xffffffff}, {0x6, 0x6, 0x5, 0x7, 0x1000, 0x4}, {0xb, 0x9, 0x5, 0x0, 0xfffffffa, 0x8}, {0x0, 0x9, 0x7, 0x6, 0x9850, 0x7ff}, {0xffffffff, 0x7, 0xffff, 0x3}, {0x4, 0x9, 0x6c, 0xaa6, 0x62, 0xff}, {0x7ff, 0x5, 0x4, 0x7, 0x1, 0x2ee}, {0xfff, 0x4, 0x7f, 0xffffffff, 0xa26, 0x628}, {0x3, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x6, 0x3, 0x8, 0xa7c, 0x5795}, {0x2, 0x72a44795, 0x6da, 0x6, 0x2, 0x3}, {0xe48, 0x1, 0x8, 0x10000, 0xe7, 0x6}, {0x7, 0x0, 0xdaac, 0xe, 0xc66, 0xe4b}, {0x8, 0xb, 0x0, 0x8, 0x2, 0x3}, {0x989, 0x4, 0x24b6, 0x6, 0x7, 0x1}, {0x93, 0x0, 0x72a, 0x8, 0x8, 0x9}, {0x6, 0x1, 0x32, 0x8, 0x3, 0x4}, {0xf, 0x3, 0x401, 0x9, 0x1}, {0x2, 0x5, 0x5, 0xf, 0x7, 0x74ee}, {0x80000001, 0x23d, 0x5, 0x10000, 0x60a9, 0x2000000}, {0x9, 0x5, 0x81, 0x2, 0x5, 0x5}, {0x5, 0x2, 0xff, 0x80000001, 0x8, 0x5}, {0x8001, 0xfffffc01, 0x1, 0x22, 0x2, 0x9}, {0x1, 0x0, 0x0, 0xfff, 0x8000, 0x5}, {0x7, 0xc, 0x80000001, 0x6, 0xfffffffc, 0x401}, {0xfffffffb, 0x1, 0x8, 0x7, 0x2437}, {0x8, 0x80, 0x1, 0xc1, 0x3, 0x1}, {0x8000, 0x7, 0x2, 0xffffffc0, 0x5, 0x9}, {0x7fff, 0x6, 0x7, 0x0, 0x100, 0x9}, {0x8001, 0xd, 0x80, 0x0, 0x172, 0x9652}, {0x6, 0x4, 0x1, 0x3, 0x680c, 0xfffffeff}, {0xff, 0x1, 0xa24, 0x9, 0x0, 0xfffff2cb}, {0x980d, 0x4, 0x4, 0x8f, 0x800007, 0x4}, {0x8, 0x100000, 0x4, 0x0, 0x7f, 0x4}, {0x6, 0x3813, 0x6, 0x9, 0xfffffffb, 0x7ff}, {0x7, 0x7, 0xfffffffa, 0x80010000, 0x7ff, 0xffff0000}, {0x8, 0x7de, 0x40, 0xff, 0x3, 0x99}, {0x101, 0x2, 0x9, 0xb4df, 0x7fff}, {0x2, 0x7, 0x5, 0x1, 0xffffffff, 0x5}, {0x6, 0x1, 0x7, 0x4, 0xdb, 0x20f9}, {0x80, 0xfffffffc, 0xc, 0x2, 0x5, 0x8000}, {0x9, 0x4, 0x4, 0x2, 0x3, 0x9}, {0x0, 0x10001, 0x200, 0x8000, 0xffffffff, 0x4}, {0x8, 0xf, 0x9, 0xf, 0xa15e, 0x3}, {0x4, 0x1, 0x8000, 0x1, 0xa715, 0x3}, {0x9, 0x8, 0x80000001, 0x1b, 0xffff, 0x3}, {0x7, 0x6, 0x3, 0x6, 0x9, 0x7}, {0x1ff, 0x8, 0x6, 0x0, 0x0, 0x9}, {0x9, 0xace2, 0x7, 0x2, 0x71e37c09, 0x73ed}, {0x3, 0x8, 0x7, 0x7, 0x2, 0x6}, {0x1, 0x4e7, 0x6, 0xaf86, 0x5, 0x198c}, {0x400, 0x80000000, 0x8, 0x5, 0xac7, 0x40}, {0x7, 0x9, 0x400, 0x2, 0xfffffff2, 0x8000}, {0x10, 0x2, 0x9de, 0xa, 0x0, 0x80000000}, {0x1, 0x5, 0x3, 0xe, 0x200, 0x2}, {0x8, 0x7fff, 0x4, 0x8, 0xb, 0xfe}, {0x7, 0x5, 0x8, 0x7f, 0xfa, 0x8}, {0x7, 0x4, 0x2, 0x0, 0x88e, 0x200}, {0x7f, 0x8, 0xd11, 0x6, 0x1, 0x1}, {0x8, 0x285895c5, 0xc, 0x5e, 0x58, 0x101}, {0x1, 0x400000, 0x10, 0x3, 0x2, 0x40}, {0x7, 0x770, 0x9, 0x8, 0xf5b, 0x401}, {0x0, 0x7c700000, 0xfffffffa, 0x7, 0x401, 0x8}, {0x3, 0x2, 0x3, 0x3, 0x10000, 0x7fff}, {0xf, 0x8, 0x2, 0x27, 0x2, 0x40}, {0x2, 0x80000001, 0x1e, 0xfffffff7, 0x0, 0x9}, {0x2, 0x7, 0xf7, 0xd, 0x8001, 0x81}, {0x100000, 0x2, 0xfff, 0x0, 0xf39, 0x2d4}, {0xc, 0x3, 0x84a, 0x5, 0xb7, 0x5ba}, {0x3a8fee8e, 0x983, 0x8, 0xc44, 0x4, 0x2}, {0x1, 0x2, 0x1ff, 0x4, 0x1, 0x80}, {0xb, 0x7, 0x3ff, 0xc, 0x6, 0x6}, {0x2, 0x200, 0x1800000, 0x7, 0xe9a1, 0x7}, {0xfffffb02, 0x0, 0x4, 0x0, 0x1, 0x1}, {0x5, 0xffff04ed, 0x7, 0x7, 0x13a, 0xc}, {0x0, 0xffffff01, 0x3, 0xb, 0x0, 0x9aa9}, {0x6, 0x4, 0x401, 0xffff8000, 0x5, 0x100}, {0x9, 0x8, 0x0, 0x42, 0x7f, 0x4}, {0x7, 0x7fff00, 0x101, 0x7ff, 0x10000, 0x9}, {0x846, 0x52e, 0x5, 0x900000, 0x0, 0x9}, {0x413e, 0x5, 0x4, 0x1, 0x1, 0x2}, {0xfffff2dd, 0x1, 0x5a, 0x4, 0x8, 0x4b92}, {0x7, 0x3, 0x2, 0x5, 0x447, 0xfffffff8}, {0x7b388a4c, 0xfffffffc, 0x3, 0xd31, 0x6, 0xc81}, {0x4, 0x77d4, 0xd14, 0x200, 0x7fffffff, 0x1}, {0x8, 0x6, 0x9, 0x1, 0x4, 0xfff}, {0xffffffff, 0x6, 0xf143928, 0x5, 0x6, 0x8}, {0x81, 0xb07, 0xa, 0x6, 0x0, 0xd}, {0x7168, 0x6, 0x5, 0x1, 0x0, 0x8001}, {0x4, 0x4, 0x8, 0x23, 0x77, 0x5}, {0x308, 0xeeb1, 0xf, 0x9, 0x1}, {0x8, 0x5, 0x4, 0x3, 0x3}, {0xfffffffb, 0x4e7d, 0x80000000, 0x9, 0x8, 0xa97e}, {0x2, 0x0, 0x7fffffff, 0x1, 0x81, 0xb80}, {0x3, 0x3, 0x1, 0xffffffff, 0x0, 0x9}, {0xb, 0xfffffff8, 0x4, 0x2, 0xa, 0x4}, {0xfffffffc, 0x7, 0x9, 0x10000, 0x2, 0x1000000}, {0x0, 0x6, 0x8, 0xab, 0x3, 0xffff}, {0x3, 0x3, 0x4, 0x0, 0x6, 0x9}, {0xf, 0x80, 0x7, 0x9, 0x40, 0x9}, {0xffff, 0x8, 0x6, 0xe, 0xffffffff, 0xfff}, {0x2, 0x1ff, 0x2, 0x10000, 0x1, 0x1}, {0x7fffffff, 0xf5, 0xffffffff, 0x7f, 0x800, 0xfd000000}], [{0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x7}, {0x4}, {0x5}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x5}, {0x5, 0x1}, {0x8b4eeeead0db8b2f, 0x1}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x4}, {0x9ebe581e91105dc7, 0x1}, {0x4, 0x1}, {0x5}, {0x7}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {0x5, 0x1}, {0x4}, {0x3}, {0x4}, {}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x6}, {0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x4}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x1}, {0x3}, {0x2}, {0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x5}}}}]}]}}]}, 0x1eac}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000540)={r4, 0x1, r3, 0xfffffff9, 0x80000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0008004500003800010100ac1414aa04009078000000004518000b0065000902890101ffffffffac1414aa0200000000000000"], 0x0) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}}, 0x20}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="2400000001040102000001800000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000002640)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x80000001, @ipv4={'\x00', '\xff\xff', @local}, 0xfffff69d}, 0x1c, 0x0}}], 0x2, 0xc040) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)={0x20, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc085}, 0x20000808) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 721.05916ms ago: executing program 0 (id=8488): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x53, 0x1000004, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x40, 0x8, 0x9, 0xcfe}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 557.147274ms ago: executing program 0 (id=8489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0005000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x190, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x2018, 0x1, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x3, 0x2000002}}, 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x80, 0x3cc40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r5, 0x0, r5, &(0x7f00000000c0)=0xc, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="f075a44d20fa6b66322c12f649aba91e"}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x2, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x40100) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r8 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000000c0)={r7, 0x12, {0x2a12, 0x80010000, 0x0, 0xa, 0x5, 0x0, 0x0, 0x14, 0xc, "fee8a2ab78fc179fd183dda1af0100b900deff120010000000000000000000000000080000000001000000000000000000004000", "2809fedbe130b93e4db420a1a90000fdff0000000008000f0000faffff0900000000e9ffffff000000001000", "e74600220a2000000000e44400003cbb33f831e3141a00000040088bd02800", [0xe0, 0x2]}}) dup2(0xffffffffffffffff, r0) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r5) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00o-', @ANYRES16=r9, @ANYBLOB="04002cbd7000fedbdf25040000000900030073797a32000000000900010073797a30000000001400020076657468315f6d6163767461700000000900010073797a32000000000900030073797a3200000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r10, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x2) ioctl$EXT4_IOC_GROUP_EXTEND(r11, 0x40086607, &(0x7f00000000c0)=0x8004) 428.815817ms ago: executing program 7 (id=8490): prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x3fffe000) prlimit64(0x0, 0x8, &(0x7f0000000200)={0x1, 0xffffffff}, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) syz_ublk_setup_io_uring(0x25cd, &(0x7f0000000240)={0x0, 0x39fa, 0x2000, 0x0, 0x277}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000440)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0500000006000000080000000500000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000020000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x8020, 0x3e, 0x0, 0x3, 0x2, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x1, 0xfffffffe}]}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) utimensat(r3, 0x0, 0x0, 0x0) 428.341277ms ago: executing program 3 (id=8491): perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x8, 0x5, 0x0, 0x4, 0x8080, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xaa, 0x0, @perf_config_ext={0x81, 0x4f7b}, 0x1000, 0x5, 0xfffffffc, 0x3, 0x1ff, 0x4, 0x4c, 0x0, 0x233, 0x0, 0xe0}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xfd01}, 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x30, 0x410, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x11feb0, 0x8, 0x20da, 0x3, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 346.41992ms ago: executing program 7 (id=8492): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b0009008000", 0x2c}], 0x1) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x40003) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000011c0)={0x0, 0x7, 0x5, 0x1}, 0x10) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000001600)={0x0, 0x0, 0xc, 0x16, 0xe3, &(0x7f0000001200)="2e2a9c836f33cc6ce09753775ca519abbba371b2deb879148048f2fcbee7470482e4363f9ab74e156b5c51ae74f7d0ea63a3b7d0f0f066d146cb7ba74c016bc77c19e1a1918106bea8279645d34c4d161fefaa630a6a7971078208af296af4e20c4b30f627f0fa6000f0138abf48b0ecf184b05da56bcb28ece9f7855ec1bd5bf7dff8a99e8cf74b4451bc1ea92e00db53110c92bd66fa950a5fa423e2045ccb7124fae3d1394fda2fbeeb2d45ed83c079be7652f6b40b65d9e6be6111c452eb6248ab0d47f3082cd16f0960211363a34d02c41f97a5731b49e2e47f10135b4a1c97a47b2606eb09091f3a5121fe66a9ffbc6e11079d945f65a256fde7287dca7240ddd25c460f6dcf768ad1c2c0784ac0d293acdefd983e9dceceb0d9ae2f51f08618befbcea3a0030fc809fade5b578cd4a796bf07f41fa9b2f77a38e5af1bfb189e5662f6d058f9680e443d0e92b854cad238a43d59fe6ed1ed5c776f172014324b2e0bd6e2f26c2abfa3e752a56e1ba4ab9335c86785c9e2375fed739d0e680ba9a5e4e60591bf9f2d00513a10827f863c8e42e64fc65621d14495b208d9bcef87d2c5c94a13ccbd0b821466064617db118b94b11b39f7c9e222c9481e975aed5a9047081e8316ae43020526386aabf5eecaf4181536de66bf551f41087691b49c2e2d266f0d9d14707c2b4676cf1d57b962a149464863294bd871d64c2d8271bdb9e663296baf907ef7816123c569a4fc9e26973ce95b6fdbb5ab27aa57d601e3159ba70ddf78a9dcb3eac3e5f8692d6e038b03486051f4021ad5dbb1d53921467abc55a278537cb9dedc056781a99a8228ac49bd5fb50d2eb01bc306c0e2f14d426b70a93995c1494901901bd2c386e52ae785ea623b5e267d8a2f56285352e4464a84ddd2e21a90ab56bd5e01b120dc9a954bb84c5d3a467a01bc018d9c6127cd1048a4f7edec67a591e2c928c86652923d3f3b5295d46d34ec0949129247d2387b8f121b290b54a16a7a35101c0b4b00fc12310a6c0e34a2c4c381304aa49e8d57ec6359889b856983201d5b879e465a9527bb7a6c423852808711e7f4173b8b9cf12375064f5791c6f497c5ebf9c4b36ef1c903516ef18fbbd44c860d15b243922ec40d5864cffdc90ecbf7599b207bbb0fc257c25d28ecc7460e02900da89409770d517f8b4524183c84b191a7334d1851b5081aa97aa0075acfd9c2876ddf6ebcb68cd63fdff170940ec693769d2c3f04af4608637223f731e20b59dc44e0f98a25ee720367205be586e3fcfae8a34d3fa38685d994c89105d85a1950773e9066a3b2b56b7e8388947455586f9acc0a694612c9da49de15a802de5a14955d681f31a77c55775486927864b73ddb0701e214dbfe616a411408899d1bc6b02fe702a4f0aa9a0f85dcd54601b68632e074a6b2b97b5ae01a1b8cf9d9"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 293.716181ms ago: executing program 1 (id=8493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init() removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1, 0x2) 284.082252ms ago: executing program 7 (id=8494): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x30, r2, 0x221, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x0, 0x3, r3}, @NL802154_ATTR_WPAN_DEV, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x59}, 0x1, 0x0, 0x0, 0x4000011}, 0x4020004) 283.522322ms ago: executing program 3 (id=8495): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) (async) syz_emit_ethernet(0x7e, 0x0, 0x0) (async) shmdt(0x0) 255.083193ms ago: executing program 1 (id=8496): r0 = inotify_init() r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0x56074975}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = timerfd_create(0x0, 0x0) timerfd_settime(r4, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_gettime(r4, 0x0) rseq(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}, 0xc5e7}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 222.114333ms ago: executing program 3 (id=8497): openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x80000001}, 0x11111a, 0x3, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x100001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000000)=0x2d34, 0x7ff, 0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x800141f, 0x4) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x3}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x84, 0x7, 0x7ffc0001}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) fdatasync(r3) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) close(r1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) open(0x0, 0x143142, 0xa2) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 221.498323ms ago: executing program 1 (id=8498): socket$tipc(0x1e, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cc84d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0xce24, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x4c93}}, 0x0, 0x0, 0x45, 0x0, "aeb81d8ee3a8f2247481041a5b9cddbc936efc381c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435eead628d62a3b45bb98872fb19000000000200"}, 0xd8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24, 0xa5e, @mcast2, 0x3ff}, 0x1c) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1, 0x9, 0x0, 0x0, 0x0, 0x8, 0xf4039, 0xcf2efa567534401c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000002, 0x2, @perf_config_ext={0x9, 0x2}, 0x204, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x4, 0x1, 'client0\x00', 0x4, "8207e8003258f5b2", "98995048766d9eafea6c52be0c99c48ce1a090845be5dd02f92e119bfd1b70d3", 0xfffffff4, 0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x381000, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) gettimeofday(0x0, 0x0) io_uring_enter(r2, 0x170b, 0xe809, 0x48, &(0x7f00000001c0)={[0x6]}, 0x8) modify_ldt$write2(0x11, &(0x7f0000000100)={0x810, 0x100000, 0x4000, 0x1}, 0x10) 218.291293ms ago: executing program 0 (id=8499): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec00000021000100040000000000000064010100000000000000000000000000fe80000000000000000000000000003a4e210000000000000a0000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c020000000000000a000a000a010101"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000009c0)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)}, 0x103) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x8011) getpid() r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0) fsetxattr(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='\x00\x00}1\n>\x06\x81\xb6\x91\xb3\xd2\xddD\xd0r\xcb{\xd7\xda\x9b\xb6\x93\x18[+\xa4-^\x95k\x94\xa8\xff\x82\xa3y+\xbfL\xa5v\xa6\xed#\x03\xcez`\xa4\x8c\x05\xd4#M\x1fc\xae\xb6\xdb\xd2\xdc\x05n\xa4\x1d\xdcY\x81d]\xc8:\t\xc38\xb0\xdc\xa4\xaal\x06l\x92\x94Su\x98\x17\x17[G\xba\x14S\x8b\xc2\x82\xd5\xaci\x87:C\x83WqrJ~M}\xd3\xa2\xb36\f\x94`\xcd\xeeyoN#\xfd\xba\xee\xcb\xa23\xb9\xc8\xf6\xe8\xc6\x95\v\xad_\xe8\xdd\xe9\xacu\xf3\t]j\xc3v\x11[\x05I}\xc8>E|z\xb8\xb7\r\x00\x0f\x99\xe7\x9d&\x997\x7f1\xfc', 0xaf, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x8, 0x8, r8, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2, r8}]) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xfe}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x53}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r8, 0x20, &(0x7f00000001c0)={&(0x7f0000000140)=""/56, 0x38, 0x0, &(0x7f0000000240)=""/26, 0x17}}, 0xfffffffffffffecd) epoll_create(0x6) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r0, &(0x7f0000000280)={0x1000001c}) syslog(0x3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 160.914115ms ago: executing program 7 (id=8500): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000940)=0x20000000, 0x4) recvmmsg$unix(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40010000, 0x0) 127.891896ms ago: executing program 5 (id=8501): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x42, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc, 0x3, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), r0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00o-', @ANYRES16=r1, @ANYBLOB="04002cbd7000fedbdf25040000000900030073797a32000000000900010073797a30000000001400020076657468315f6d6163767461700000000900010073797a32000000000900030073797a3200000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 109.002446ms ago: executing program 5 (id=8502): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x4f) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x8, @local, 0x5}, 0xfffffffffffffd75) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x24000000) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "edff"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000128bd7000fddbdf250900000004fd00800800050007000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) sendmmsg$unix(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)="4b0c43f39573496f706733b1bd95d3eb497c6fc2b780f3490cbb6eaafbd69d5e3e62cad38e14f933aa96a731194f9d31059b14db7e120a0ec41f8d4dcfeb4a38327e7cf061f7ba3fbf1cab40833bc22303be40d0ce8ca8875390d292ecf81cdeee814ea83a54e8578670b304863612d4dec80dea", 0x74}], 0x1, 0x0, 0x0, 0x20004000}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480d5}}], 0x2, 0x24001) 90.026297ms ago: executing program 5 (id=8503): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x4001) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$int_out(r2, 0x5460, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x698242, 0x1d3) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x33, &(0x7f0000000000)={0x84, @empty, 0x4e20, 0x2, 'sed\x00', 0x3, 0x1, 0x74}, 0x2c) 58.718208ms ago: executing program 5 (id=8504): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b0009008000", 0x2c}], 0x1) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x40003) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000011c0)={0x0, 0x7, 0x5, 0x1}, 0x10) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000100)={0x1, 0x2, 0x7fffffffffffffef, 0x2}) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000001600)={0x0, 0x0, 0xc, 0x16, 0xe3, &(0x7f0000001200)="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"}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'team_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r5, 0x25, 0x0, @void}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="60000000050603040000000000000000020000050900020073797a31000000000900020073797a320000000009000200080000000000000005000100070000000900030073797a32000000000900030073797a32000000000500010007000000b394af3bc5c52ecd60409b7c7fb7e3057cf432128456f070e4181367d4f4124a45e5b812bd7ed52366ed95825a9652be160c9838fbc18c817c77a050d77b9423f0524e2304755f50b0dfdb723f03e32e441f164e4538d38b79c439dfc0e5748eb26202218962e1bedec9daa2b3d39781e8ae154ebf69948449cf382774fe2194d05810a7becccc7d6537b481bd335587eb21c4e126536e3a28cd91a692af7e24453755a8b4cf0c99a9b19b81425e71"], 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) 58.279538ms ago: executing program 5 (id=8505): r0 = socket$inet(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400010004000000000000002de7be80eab3b26014"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x60, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWTABLE={0xd0, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xb3, 0x6, "42ddd4753124c9c9b9984700e3d0c9f71eaeba06e89279181674d7defed0ddd2a6e22e4b8c7927535156649415cd0a049388a9e7f7ffb94a73b10f1ba8cef64619db6b4f389cc3e1d4567180443a11794f80e09d974675bade98024f58ec97a0ba91404e80fcf8420a49a6f921d61e3bf65eae543afb77ec2251be7e4f10e8065d84640a68a0fc5c8899043f6a8050c83223fe3a84e58a25fc55edef90e260a90557ac4b3471671bd782f3cdf7d053"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x178}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r3, 0x84, 0x0, 0x0, &(0x7f0000000000)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x2b0, 0x2b0, 0x138, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket(0x2, 0x80805, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000100)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ff00000000000000", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000c0010000000000004020030000e51ac77709b681f22b741afa3900a62d06bd6951abbc8fcab4919090f7fe7d76823512e6132db19fbea0be4e94e50763ecd39dab8be7b11bb0188a8cd36d68130e89e96c726446af1ec4c713317acb8334036f2906c949c627bc61d4fe6ad8082165b492d45d743c5b3dc7cf6759b9c42b1634c628941bd3d19a59a9987b85b7970328bbfd45e3dc35a3d1990f666cbd2401a2e047c274ef0f1eb3b8ee5646"], 0x80}, 0x1, 0x0, 0x0, 0x814}, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800ff}}, 0xffff, 0x4}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f00000002c0)="580000001400192340834b80040d8c560a0618f3242986a61ccb4001000058000b480400945f64009400ef0038923949000000800000008004000000ff499baeb700fff5dd0000000800030006010000418e01400004fc8b", 0x58}], 0x1) setsockopt$packet_int(r4, 0x107, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r5, 0xc0389424, &(0x7f0000000180)={0xba, 0x20, '\x00', 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) 16.258249ms ago: executing program 5 (id=8506): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000740)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) inotify_init() removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x1, 0x2) 15.58118ms ago: executing program 1 (id=8507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc7478bbe2d065b1a4fcf3325a649c534d0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000004800038044000080080003400000000238000b80340001800a0001006c696d6974000000240002800c00024000000000000000030c00014000000000000100000800044000000001140000001100010000000000000000000300000a"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff46, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x2}, {0xffff}, {0x7511000175da701e, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3e}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r8 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000004c0)=0x14) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000500), 0x4) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 0s ago: executing program 0 (id=8508): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000007c0)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}}, 0x0) write$cgroup_type(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1496][ T28] audit: type=1326 audit(1777421713.766:44969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e0e0cdd9 code=0x7ffc0000 [ 824.067707][T29957] Memory cgroup out of memory: Killed process 29957 (syz.7.8100) total-vm:98536kB, anon-rss:1436kB, file-rss:26452kB, shmem-rss:3312kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 824.105986][ T28] audit: type=1326 audit(1777421713.766:44970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e0e0cdd9 code=0x7ffc0000 [ 824.189547][T29994] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 824.221008][T30002] netlink: 124 bytes leftover after parsing attributes in process `syz.5.8111'. [ 824.267804][ T28] audit: type=1326 audit(1777421713.766:44971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e0e0cdd9 code=0x7ffc0000 [ 824.293685][T29994] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.8110: invalid block [ 824.315062][T29994] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 824.315276][ T28] audit: type=1326 audit(1777421713.766:44972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f62e0e0cdd9 code=0x7ffc0000 [ 824.325205][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 824.325253][ C0] EXT4-fs (loop3): initial error at time 1777421714: ext4_get_branch:178: inode 11: block 4294967295 [ 824.325329][ C0] EXT4-fs (loop3): last error at time 1777421714: ext4_get_branch:178: inode 11: block 4294967295 [ 824.380643][T29994] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8110: invalid indirect mapped block 4294967295 (level 1) [ 824.395397][T29994] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 824.403459][T29994] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8110: invalid indirect mapped block 4294967295 (level 1) [ 824.426586][T29994] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 824.427368][ T28] audit: type=1326 audit(1777421713.829:44973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62e0e0cdd9 code=0x7ffc0000 [ 824.460566][ T28] audit: type=1326 audit(1777421713.829:44974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f62e0e0cb42 code=0x7ffc0000 [ 824.472750][T29994] EXT4-fs (loop3): 2 truncates cleaned up [ 824.484083][ T28] audit: type=1326 audit(1777421713.829:44975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f62e0e0cbd7 code=0x7ffc0000 [ 824.503214][T30008] ------------[ cut here ]------------ [ 824.519110][T30008] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.0.8113/30008 [ 824.525227][ T28] audit: type=1326 audit(1777421713.829:44976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62e0dc9ad1 code=0x7ffc0000 [ 824.528950][T30008] Modules linked in: [ 824.528971][T30008] CPU: 1 UID: 0 PID: 30008 Comm: syz.0.8113 Tainted: G W syzkaller #0 PREEMPT(full) [ 824.552554][ T28] audit: type=1326 audit(1777421713.829:44977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f62e0e0dbc9 code=0x7ffc0000 [ 824.556533][T30008] Tainted: [W]=WARN [ 824.556542][T30008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 824.567463][ T28] audit: type=1326 audit(1777421713.829:44978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29997 comm="syz.0.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62e0dc9b3b code=0x7ffc0000 [ 824.590967][T30008] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 824.591002][T30008] Code: 8b 05 c1 49 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1e 12 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 10 12 1e 00 90 0f 0b 90 e9 af fa ff ff [ 824.591020][T30008] RSP: 0018:ffffc9000142fdd8 EFLAGS: 00010093 [ 824.591038][T30008] RAX: ffffffff813b1682 RBX: ffff888104c90000 RCX: ffff888104c90000 [ 824.668244][T30008] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 824.676228][T30008] RBP: 0000000000000080 R08: ffff888104c90af8 R09: 0000000000000000 [ 824.684325][T30008] R10: ffffc9000142fdf0 R11: 0001c9000142fdf0 R12: ffff888104c90000 [ 824.692477][T30008] R13: ffff888104c90828 R14: ffff8881250f0910 R15: 0000000000000080 [ 824.700459][T30008] FS: 0000000000000000(0000) GS:ffff8882ae9fe000(0000) knlGS:0000000000000000 [ 824.709413][T30008] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 824.716022][T30008] CR2: 00007f62df85eff8 CR3: 0000000179088000 CR4: 00000000003506f0 [ 824.724090][T30008] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 824.732083][T30008] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 824.740173][T30008] Call Trace: [ 824.743479][T30008] [ 824.746467][T30008] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 824.752146][T30008] ? __list_add_valid_or_report+0x38/0xe0 [ 824.757912][T30008] do_exit+0xc13/0x1530 [ 824.762168][T30008] ? switch_fpu_return+0xe7/0x1b0 [ 824.767288][T30008] __x64_sys_exit+0x1f/0x20 [ 824.772268][T30008] x64_sys_call+0x301d/0x3020 [ 824.777044][T30008] do_syscall_64+0x12c/0x3b0 [ 824.781731][T30008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.787644][T30008] RIP: 0033:0x7f62e0e0cdd9 [ 824.792087][T30008] Code: Unable to access opcode bytes at 0x7f62e0e0cdaf. [ 824.799105][T30008] RSP: 002b:00007f62df85efd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 824.807531][T30008] RAX: ffffffffffffffda RBX: 00007f62e1085fa0 RCX: 00007f62e0e0cdd9 [ 824.815511][T30008] RDX: 00007f62df85f9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 824.823524][T30008] RBP: 00007f62e0ea2d69 R08: 0000000000000000 R09: 0000000000000000 [ 824.831503][T30008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.839738][T30008] R13: 00007f62e1086038 R14: 00007f62e1085fa0 R15: 00007ffd76f21088 [ 824.847736][T30008] [ 824.850816][T30008] ---[ end trace 0000000000000000 ]--- [ 824.861327][T29994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.916852][T30014] loop5: detected capacity change from 0 to 512 [ 824.993116][T30014] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.8116: Bad quota inum: 2, type: 1 [ 825.024334][T30014] loop5: lost filesystem error report for type 5 error -117 [ 825.025415][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 825.039620][ C1] EXT4-fs (loop5): initial error at time 1777421714: ext4_quota_enable:7221 [ 825.048474][ C1] EXT4-fs (loop5): last error at time 1777421714: ext4_quota_enable:7221 [ 825.057172][T30014] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 825.093313][T30014] EXT4-fs (loop5): mount failed [ 825.145740][T30021] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 825.169678][T30019] loop1: detected capacity change from 0 to 8192 [ 825.199123][T29989] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 825.214318][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8113'. [ 825.306620][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.332878][T22896] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 825.336853][T30027] lo speed is unknown, defaulting to 1000 [ 825.364591][T22896] FAT-fs (loop1): Filesystem has been set read-only [ 825.373969][T30029] netlink: 'syz.7.8121': attribute type 11 has an invalid length. [ 825.385390][T30023] loop5: detected capacity change from 0 to 1024 [ 825.422269][T30023] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 825.432061][T30023] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 825.472667][T30023] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.8119: iget: special inode unallocated [ 825.479112][T30036] netlink: 'syz.0.8123': attribute type 11 has an invalid length. [ 825.587544][T30032] lo speed is unknown, defaulting to 1000 [ 825.661286][T30041] netlink: 'syz.3.8120': attribute type 36 has an invalid length. [ 825.694277][T30041] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 825.704508][T30041] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 825.717039][T30041] netlink: 'syz.3.8120': attribute type 10 has an invalid length. [ 825.727053][T30041] team0: Device ipvlan0 failed to register rx_handler [ 825.759966][T30023] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 825.760733][T30023] EXT4-fs (loop5): no journal found [ 825.769926][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 825.769949][ C1] EXT4-fs (loop5): initial error at time 1777421715: ext4_get_journal_inode:5896: inode 32 [ 825.769995][ C1] EXT4-fs (loop5): last error at time 1777421715: ext4_get_journal_inode:5896: inode 32 [ 826.060453][T30043] loop7: detected capacity change from 0 to 512 [ 826.174906][T30043] EXT4-fs: Ignoring removed i_version option [ 826.248971][T30043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 826.295656][T30043] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.8121: invalid block [ 826.322177][T30043] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 826.322672][T30043] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8121: invalid indirect mapped block 4294967295 (level 1) [ 826.331999][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 826.332038][ C1] EXT4-fs (loop7): initial error at time 1777421716: ext4_get_branch:178: inode 11: block 4294967295 [ 826.332119][ C1] EXT4-fs (loop7): last error at time 1777421716: ext4_get_branch:178: inode 11: block 4294967295 [ 826.391384][T30043] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 826.397356][T30043] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8121: invalid indirect mapped block 4294967295 (level 1) [ 826.434294][T30043] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 826.437186][T30043] EXT4-fs (loop7): 2 truncates cleaned up [ 826.455731][T30050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8126'. [ 826.470633][T30043] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.519848][T30051] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8125'. [ 826.570878][T30053] lo speed is unknown, defaulting to 1000 [ 826.611651][T30053] IPVS: sh: FWM 3 0x00000003 - no destination available [ 826.619417][T26171] IPVS: starting estimator thread 0... [ 826.640456][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.667896][T30062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8129'. [ 826.679632][T30062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8129'. [ 826.689270][T30058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8129'. [ 826.698230][T30058] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8129'. [ 826.702369][T30065] lo speed is unknown, defaulting to 1000 [ 826.749547][T30073] loop3: detected capacity change from 0 to 512 [ 826.755906][T30063] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 826.780273][T30065] netlink: 'syz.7.8130': attribute type 11 has an invalid length. [ 826.828762][T30065] loop7: detected capacity change from 0 to 512 [ 826.833763][T30060] IPVS: using max 2400 ests per chain, 120000 per kthread [ 826.835481][T30065] EXT4-fs: Ignoring removed i_version option [ 826.901377][T30065] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 826.913172][T30073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.959428][T30073] ext4 filesystem being mounted at /361/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 826.964680][T30084] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8136'. [ 826.982280][T30065] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.8130: invalid block [ 827.008278][T30065] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 827.008505][T30065] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8130: invalid indirect mapped block 4294967295 (level 1) [ 827.042792][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.054446][T30084] SET target dimension over the limit! [ 827.060257][T30065] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8130: invalid indirect mapped block 4294967295 (level 1) [ 827.075098][T30084] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8136'. [ 827.087450][T30065] EXT4-fs (loop7): 2 truncates cleaned up [ 827.101154][ C0] EXT4-fs (loop7): error count since last fsck: 3 [ 827.106765][T30065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.107630][ C0] EXT4-fs (loop7): initial error at time 1777421716: ext4_get_branch:178: inode 11: block 4294967295 [ 827.107702][ C0] EXT4-fs (loop7): last error at time 1777421716: ext4_free_branches:1023: inode 11 [ 827.359853][T30092] loop3: detected capacity change from 0 to 1024 [ 827.378722][T30095] lo speed is unknown, defaulting to 1000 [ 827.396219][T30092] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 827.406307][T30092] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 827.408532][T30097] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8142'. [ 827.433547][ T7190] IPVS: stop unused estimator thread 0... [ 827.438136][T30092] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.8140: iget: special inode unallocated [ 827.455057][T30092] EXT4-fs (loop3): no journal found [ 827.457732][T30095] netlink: 'syz.1.8141': attribute type 11 has an invalid length. [ 827.479847][T30095] loop1: detected capacity change from 0 to 512 [ 827.495721][T30095] EXT4-fs: Ignoring removed i_version option [ 827.507419][T30095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 827.544305][T30095] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.8141: invalid block [ 827.558256][T30095] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8141: invalid indirect mapped block 4294967295 (level 1) [ 827.572635][T30095] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8141: invalid indirect mapped block 4294967295 (level 1) [ 827.573355][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.599477][T30095] EXT4-fs (loop1): 2 truncates cleaned up [ 827.605725][T30095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.606357][T30102] lo speed is unknown, defaulting to 1000 [ 827.625428][T30103] netlink: 'syz.3.8144': attribute type 11 has an invalid length. [ 827.682273][T30111] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8147'. [ 827.758092][T30102] loop3: detected capacity change from 0 to 512 [ 827.765007][T30102] EXT4-fs: Ignoring removed i_version option [ 827.779588][T30102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 827.789096][T30102] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8144: invalid indirect mapped block 4294967295 (level 1) [ 827.803362][T30102] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8144: invalid indirect mapped block 4294967295 (level 1) [ 827.851550][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 827.858455][ C0] EXT4-fs (loop3): initial error at time 1777421717: ext4_free_branches:1023: inode 11 [ 827.868783][ C0] EXT4-fs (loop3): last error at time 1777421717: ext4_free_branches:1023: inode 11 [ 827.892929][T30102] EXT4-fs (loop3): 2 truncates cleaned up [ 827.901007][T30114] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 827.909460][T30102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.076978][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.100651][T30120] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8150'. [ 828.178820][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.265667][T30124] lo speed is unknown, defaulting to 1000 [ 828.279901][T30125] netlink: 'syz.5.8152': attribute type 11 has an invalid length. [ 828.404654][T30124] loop5: detected capacity change from 0 to 512 [ 828.433611][T30124] EXT4-fs: Ignoring removed i_version option [ 828.457961][T30124] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 828.471402][T30124] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.8152: invalid block [ 828.483995][T30124] fserror_report: 8 callbacks suppressed [ 828.484012][T30124] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 828.490082][T30124] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8152: invalid indirect mapped block 4294967295 (level 1) [ 828.499565][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 828.499598][ C1] EXT4-fs (loop5): initial error at time 1777421718: ext4_get_branch:178: inode 11: block 4294967295 [ 828.499637][ C1] EXT4-fs (loop5): last error at time 1777421718: ext4_get_branch:178: inode 11: block 4294967295 [ 828.717130][T30124] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 828.717318][T30124] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8152: invalid indirect mapped block 4294967295 (level 1) [ 828.740785][T30124] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 828.741167][T30124] EXT4-fs (loop5): 2 truncates cleaned up [ 828.757001][T30124] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.825778][T30131] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8153'. [ 829.050974][T30140] hub 8-0:1.0: USB hub found [ 829.056272][T30140] hub 8-0:1.0: 8 ports detected [ 829.068951][T30140] netlink: 'syz.1.8156': attribute type 36 has an invalid length. [ 829.082740][T30140] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 829.093320][T30140] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 829.109953][T30141] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 829.320202][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 829.401086][T30144] loop5: detected capacity change from 0 to 512 [ 829.423461][T30144] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 829.467314][T30144] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 829.592614][T30144] EXT4-fs (loop5): failed to open journal device unknown-block(0,3) -6 [ 829.983517][ T28] kauditd_printk_skb: 196 callbacks suppressed [ 829.983537][ T28] audit: type=1326 audit(1777421719.983:45175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.028369][ T28] audit: type=1326 audit(1777421719.983:45176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.034488][T30138] syz.7.8154 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 830.066448][ T28] audit: type=1326 audit(1777421719.983:45177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.090442][ T28] audit: type=1326 audit(1777421719.983:45178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.114752][T30138] CPU: 1 UID: 0 PID: 30138 Comm: syz.7.8154 Tainted: G W syzkaller #0 PREEMPT(full) [ 830.114833][T30138] Tainted: [W]=WARN [ 830.114842][T30138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 830.114858][T30138] Call Trace: [ 830.114905][T30138] [ 830.114916][T30138] __dump_stack+0x1d/0x30 [ 830.114943][T30138] dump_stack_lvl+0x95/0xd0 [ 830.115000][T30138] dump_stack+0x15/0x1b [ 830.115022][T30138] dump_header+0x80/0x240 [ 830.115098][T30138] oom_kill_process+0x295/0x350 [ 830.115127][T30138] out_of_memory+0x97d/0xb80 [ 830.115162][T30138] try_charge_memcg+0x62f/0xa10 [ 830.115216][T30138] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 830.115274][T30138] __alloc_frozen_pages_noprof+0x18a/0x350 [ 830.115312][T30138] alloc_pages_mpol+0xb3/0x260 [ 830.115410][T30138] ? mod_lruvec_state+0xe0/0xf0 [ 830.115448][T30138] alloc_pages_noprof+0x8f/0x140 [ 830.115474][T30138] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 830.115513][T30138] __kvmalloc_node_noprof+0x3d4/0x640 [ 830.115533][T30138] ? futex_hash_allocate+0x190/0x9a0 [ 830.115566][T30138] ? irqentry_exit+0x527/0x5b0 [ 830.115639][T30138] ? futex_hash_allocate+0x190/0x9a0 [ 830.115673][T30138] ? enqueue_hrtimer+0xa0/0x170 [ 830.115713][T30138] futex_hash_allocate+0x190/0x9a0 [ 830.115747][T30138] futex_hash_prctl+0xd8/0xf0 [ 830.115775][T30138] __se_sys_prctl+0x4f4/0x1400 [ 830.115802][T30138] __x64_sys_prctl+0x67/0x80 [ 830.115865][T30138] x64_sys_call+0x2533/0x3020 [ 830.115893][T30138] do_syscall_64+0x12c/0x3b0 [ 830.115921][T30138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.115946][T30138] RIP: 0033:0x7fbdc6ddcdd9 [ 830.115996][T30138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.116014][T30138] RSP: 002b:00007fbdc57ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 830.116037][T30138] RAX: ffffffffffffffda RBX: 00007fbdc7056180 RCX: 00007fbdc6ddcdd9 [ 830.116054][T30138] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 830.116070][T30138] RBP: 00007fbdc6e72d69 R08: 0000000000000000 R09: 0000000000000000 [ 830.116132][T30138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.116224][T30138] R13: 00007fbdc7056218 R14: 00007fbdc7056180 R15: 00007ffcc4805948 [ 830.116305][T30138] [ 830.116498][T30138] memory: usage 296504kB, limit 307200kB, failcnt 9876 [ 830.364682][ T28] audit: type=1326 audit(1777421719.983:45179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.402302][T30157] 9pnet_fd: Insufficient options for proto=fd [ 830.416202][ T28] audit: type=1326 audit(1777421719.983:45180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.517225][T30153] loop3: detected capacity change from 0 to 1024 [ 830.523759][ T28] audit: type=1326 audit(1777421720.099:45181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 830.552163][ T28] audit: type=1326 audit(1777421720.099:45182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a77b3cb42 code=0x7ffc0000 [ 830.582933][T30153] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 830.595573][T30153] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 830.623288][ T28] audit: type=1326 audit(1777421720.099:45183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2a77b3cbd7 code=0x7ffc0000 [ 830.666298][T30153] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.8160: iget: special inode unallocated [ 830.685593][ T28] audit: type=1326 audit(1777421720.099:45184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30149 comm="syz.1.8158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2a77af9ad1 code=0x7ffc0000 [ 830.738507][T30138] memory+swap: usage 329280kB, limit 9007199254740988kB, failcnt 0 [ 830.747294][T30153] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 830.747516][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 830.764207][ C0] EXT4-fs (loop3): initial error at time 1777421720: ext4_get_journal_inode:5896: inode 32 [ 830.774966][ C0] EXT4-fs (loop3): last error at time 1777421720: ext4_get_journal_inode:5896: inode 32 [ 830.786754][T30138] kmem: usage 238512kB, limit 9007199254740988kB, failcnt 0 [ 830.794926][T30138] Memory cgroup stats for /syz7: [ 830.796236][T30138] cache 33447936 [ 830.806077][T30138] rss 585728 [ 830.809373][T30138] shmem 33447936 [ 830.813021][T30138] mapped_file 8593408 [ 830.820143][T30138] dirty 0 [ 830.823205][T30161] netlink: 'syz.5.8161': attribute type 15 has an invalid length. [ 830.855489][T30138] writeback 0 [ 830.858853][T30138] workingset_refault_anon 141 [ 830.864364][T30153] EXT4-fs (loop3): no journal found [ 830.870130][T30138] workingset_refault_file 0 [ 830.874919][T30138] swap 58056704 [ 830.878410][T30138] swapcached 61923328 [ 830.885338][T30138] pgpgin 217238 [ 830.888853][T30138] pgpgout 208828 [ 830.895526][T30138] pgfault 216328 [ 830.904503][T30138] pgmajfault 52 [ 830.907995][T30138] inactive_anon 9478144 [ 830.912179][T30138] active_anon 24969216 [ 830.916257][T30138] inactive_file 0 [ 830.932908][T30138] active_file 0 [ 830.939170][T30138] unevictable 0 [ 830.949163][T30138] hierarchical_memory_limit 314572800 [ 830.954758][T30138] hierarchical_memsw_limit 9223372036854771712 [ 830.960924][T30138] total_cache 33447936 [ 830.965082][T30138] total_rss 585728 [ 830.968809][T30138] total_shmem 33447936 [ 830.972967][T30138] total_mapped_file 8593408 [ 830.977471][T30138] total_dirty 0 [ 830.980936][T30138] total_writeback 0 [ 830.984868][T30138] total_workingset_refault_anon 141 [ 830.990085][T30138] total_workingset_refault_file 0 [ 830.995222][T30138] total_swap 58056704 [ 830.999236][T30138] total_swapcached 61923328 [ 831.003744][T30138] total_pgpgin 217238 [ 831.007791][T30138] total_pgpgout 208828 [ 831.011862][T30138] total_pgfault 216328 [ 831.016007][T30138] total_pgmajfault 52 [ 831.020041][T30138] total_inactive_anon 9478144 [ 831.024719][T30138] total_active_anon 24969216 [ 831.029450][T30138] total_inactive_file 0 [ 831.033674][T30138] total_active_file 0 [ 831.037664][T30138] total_unevictable 0 [ 831.041671][T30138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.8154,pid=30128,uid=0 [ 831.090325][T30138] Memory cgroup out of memory: Killed process 30138 (syz.7.8154) total-vm:98536kB, anon-rss:1436kB, file-rss:26460kB, shmem-rss:8532kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 831.164212][ T7186] tipc: Subscription rejected, illegal request [ 831.308275][T30176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.316867][T30176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.349099][T30179] lo speed is unknown, defaulting to 1000 [ 831.395830][T30179] netlink: 'syz.7.8167': attribute type 11 has an invalid length. [ 831.438683][T30179] loop7: detected capacity change from 0 to 512 [ 831.445251][T30179] EXT4-fs: Ignoring removed i_version option [ 831.451700][T30179] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 831.467032][T30179] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8167: invalid indirect mapped block 4294967295 (level 1) [ 831.488234][T30179] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 831.488475][T30179] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8167: invalid indirect mapped block 4294967295 (level 1) [ 831.511791][T30179] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 831.512149][T30179] EXT4-fs (loop7): 2 truncates cleaned up [ 831.527522][T30179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.105917][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.106150][T30195] binfmt_misc: register: failed to install interpreter file ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 832.223650][T30206] __nla_validate_parse: 2 callbacks suppressed [ 832.223748][T30206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8176'. [ 832.800458][T30218] loop7: detected capacity change from 0 to 1024 [ 832.828652][T30218] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 832.864751][T30218] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 832.877921][T30218] EXT4-fs error (device loop7): ext4_get_journal_inode:5896: inode #32: comm syz.7.8181: iget: special inode unallocated [ 832.899348][T30218] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 832.901404][T30218] EXT4-fs (loop7): no journal found [ 832.921229][T30220] loop1: detected capacity change from 0 to 128 [ 833.243236][T30223] netlink: 'syz.3.8182': attribute type 11 has an invalid length. [ 833.261239][T30222] lo speed is unknown, defaulting to 1000 [ 833.415713][T30222] loop3: detected capacity change from 0 to 512 [ 833.441267][T30222] EXT4-fs: Ignoring removed i_version option [ 833.481078][T30222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 833.618421][T30222] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8182: invalid indirect mapped block 4294967295 (level 1) [ 833.633453][T30222] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 833.633626][T30222] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8182: invalid indirect mapped block 4294967295 (level 1) [ 833.642872][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 833.642895][ C1] EXT4-fs (loop3): initial error at time 1777421723: ext4_free_branches:1023: inode 11 [ 833.642958][ C1] EXT4-fs (loop3): last error at time 1777421723: ext4_free_branches:1023: inode 11 [ 833.683566][T30222] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 833.694719][T30222] EXT4-fs (loop3): 2 truncates cleaned up [ 833.710228][T30222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.742084][T30242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.750580][T30242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.950988][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.628918][T30262] loop3: detected capacity change from 0 to 1024 [ 834.642380][T30262] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 834.652126][T30262] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 834.663189][T30262] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.8196: iget: special inode unallocated [ 834.676126][T30262] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 834.676546][T30262] EXT4-fs (loop3): no journal found [ 835.272635][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8201'. [ 835.281913][T30276] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8201'. [ 835.301899][T30276] SET target dimension over the limit! [ 835.310719][T30276] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8201'. [ 835.320865][T30278] lo speed is unknown, defaulting to 1000 [ 835.375046][ T3372] IPVS: starting estimator thread 0... [ 835.383761][T30278] IPVS: sh: FWM 3 0x00000003 - no destination available [ 835.446974][T30285] lo speed is unknown, defaulting to 1000 [ 835.520589][T30285] netlink: 'syz.5.8204': attribute type 11 has an invalid length. [ 835.552519][T30285] loop5: detected capacity change from 0 to 512 [ 835.561009][T30285] EXT4-fs: Ignoring removed i_version option [ 835.578189][T30285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 835.596184][T30287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.598059][T30285] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8204: invalid indirect mapped block 4294967295 (level 1) [ 835.604736][T30287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.628092][T30285] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 835.628351][T30285] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8204: invalid indirect mapped block 4294967295 (level 1) [ 835.637798][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 835.637836][ C1] EXT4-fs (loop5): initial error at time 1777421725: ext4_free_branches:1023: inode 11 [ 835.637892][ C1] EXT4-fs (loop5): last error at time 1777421725: ext4_free_branches:1023: inode 11 [ 835.661250][T30280] IPVS: using max 2400 ests per chain, 120000 per kthread [ 835.670342][T30285] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 835.737362][T30285] EXT4-fs (loop5): 2 truncates cleaned up [ 835.754106][T30285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.824363][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 835.824463][ T28] audit: type=1326 audit(1777421726.128:45318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 835.929334][ T28] audit: type=1326 audit(1777421726.180:45319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.044108][ T28] audit: type=1326 audit(1777421726.180:45321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.146117][ T28] audit: type=1326 audit(1777421726.180:45320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.362808][ T28] audit: type=1326 audit(1777421726.180:45322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.430067][ T28] audit: type=1326 audit(1777421726.180:45323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.503501][ T28] audit: type=1326 audit(1777421726.180:45324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.535982][ T28] audit: type=1326 audit(1777421726.180:45325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.561510][ T28] audit: type=1326 audit(1777421726.180:45326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.587899][ T28] audit: type=1326 audit(1777421726.180:45327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30293 comm="syz.3.8206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 836.588208][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.738144][T30298] syz.7.8208 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 836.755159][T30310] loop5: detected capacity change from 0 to 128 [ 836.762370][ T6113] tipc: Subscription rejected, illegal request [ 836.853688][T30298] CPU: 0 UID: 0 PID: 30298 Comm: syz.7.8208 Tainted: G W syzkaller #0 PREEMPT(full) [ 836.853810][T30298] Tainted: [W]=WARN [ 836.853820][T30298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 836.853832][T30298] Call Trace: [ 836.853839][T30298] [ 836.853848][T30298] __dump_stack+0x1d/0x30 [ 836.853885][T30298] dump_stack_lvl+0x95/0xd0 [ 836.853909][T30298] dump_stack+0x15/0x1b [ 836.853932][T30298] dump_header+0x80/0x240 [ 836.853959][T30298] oom_kill_process+0x295/0x350 [ 836.854040][T30298] out_of_memory+0x97d/0xb80 [ 836.854079][T30298] try_charge_memcg+0x62f/0xa10 [ 836.854118][T30298] charge_memcg+0x6d/0x120 [ 836.854142][T30298] __mem_cgroup_charge+0x28/0xb0 [ 836.854244][T30298] shmem_get_folio_gfp+0x47b/0xd60 [ 836.854275][T30298] shmem_fault+0xf6/0x250 [ 836.854357][T30298] handle_mm_fault+0x1a24/0x2e70 [ 836.854387][T30298] ? __pfx_shmem_fault+0x10/0x10 [ 836.854417][T30298] do_user_addr_fault+0x3fd/0x1050 [ 836.854447][T30298] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 836.854498][T30298] exc_page_fault+0x62/0xa0 [ 836.854571][T30298] asm_exc_page_fault+0x26/0x30 [ 836.854596][T30298] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 836.854636][T30298] Code: 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 1e 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 836.854653][T30298] RSP: 0018:ffffc900012af868 EFLAGS: 00050206 [ 836.854671][T30298] RAX: ffff888101ec70f8 RBX: ffff88818710e000 RCX: 0000000000000700 [ 836.854799][T30298] RDX: 0000000000000000 RSI: ffff88818710e900 RDI: 00002000008e4000 [ 836.854816][T30298] RBP: 00002000008e3700 R08: 0000000000000ba4 R09: 0000000000000000 [ 836.854831][T30298] R10: 000188818710e000 R11: 000188818710efff R12: 00002000008e4700 [ 836.854846][T30298] R13: ffffc900012afe70 R14: 0000000000001000 R15: 00007ffffffff000 [ 836.854870][T30298] _copy_to_iter+0x141/0xea0 [ 836.854908][T30298] ? _raw_spin_unlock+0x9/0x30 [ 836.854978][T30298] ? finish_task_switch+0x128/0x320 [ 836.855000][T30298] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 836.855028][T30298] __skb_datagram_iter+0x2f4/0x680 [ 836.855056][T30298] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 836.855095][T30298] skb_copy_datagram_iter+0x3f/0xf0 [ 836.855124][T30298] unix_stream_read_actor+0x43/0x70 [ 836.855157][T30298] unix_stream_read_generic+0x6e9/0x1630 [ 836.855270][T30298] ? __pfx_autoremove_wake_function+0x10/0x10 [ 836.855302][T30298] unix_stream_recvmsg+0xfc/0x130 [ 836.855398][T30298] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 836.855428][T30298] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 836.855495][T30298] sock_recvmsg+0xf5/0x120 [ 836.855580][T30298] ____sys_recvmsg+0xf5/0x280 [ 836.855636][T30298] ___sys_recvmsg+0x11f/0x3b0 [ 836.855713][T30298] __x64_sys_recvmsg+0xd1/0x160 [ 836.855752][T30298] x64_sys_call+0x2b1a/0x3020 [ 836.855782][T30298] do_syscall_64+0x12c/0x3b0 [ 836.855809][T30298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.855873][T30298] RIP: 0033:0x7fbdc6ddcdd9 [ 836.855962][T30298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.856033][T30298] RSP: 002b:00007fbdc580e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 836.856123][T30298] RAX: ffffffffffffffda RBX: 00007fbdc7056090 RCX: 00007fbdc6ddcdd9 [ 836.856136][T30298] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 836.856149][T30298] RBP: 00007fbdc6e72d69 R08: 0000000000000000 R09: 0000000000000000 [ 836.856214][T30298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.856230][T30298] R13: 00007fbdc7056128 R14: 00007fbdc7056090 R15: 00007ffcc4805948 [ 836.856254][T30298] [ 836.856264][T30298] memory: usage 221652kB, limit 307200kB, failcnt 10071 [ 837.249178][T30298] memory+swap: usage 278088kB, limit 9007199254740988kB, failcnt 0 [ 837.290596][ T7190] IPVS: stop unused estimator thread 0... [ 837.320862][T30298] kmem: usage 163832kB, limit 9007199254740988kB, failcnt 0 [ 837.328282][T30298] Memory cgroup stats for /syz7: [ 837.328637][T30298] cache 32903168 [ 837.337135][T30298] rss 577536 [ 837.340372][T30298] shmem 32903168 [ 837.343931][T30298] mapped_file 8048640 [ 837.347990][T30298] dirty 0 [ 837.351018][T30298] writeback 0 [ 837.354302][T30298] workingset_refault_anon 141 [ 837.358989][T30298] workingset_refault_file 0 [ 837.363582][T30298] swap 58056704 [ 837.367059][T30298] swapcached 61923328 [ 837.371125][T30298] pgpgin 227221 [ 837.374599][T30298] pgpgout 218946 [ 837.378157][T30298] pgfault 235593 [ 837.381727][T30298] pgmajfault 52 [ 837.385190][T30298] inactive_anon 32333824 [ 837.389434][T30298] active_anon 1507328 [ 837.393542][T30298] inactive_file 0 [ 837.420141][T30298] active_file 0 [ 837.427877][T30298] unevictable 0 [ 837.436185][T30298] hierarchical_memory_limit 314572800 [ 837.447396][T30298] hierarchical_memsw_limit 9223372036854771712 [ 837.450138][T30320] lo speed is unknown, defaulting to 1000 [ 837.457455][T30322] loop3: detected capacity change from 0 to 128 [ 837.488945][T30298] total_cache 32903168 [ 837.493117][T30298] total_rss 577536 [ 837.496861][T30298] total_shmem 32903168 [ 837.501426][T30325] netlink: 'syz.1.8213': attribute type 11 has an invalid length. [ 837.508026][T30298] total_mapped_file 8048640 [ 837.532965][T30325] loop1: detected capacity change from 0 to 512 [ 837.539542][T30325] EXT4-fs: Ignoring removed i_version option [ 837.590682][T30325] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 837.602392][T30325] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.8213: invalid block [ 837.614519][T30325] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 837.614776][T30325] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8213: invalid indirect mapped block 4294967295 (level 1) [ 837.620422][T30298] total_dirty 0 [ 837.642266][T30325] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 837.650400][T30325] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8213: invalid indirect mapped block 4294967295 (level 1) [ 837.671470][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 837.680052][ C0] EXT4-fs (loop1): initial error at time 1777421727: ext4_get_branch:178: inode 11: block 4294967295 [ 837.685994][T30298] total_writeback 0 [ 837.690947][ C0] EXT4-fs (loop1): last error at time 1777421728: ext4_free_branches:1023: inode 11 [ 837.693757][T30325] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 837.695287][T30298] total_workingset_refault_anon 141 [ 837.705735][T30325] EXT4-fs (loop1): 2 truncates cleaned up [ 837.725094][T30325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.743092][T30298] total_workingset_refault_file 0 [ 837.748241][T30298] total_swap 58056704 [ 837.761495][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8216'. [ 837.762069][T30298] total_swapcached 61923328 [ 837.770495][T30330] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8216'. [ 837.793264][T30298] total_pgpgin 227221 [ 837.793936][T30330] SET target dimension over the limit! [ 837.797422][T30298] total_pgpgout 218946 [ 837.807066][T30298] total_pgfault 235593 [ 837.811704][T30298] total_pgmajfault 52 [ 837.815745][T30298] total_inactive_anon 32333824 [ 837.820090][T30330] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8216'. [ 837.820746][T30298] total_active_anon 1507328 [ 837.834669][T30298] total_inactive_file 0 [ 837.839014][T30298] total_active_file 0 [ 837.859850][T30298] total_unevictable 0 [ 837.864196][T30298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.8208,pid=30295,uid=0 [ 837.879488][T30298] Memory cgroup out of memory: Killed process 30298 (syz.7.8208) total-vm:96348kB, anon-rss:1428kB, file-rss:22424kB, shmem-rss:7860kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 838.045341][T30336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8218'. [ 838.067454][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.080500][T30336] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8218'. [ 838.098786][T30337] SET target dimension over the limit! [ 838.109185][T30337] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8218'. [ 838.430115][T30340] syz.1.8219 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 838.440001][T30340] CPU: 0 UID: 0 PID: 30340 Comm: syz.1.8219 Tainted: G W syzkaller #0 PREEMPT(full) [ 838.440033][T30340] Tainted: [W]=WARN [ 838.440041][T30340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 838.440088][T30340] Call Trace: [ 838.440096][T30340] [ 838.440105][T30340] __dump_stack+0x1d/0x30 [ 838.440133][T30340] dump_stack_lvl+0x95/0xd0 [ 838.440158][T30340] dump_stack+0x15/0x1b [ 838.440191][T30340] dump_header+0x80/0x240 [ 838.440219][T30340] oom_kill_process+0x295/0x350 [ 838.440304][T30340] out_of_memory+0x97d/0xb80 [ 838.440341][T30340] try_charge_memcg+0x62f/0xa10 [ 838.440383][T30340] charge_memcg+0x6d/0x120 [ 838.440448][T30340] __mem_cgroup_charge+0x28/0xb0 [ 838.440472][T30340] shmem_get_folio_gfp+0x47b/0xd60 [ 838.440563][T30340] shmem_fault+0xf6/0x250 [ 838.440590][T30340] handle_mm_fault+0x1a24/0x2e70 [ 838.440677][T30340] ? __pfx_shmem_fault+0x10/0x10 [ 838.440705][T30340] do_user_addr_fault+0x3fd/0x1050 [ 838.440743][T30340] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 838.440774][T30340] exc_page_fault+0x62/0xa0 [ 838.440890][T30340] asm_exc_page_fault+0x26/0x30 [ 838.440913][T30340] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 838.441012][T30340] Code: 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 1e 02 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 838.441033][T30340] RSP: 0018:ffffc900018ef868 EFLAGS: 00050206 [ 838.441053][T30340] RAX: ffff88811f1bdff8 RBX: ffff888187048000 RCX: 00000000000002c0 [ 838.441070][T30340] RDX: 0000000000000000 RSI: ffff88818704fd40 RDI: 00002000007ac000 [ 838.441143][T30340] RBP: 00002000007a42c0 R08: 0000000000000854 R09: 0000000000000000 [ 838.441160][T30340] R10: 0001888187048000 R11: 000188818704ffff R12: 00002000007ac2c0 [ 838.441176][T30340] R13: ffffc900018efe70 R14: 0000000000008000 R15: 00007ffffffff000 [ 838.441201][T30340] _copy_to_iter+0x141/0xea0 [ 838.441246][T30340] ? _raw_spin_unlock+0x9/0x30 [ 838.441270][T30340] ? finish_task_switch+0x128/0x320 [ 838.441299][T30340] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 838.441325][T30340] __skb_datagram_iter+0x2f4/0x680 [ 838.441351][T30340] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 838.441378][T30340] skb_copy_datagram_iter+0x3f/0xf0 [ 838.441432][T30340] unix_stream_read_actor+0x43/0x70 [ 838.441462][T30340] unix_stream_read_generic+0x6e9/0x1630 [ 838.441497][T30340] ? __pfx_autoremove_wake_function+0x10/0x10 [ 838.441601][T30340] unix_stream_recvmsg+0xfc/0x130 [ 838.441702][T30340] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 838.441787][T30340] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 838.441818][T30340] sock_recvmsg+0xf5/0x120 [ 838.441848][T30340] ____sys_recvmsg+0xf5/0x280 [ 838.441880][T30340] ___sys_recvmsg+0x11f/0x3b0 [ 838.441982][T30340] __x64_sys_recvmsg+0xd1/0x160 [ 838.442008][T30340] x64_sys_call+0x2b1a/0x3020 [ 838.442030][T30340] do_syscall_64+0x12c/0x3b0 [ 838.442065][T30340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.442089][T30340] RIP: 0033:0x7f2a77b3cdd9 [ 838.442108][T30340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.442191][T30340] RSP: 002b:00007f2a7656e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 838.442215][T30340] RAX: ffffffffffffffda RBX: 00007f2a77db6090 RCX: 00007f2a77b3cdd9 [ 838.442229][T30340] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000004 [ 838.442283][T30340] RBP: 00007f2a77bd2d69 R08: 0000000000000000 R09: 0000000000000000 [ 838.442300][T30340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.442315][T30340] R13: 00007f2a77db6128 R14: 00007f2a77db6090 R15: 00007fffeba6c2d8 [ 838.442340][T30340] [ 838.442562][T30340] memory: usage 307200kB, limit 307200kB, failcnt 2238 [ 838.847947][T30340] memory+swap: usage 258604kB, limit 9007199254740988kB, failcnt 0 [ 838.884597][T30340] kmem: usage 182156kB, limit 9007199254740988kB, failcnt 0 [ 838.933959][T30340] Memory cgroup stats for /syz1: [ 838.934495][T30340] cache 72323072 [ 838.992330][T30340] rss 212992 [ 839.013764][T30354] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 839.020734][T30340] shmem 72314880 [ 839.049022][T30340] mapped_file 5083136 [ 839.074046][T30340] dirty 4096 [ 839.094825][T30340] writeback 0 [ 839.098156][T30340] workingset_refault_anon 6597 [ 839.102968][T30340] workingset_refault_file 1350 [ 839.107779][T30340] swap 0 [ 839.110681][T30340] swapcached 103661568 [ 839.114816][T30340] pgpgin 969867 [ 839.118300][T30340] pgpgout 952158 [ 839.121907][T30340] pgfault 975241 [ 839.125609][T30340] pgmajfault 859 [ 839.129174][T30340] inactive_anon 68554752 [ 839.133582][T30340] active_anon 3973120 [ 839.173955][T30340] inactive_file 0 [ 839.221467][T30340] active_file 8192 [ 839.225240][T30340] unevictable 0 [ 839.248142][T30340] hierarchical_memory_limit 314572800 [ 839.253634][T30340] hierarchical_memsw_limit 9223372036854771712 [ 839.259804][T30340] total_cache 72323072 [ 839.287260][T30340] total_rss 212992 [ 839.291203][T30340] total_shmem 72314880 [ 839.309139][T30340] total_mapped_file 5083136 [ 839.313789][T30340] total_dirty 4096 [ 839.317607][T30340] total_writeback 0 [ 839.321434][T30340] total_workingset_refault_anon 6597 [ 839.326824][T30340] total_workingset_refault_file 1350 [ 839.332121][T30340] total_swap 0 [ 839.335672][T30340] total_swapcached 103661568 [ 839.340345][T30340] total_pgpgin 969867 [ 839.344344][T30340] total_pgpgout 952158 [ 839.348440][T30340] total_pgfault 975241 [ 839.352611][T30340] total_pgmajfault 859 [ 839.356728][T30340] total_inactive_anon 68554752 [ 839.361508][T30340] total_active_anon 3973120 [ 839.366020][T30340] total_inactive_file 0 [ 839.370193][T30340] total_active_file 8192 [ 839.374569][T30340] total_unevictable 0 [ 839.378583][T30340] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8219,pid=30338,uid=0 [ 839.393533][T30340] Memory cgroup out of memory: Killed process 30340 (syz.1.8219) total-vm:96348kB, anon-rss:1428kB, file-rss:22412kB, shmem-rss:4960kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 839.548218][T30361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8226'. [ 839.701832][T30356] syz.5.8223 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 839.716154][T30356] CPU: 0 UID: 0 PID: 30356 Comm: syz.5.8223 Tainted: G W syzkaller #0 PREEMPT(full) [ 839.716245][T30356] Tainted: [W]=WARN [ 839.716254][T30356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 839.716270][T30356] Call Trace: [ 839.716279][T30356] [ 839.716289][T30356] __dump_stack+0x1d/0x30 [ 839.716316][T30356] dump_stack_lvl+0x95/0xd0 [ 839.716342][T30356] dump_stack+0x15/0x1b [ 839.716400][T30356] dump_header+0x80/0x240 [ 839.716427][T30356] oom_kill_process+0x295/0x350 [ 839.716460][T30356] out_of_memory+0x97d/0xb80 [ 839.716491][T30356] try_charge_memcg+0x62f/0xa10 [ 839.716584][T30356] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 839.716610][T30356] __alloc_frozen_pages_noprof+0x18a/0x350 [ 839.716637][T30356] alloc_pages_mpol+0xb3/0x260 [ 839.716709][T30356] ? mod_lruvec_state+0xe0/0xf0 [ 839.716831][T30356] alloc_pages_noprof+0x8f/0x140 [ 839.716856][T30356] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 839.716896][T30356] __kvmalloc_node_noprof+0x3d4/0x640 [ 839.717028][T30356] ? futex_hash_allocate+0x190/0x9a0 [ 839.717065][T30356] ? futex_hash_allocate+0x190/0x9a0 [ 839.717182][T30356] futex_hash_allocate+0x190/0x9a0 [ 839.717211][T30356] ? cap_task_prctl+0x13f/0x6b0 [ 839.717239][T30356] futex_hash_prctl+0xd8/0xf0 [ 839.717318][T30356] __se_sys_prctl+0x4f4/0x1400 [ 839.717344][T30356] __x64_sys_prctl+0x67/0x80 [ 839.717373][T30356] x64_sys_call+0x2533/0x3020 [ 839.717447][T30356] do_syscall_64+0x12c/0x3b0 [ 839.717471][T30356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.717564][T30356] RIP: 0033:0x7fd8ba46cdd9 [ 839.717584][T30356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.717645][T30356] RSP: 002b:00007fd8b8e85028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 839.717669][T30356] RAX: ffffffffffffffda RBX: 00007fd8ba6e6180 RCX: 00007fd8ba46cdd9 [ 839.717686][T30356] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 839.717700][T30356] RBP: 00007fd8ba502d69 R08: 0000000000000000 R09: 0000000000000000 [ 839.717713][T30356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 839.717732][T30356] R13: 00007fd8ba6e6218 R14: 00007fd8ba6e6180 R15: 00007ffc4804d878 [ 839.717809][T30356] [ 839.717817][T30356] memory: usage 307200kB, limit 307200kB, failcnt 8551 [ 839.893207][T30369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8226'. [ 839.918543][T30356] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 839.987386][T30356] kmem: usage 231296kB, limit 9007199254740988kB, failcnt 0 [ 839.994711][T30356] Memory cgroup stats for /syz5: [ 839.994858][T30370] lo speed is unknown, defaulting to 1000 [ 839.994950][T30356] cache 76980224 [ 840.009205][T30356] rss 745472 [ 840.012409][T30356] shmem 76980224 [ 840.015962][T30356] mapped_file 9617408 [ 840.020146][T30356] dirty 0 [ 840.024320][T30356] writeback 0 [ 840.024740][T30373] ref_ctr_offset mismatch. inode: 0xa67 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 840.027651][T30356] workingset_refault_anon 11727 [ 840.027666][T30356] workingset_refault_file 3520 [ 840.027675][T30356] swap 0 [ 840.027682][T30356] swapcached 163528704 [ 840.027690][T30356] pgpgin 764915 [ 840.046883][T30373] xt_hashlimit: size too large, truncated to 1048576 [ 840.048918][T30356] pgpgout 745939 [ 840.053235][T30370] IPVS: sh: FWM 3 0x00000003 - no destination available [ 840.055824][T30356] pgfault 790389 [ 840.055837][T30356] pgmajfault 1157 [ 840.055847][T30356] inactive_anon 2707456 [ 840.055856][T30356] active_anon 75018240 [ 840.055894][T30356] inactive_file 0 [ 840.055904][T30356] active_file 0 [ 840.055912][T30356] unevictable 0 [ 840.055921][T30356] hierarchical_memory_limit 314572800 [ 840.055933][T30356] hierarchical_memsw_limit 9223372036854771712 [ 840.141544][T30356] total_cache 76980224 [ 840.141744][ T3372] IPVS: starting estimator thread 0... [ 840.145654][T30356] total_rss 745472 [ 840.154852][T30356] total_shmem 76980224 [ 840.158940][T30356] total_mapped_file 9617408 [ 840.163458][T30356] total_dirty 0 [ 840.166947][T30356] total_writeback 0 [ 840.170785][T30356] total_workingset_refault_anon 11727 [ 840.183230][T30356] total_workingset_refault_file 3520 [ 840.188630][T30356] total_swap 0 [ 840.192105][T30356] total_swapcached 163528704 [ 840.213888][T30356] total_pgpgin 764915 [ 840.218015][T30356] total_pgpgout 745939 [ 840.222231][T30356] total_pgfault 790389 [ 840.226392][T30356] total_pgmajfault 1157 [ 840.230662][T30356] total_inactive_anon 2707456 [ 840.235344][T30356] total_active_anon 75018240 [ 840.239939][T30356] total_inactive_file 0 [ 840.244108][T30356] total_active_file 0 [ 840.248103][T30356] total_unevictable 0 [ 840.252088][T30356] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.8223,pid=30351,uid=0 [ 840.267207][T30379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8231'. [ 840.273179][T30356] Memory cgroup out of memory: Killed process 30356 (syz.5.8223) total-vm:100584kB, anon-rss:1428kB, file-rss:26500kB, shmem-rss:9392kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 840.288843][T30379] vlan0: entered promiscuous mode [ 840.371277][T30374] IPVS: using max 2448 ests per chain, 122400 per kthread [ 840.460679][T30384] lo speed is unknown, defaulting to 1000 [ 840.474291][T30389] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 840.532694][T30391] netlink: 'syz.3.8233': attribute type 11 has an invalid length. [ 840.607191][T30393] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 840.649748][T30384] loop3: detected capacity change from 0 to 512 [ 840.656500][T30384] EXT4-fs: Ignoring removed i_version option [ 840.678676][T30384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 840.705194][T30384] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8233: invalid indirect mapped block 4294967295 (level 1) [ 840.727214][ T7190] IPVS: stop unused estimator thread 0... [ 840.729934][T30384] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 840.733589][T30384] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8233: invalid indirect mapped block 4294967295 (level 1) [ 840.743369][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 840.743412][ C0] EXT4-fs (loop3): initial error at time 1777421731: ext4_free_branches:1023: inode 11 [ 840.743453][ C0] EXT4-fs (loop3): last error at time 1777421731: ext4_free_branches:1023: inode 11 [ 840.784990][T30384] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 840.786789][T30384] EXT4-fs (loop3): 2 truncates cleaned up [ 840.809594][T30384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.839474][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.902968][T30408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.911673][T30408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.945735][T30412] lo speed is unknown, defaulting to 1000 [ 840.990790][T30414] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8242'. [ 841.020852][T30412] netlink: 'syz.3.8241': attribute type 11 has an invalid length. [ 841.033720][T30412] loop3: detected capacity change from 0 to 512 [ 841.050434][T30412] EXT4-fs: Ignoring removed i_version option [ 841.058968][T30412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 841.084869][T30412] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8241: invalid indirect mapped block 4294967295 (level 1) [ 841.099447][T30412] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 841.099805][T30412] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8241: invalid indirect mapped block 4294967295 (level 1) [ 841.122893][T30412] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 841.123166][T30412] EXT4-fs (loop3): 2 truncates cleaned up [ 841.135050][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 841.138869][T30412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.144754][ C1] EXT4-fs (loop3): initial error at time 1777421731: ext4_free_branches:1023: inode 11 [ 841.166878][ C1] EXT4-fs (loop3): last error at time 1777421731: ext4_free_branches:1023: inode 11 [ 841.193851][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.236788][ T28] kauditd_printk_skb: 1414 callbacks suppressed [ 841.236807][ T28] audit: type=1326 audit(1777421731.799:46742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 841.267147][ T28] audit: type=1326 audit(1777421731.799:46743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 841.291542][T30419] loop1: detected capacity change from 0 to 1024 [ 841.293550][T30419] EXT4-fs: inline encryption not supported [ 841.293573][T30419] EXT4-fs: Ignoring removed mblk_io_submit option [ 841.293622][T30419] EXT4-fs: Ignoring removed mblk_io_submit option [ 841.324798][ T28] audit: type=1326 audit(1777421731.799:46744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 841.324934][T30419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 841.348629][ T28] audit: type=1326 audit(1777421731.799:46745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 841.381052][ T28] audit: type=1326 audit(1777421731.873:46746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214357cdd9 code=0x7ffc0000 [ 841.412677][ T28] audit: type=1326 audit(1777421731.873:46747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f214357cb42 code=0x7ffc0000 [ 841.414224][T30419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.436255][ T28] audit: type=1326 audit(1777421731.873:46748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f214357cbd7 code=0x7ffc0000 [ 841.472190][ T28] audit: type=1326 audit(1777421731.873:46749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2143539ad1 code=0x7ffc0000 [ 841.495773][ T28] audit: type=1326 audit(1777421731.873:46750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f214357dbc9 code=0x7ffc0000 [ 841.527820][ T28] audit: type=1326 audit(1777421731.873:46751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30416 comm="syz.3.8243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2143539b3b code=0x7ffc0000 [ 841.545526][T30419] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.701404][T30425] loop7: detected capacity change from 0 to 1024 [ 841.718389][T30425] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 841.730344][T30425] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 841.770696][T30425] EXT4-fs error (device loop7): ext4_get_journal_inode:5896: inode #32: comm syz.7.8246: iget: special inode unallocated [ 841.784050][T30434] netlink: 'syz.1.8249': attribute type 11 has an invalid length. [ 841.821115][T30433] lo speed is unknown, defaulting to 1000 [ 841.826480][T30425] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 841.828763][T30425] EXT4-fs (loop7): no journal found [ 841.838896][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 841.838931][ C0] EXT4-fs (loop7): initial error at time 1777421732: ext4_get_journal_inode:5896: inode 32 [ 841.838986][ C0] EXT4-fs (loop7): last error at time 1777421732: ext4_get_journal_inode:5896: inode 32 [ 842.073560][T30433] loop1: detected capacity change from 0 to 512 [ 842.080255][T30433] EXT4-fs: Ignoring removed i_version option [ 842.105564][T30433] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 842.123310][T30433] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8249: invalid indirect mapped block 4294967295 (level 1) [ 842.137251][T30433] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 842.137438][T30433] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8249: invalid indirect mapped block 4294967295 (level 1) [ 842.160473][T30433] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 842.160713][T30433] EXT4-fs (loop1): 2 truncates cleaned up [ 842.176255][T30433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.191233][T30450] Invalid logical block size (18) [ 842.211997][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.281554][T30449] Invalid logical block size (18) [ 842.372442][T30449] loop7: detected capacity change from 0 to 1024 [ 842.394537][T30458] loop1: detected capacity change from 0 to 1024 [ 842.405421][T30458] EXT4-fs: inline encryption not supported [ 842.411317][T30458] EXT4-fs: Ignoring removed mblk_io_submit option [ 842.417822][T30458] EXT4-fs: Ignoring removed mblk_io_submit option [ 842.424904][T30458] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 842.434275][T30458] EXT4-fs (loop1): stripe (24) is not aligned with cluster size (16), stripe is disabled [ 842.449944][T30449] EXT4-fs: Ignoring removed bh option [ 842.456472][T30459] lo speed is unknown, defaulting to 1000 [ 842.500571][T30458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.502916][T30461] netlink: 'syz.3.8256': attribute type 11 has an invalid length. [ 842.520170][T30449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 842.556986][T30458] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.608667][T30449] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 842.721581][T30467] loop3: detected capacity change from 0 to 512 [ 842.796010][T30467] EXT4-fs: Ignoring removed i_version option [ 842.857843][T30467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 842.922341][T30467] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8256: invalid indirect mapped block 4294967295 (level 1) [ 842.975504][T30467] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 842.976027][T30467] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8256: invalid indirect mapped block 4294967295 (level 1) [ 842.985253][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 842.985271][ C1] EXT4-fs (loop3): initial error at time 1777421733: ext4_free_branches:1023: inode 11 [ 842.985299][ C1] EXT4-fs (loop3): last error at time 1777421733: ext4_free_branches:1023: inode 11 [ 843.254993][T30467] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 843.255445][T30467] EXT4-fs (loop3): 2 truncates cleaned up [ 843.287451][T30467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.459142][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.470838][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.523574][T30481] FAULT_INJECTION: forcing a failure. [ 843.523574][T30481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.556726][T30481] CPU: 0 UID: 0 PID: 30481 Comm: syz.3.8261 Tainted: G W syzkaller #0 PREEMPT(full) [ 843.556765][T30481] Tainted: [W]=WARN [ 843.556773][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 843.556784][T30481] Call Trace: [ 843.556791][T30481] [ 843.556841][T30481] __dump_stack+0x1d/0x30 [ 843.556869][T30481] dump_stack_lvl+0x95/0xd0 [ 843.556888][T30481] dump_stack+0x15/0x1b [ 843.556914][T30481] should_fail_ex+0x263/0x280 [ 843.556942][T30481] should_fail+0xb/0x20 [ 843.556993][T30481] should_fail_usercopy+0x1a/0x20 [ 843.557075][T30481] _copy_to_user+0x20/0xa0 [ 843.557139][T30481] simple_read_from_buffer+0xb5/0x130 [ 843.557174][T30481] proc_fail_nth_read+0x10e/0x150 [ 843.557207][T30481] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 843.557248][T30481] vfs_read+0x1ab/0x7f0 [ 843.557277][T30481] ? __rcu_read_unlock+0x4e/0x70 [ 843.557301][T30481] ? __fget_files+0x184/0x1c0 [ 843.557324][T30481] ? __rcu_read_unlock+0x4e/0x70 [ 843.557395][T30481] ? mutex_lock+0x57/0x90 [ 843.557468][T30481] ksys_read+0xdc/0x1a0 [ 843.557505][T30481] __x64_sys_read+0x40/0x50 [ 843.557536][T30481] x64_sys_call+0x2886/0x3020 [ 843.557590][T30481] do_syscall_64+0x12c/0x3b0 [ 843.557657][T30481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.557678][T30481] RIP: 0033:0x7f214353d60e [ 843.557694][T30481] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 843.557714][T30481] RSP: 002b:00007f2141fcefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 843.557738][T30481] RAX: ffffffffffffffda RBX: 00007f2141fcf6c0 RCX: 00007f214353d60e [ 843.557755][T30481] RDX: 000000000000000f RSI: 00007f2141fcf0a0 RDI: 0000000000000003 [ 843.557825][T30481] RBP: 00007f2141fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 843.557840][T30481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.557855][T30481] R13: 00007f21437f6038 R14: 00007f21437f5fa0 R15: 00007ffd9a8f46c8 [ 843.557878][T30481] [ 843.564062][T30477] loop1: detected capacity change from 0 to 1024 [ 843.790767][T30477] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 843.800573][T30477] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 843.810870][T30477] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.8262: iget: special inode unallocated [ 843.823612][T30477] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 843.823788][T30477] EXT4-fs (loop1): no journal found [ 843.921866][T30492] netlink: 'syz.3.8264': attribute type 11 has an invalid length. [ 843.970046][T30491] lo speed is unknown, defaulting to 1000 [ 844.103887][T30495] loop3: detected capacity change from 0 to 512 [ 844.123138][T30495] EXT4-fs: Ignoring removed i_version option [ 844.163575][T30495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 844.199255][T30499] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 844.308762][T30495] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.8264: invalid block [ 844.321203][T30495] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8264: invalid indirect mapped block 4294967295 (level 1) [ 844.335478][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 844.335498][ C1] EXT4-fs (loop3): initial error at time 1777421735: ext4_get_branch:178: inode 11: block 4294967295 [ 844.335537][ C1] EXT4-fs (loop3): last error at time 1777421735: ext4_get_branch:178: inode 11: block 4294967295 [ 844.524680][T30506] loop1: detected capacity change from 0 to 512 [ 844.686253][T30495] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8264: invalid indirect mapped block 4294967295 (level 1) [ 844.701037][T30506] EXT4-fs: inline encryption not supported [ 844.716201][T30506] EXT4-fs: inline encryption not supported [ 844.735900][T30495] EXT4-fs (loop3): 2 truncates cleaned up [ 844.745631][T30506] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 844.763435][T30495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.798283][T30506] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 844.839208][T30506] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8267: bg 0: block 248: padding at end of block bitmap is not set [ 844.863706][T30506] loop1: lost filesystem error report for type 5 error -117 [ 844.863965][T30506] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.8267: Failed to acquire dquot type 1 [ 844.871319][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 844.871340][ C1] EXT4-fs (loop1): last error at time 1777421735: ext4_validate_block_bitmap:441 [ 844.900251][T30506] loop1: lost filesystem error report for type 5 error -28 [ 844.900784][T30506] EXT4-fs (loop1): 1 truncate cleaned up [ 844.953759][T30506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 844.955001][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.998327][T30515] __nla_validate_parse: 1 callbacks suppressed [ 844.998348][T30515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8269'. [ 845.016079][ T7184] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:15: Failed to release dquot type 1 [ 845.030453][T30515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8269'. [ 845.038294][T30516] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8267'. [ 845.067542][T30506] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 845.228565][ T349] tipc: Subscription rejected, illegal request [ 845.255043][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 845.303016][T30522] loop3: detected capacity change from 0 to 128 [ 845.314373][T30522] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 845.630467][T30532] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 845.636879][T30532] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 845.649446][T30532] loop1: detected capacity change from 0 to 1024 [ 845.656623][T30532] EXT4-fs: Ignoring removed bh option [ 845.681276][T30534] lo speed is unknown, defaulting to 1000 [ 845.707467][T30532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.793142][T30541] lo speed is unknown, defaulting to 1000 [ 845.829450][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.848880][T30542] netlink: 'syz.0.8277': attribute type 11 has an invalid length. [ 845.952383][T30546] lo speed is unknown, defaulting to 1000 [ 845.967304][T30549] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 845.977194][T30549] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 845.979059][T30550] lo speed is unknown, defaulting to 1000 [ 846.007701][T30553] netlink: 'syz.7.8280': attribute type 11 has an invalid length. [ 846.026573][T30554] netlink: 'syz.1.8279': attribute type 11 has an invalid length. [ 846.057995][T30549] EXT4-fs (loop3): failed to open journal device unknown-block(0,3) -6 [ 846.293405][T30553] EXT4-fs: Ignoring removed i_version option [ 846.303568][T30553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 846.319656][T30553] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.8280: invalid block [ 846.332382][T30553] fserror_report: 3 callbacks suppressed [ 846.332410][T30553] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 846.355857][T30550] EXT4-fs: Ignoring removed i_version option [ 846.406654][T30553] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8280: invalid indirect mapped block 4294967295 (level 1) [ 846.467315][T30553] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 846.476942][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 846.493484][ C0] EXT4-fs (loop7): initial error at time 1777421737: ext4_get_branch:178: inode 11: block 4294967295 [ 846.505056][ C0] EXT4-fs (loop7): last error at time 1777421737: ext4_free_branches:1023: inode 11 [ 846.538474][T30550] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 846.555691][T30553] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8280: invalid indirect mapped block 4294967295 (level 1) [ 846.584639][T30553] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 846.585224][T30553] EXT4-fs (loop7): 2 truncates cleaned up [ 846.601693][T30550] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8279: invalid indirect mapped block 4294967295 (level 1) [ 846.616917][T30553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.629990][T30550] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 846.630241][T30550] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8279: invalid indirect mapped block 4294967295 (level 1) [ 846.676816][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 846.683669][ C0] EXT4-fs (loop1): initial error at time 1777421737: ext4_free_branches:1023: inode 11 [ 846.693966][ C0] EXT4-fs (loop1): last error at time 1777421737: ext4_free_branches:1023: inode 11 [ 846.778678][T30550] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 846.781920][T30550] EXT4-fs (loop1): 2 truncates cleaned up [ 846.797788][T30550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.843278][T30573] set_capacity_and_notify: 3 callbacks suppressed [ 846.843324][T30573] loop5: detected capacity change from 0 to 512 [ 846.871879][T30573] EXT4-fs: Ignoring removed nobh option [ 846.880799][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.886640][T30575] lo speed is unknown, defaulting to 1000 [ 846.896139][T30573] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 846.953072][T30573] EXT4-fs (loop5): 1 truncate cleaned up [ 846.959194][T30573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.983713][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.077548][T30575] netlink: 'syz.0.8283': attribute type 11 has an invalid length. [ 847.268781][T30590] Invalid logical block size (18) [ 847.284528][T30590] loop7: detected capacity change from 0 to 1024 [ 847.343201][T30590] EXT4-fs: Ignoring removed bh option [ 847.371023][T30590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.432301][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.520217][T30599] xt_TPROXY: Can be used only with -p tcp or -p udp [ 847.541257][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.586047][T30603] Invalid logical block size (18) [ 847.612486][T30603] loop5: detected capacity change from 0 to 1024 [ 847.633449][T30603] EXT4-fs: Ignoring removed bh option [ 847.687616][T30607] Invalid logical block size (18) [ 847.699829][T30603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.845608][T30611] lo speed is unknown, defaulting to 1000 [ 847.900401][T30611] netlink: 'syz.0.8295': attribute type 11 has an invalid length. [ 847.920113][T30613] xt_TPROXY: Can be used only with -p tcp or -p udp [ 847.924658][T30591] Set syz1 is full, maxelem 65536 reached [ 847.949664][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.146292][T30620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8300'. [ 848.194524][T30621] loop1: detected capacity change from 0 to 128 [ 848.201502][T30621] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 848.212671][T30621] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 848.221269][T30621] FAT-fs (loop1): Filesystem has been set read-only [ 848.230013][T30621] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 848.249305][T30623] xt_TPROXY: Can be used only with -p tcp or -p udp [ 848.280240][T30629] Invalid logical block size (18) [ 848.307796][T30629] loop5: detected capacity change from 0 to 1024 [ 848.314682][T30629] EXT4-fs: Ignoring removed bh option [ 848.367690][T30633] xt_TPROXY: Can be used only with -p tcp or -p udp [ 848.390804][T30637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8306'. [ 848.408583][T30637] SET target dimension over the limit! [ 848.419450][T30637] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8306'. [ 848.430975][T30629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.512273][T30643] loop3: detected capacity change from 0 to 1024 [ 848.536810][T30643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 848.571444][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.624138][T30651] lo speed is unknown, defaulting to 1000 [ 848.656450][T30651] netlink: 'syz.5.8311': attribute type 11 has an invalid length. [ 848.667086][T30652] FAULT_INJECTION: forcing a failure. [ 848.667086][T30652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.681361][T30652] CPU: 1 UID: 0 PID: 30652 Comm: syz.7.8309 Tainted: G W syzkaller #0 PREEMPT(full) [ 848.681400][T30652] Tainted: [W]=WARN [ 848.681407][T30652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 848.681430][T30652] Call Trace: [ 848.681437][T30652] [ 848.681453][T30652] __dump_stack+0x1d/0x30 [ 848.681480][T30652] dump_stack_lvl+0x95/0xd0 [ 848.681566][T30652] dump_stack+0x15/0x1b [ 848.681587][T30652] should_fail_ex+0x263/0x280 [ 848.681671][T30652] should_fail+0xb/0x20 [ 848.681697][T30652] should_fail_usercopy+0x1a/0x20 [ 848.681728][T30652] _copy_to_user+0x20/0xa0 [ 848.681760][T30652] simple_read_from_buffer+0xb5/0x130 [ 848.681889][T30652] proc_fail_nth_read+0x10e/0x150 [ 848.681919][T30652] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.681948][T30652] vfs_read+0x1ab/0x7f0 [ 848.682017][T30652] ? __rcu_read_unlock+0x4e/0x70 [ 848.682041][T30652] ? __fget_files+0x184/0x1c0 [ 848.682062][T30652] ? mutex_lock+0x57/0x90 [ 848.682095][T30652] ksys_read+0xdc/0x1a0 [ 848.682125][T30652] __x64_sys_read+0x40/0x50 [ 848.682235][T30652] x64_sys_call+0x2886/0x3020 [ 848.682260][T30652] do_syscall_64+0x12c/0x3b0 [ 848.682286][T30652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.682352][T30652] RIP: 0033:0x7fbdc6d9d60e [ 848.682370][T30652] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 848.682388][T30652] RSP: 002b:00007fbdc580dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.682411][T30652] RAX: ffffffffffffffda RBX: 00007fbdc580e6c0 RCX: 00007fbdc6d9d60e [ 848.682451][T30652] RDX: 000000000000000f RSI: 00007fbdc580e0a0 RDI: 0000000000000005 [ 848.682466][T30652] RBP: 00007fbdc580e090 R08: 0000000000000000 R09: 0000000000000000 [ 848.682480][T30652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.682514][T30652] R13: 00007fbdc7056128 R14: 00007fbdc7056090 R15: 00007ffcc4805948 [ 848.682534][T30652] [ 848.882442][T30651] loop5: detected capacity change from 0 to 512 [ 848.889440][T30651] EXT4-fs: Ignoring removed i_version option [ 848.913458][T30651] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 848.957472][T30651] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8311: invalid indirect mapped block 4294967295 (level 1) [ 848.974193][T30651] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 848.974752][T30651] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8311: invalid indirect mapped block 4294967295 (level 1) [ 848.984741][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 848.984796][ C0] EXT4-fs (loop5): initial error at time 1777421739: ext4_free_branches:1023: inode 11 [ 848.984871][ C0] EXT4-fs (loop5): last error at time 1777421739: ext4_free_branches:1023: inode 11 [ 849.008218][T30657] loop1: detected capacity change from 0 to 4096 [ 849.016319][T30651] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 849.042934][T30651] EXT4-fs (loop5): 2 truncates cleaned up [ 849.059402][T30657] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 849.069403][T30657] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 849.077608][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.087238][T30651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 849.576252][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.822119][T30683] loop5: detected capacity change from 0 to 1024 [ 849.833010][T30683] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 849.841593][T30683] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 849.853263][T30683] tipc: Enabled bearer , priority 0 [ 849.878437][T30686] loop1: detected capacity change from 0 to 512 [ 849.885320][T30686] EXT4-fs: Ignoring removed nobh option [ 849.907763][T30683] tipc: Resetting bearer [ 849.913771][T30686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 849.952303][T30686] EXT4-fs (loop1): 1 truncate cleaned up [ 849.966707][ T28] kauditd_printk_skb: 485 callbacks suppressed [ 849.966725][ T28] audit: type=1326 audit(1777421740.905:47234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.5.8323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 849.967807][T30686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 849.973012][ T28] audit: type=1326 audit(1777421740.989:47235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.5.8323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 849.973382][ T28] audit: type=1326 audit(1777421740.989:47236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.5.8323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 850.109460][ T28] audit: type=1326 audit(1777421741.073:47237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.5.8323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 850.133492][ T28] audit: type=1326 audit(1777421741.073:47238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.5.8323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 850.200562][ T28] audit: type=1326 audit(1777421741.073:47239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30689 comm="syz.5.8323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 850.244393][ T28] audit: type=1326 audit(1777421741.126:47240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30688 comm="syz.7.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6ddcdd9 code=0x7ffc0000 [ 850.268459][ T28] audit: type=1326 audit(1777421741.126:47241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30688 comm="syz.7.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6ddcdd9 code=0x7ffc0000 [ 850.292493][ T28] audit: type=1326 audit(1777421741.126:47242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30688 comm="syz.7.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6ddcdd9 code=0x7ffc0000 [ 850.316948][ T28] audit: type=1326 audit(1777421741.126:47243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30688 comm="syz.7.8322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc6ddcdd9 code=0x7ffc0000 [ 850.485748][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.556219][T30710] EXT4-fs (loop1): bad geometry: bigalloc file system with non-zero first_data_block [ 850.556219][T30710] [ 850.595747][T30710] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 850.618321][T30716] netlink: 'syz.0.8330': attribute type 11 has an invalid length. [ 850.663724][T30714] lo speed is unknown, defaulting to 1000 [ 850.762057][T30723] Invalid logical block size (18) [ 850.768217][T30723] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 850.774593][T30723] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 850.777560][T30727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8335'. [ 850.784044][T30722] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 850.806511][T30727] SET target dimension over the limit! [ 850.812728][T30727] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8335'. [ 851.131833][T30746] netlink: 'syz.1.8343': attribute type 3 has an invalid length. [ 851.217267][T30754] tipc: Failed to remove unknown binding: 66,0,0/0:3382199313/3382199315 [ 851.236840][T30754] tipc: Failed to remove unknown binding: 66,0,0/0:3382199313/3382199314 [ 851.246730][T30754] tipc: Failed to remove unknown binding: 66,0,0/0:3382199313/3382199315 [ 851.264358][T30754] tipc: Failed to remove unknown binding: 66,0,0/0:3382199313/3382199314 [ 851.285611][T30756] Invalid logical block size (18) [ 851.556538][T30768] Invalid logical block size (18) [ 851.612214][T30769] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 851.867304][T30771] lo speed is unknown, defaulting to 1000 [ 851.971731][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8353'. [ 852.298324][T30790] set_capacity_and_notify: 1 callbacks suppressed [ 852.298398][T30790] loop3: detected capacity change from 0 to 512 [ 852.322833][T30785] loop5: detected capacity change from 0 to 1024 [ 852.363846][T30782] lo speed is unknown, defaulting to 1000 [ 852.394636][T30785] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 852.416018][T30790] EXT4-fs (loop3): 1 truncate cleaned up [ 852.453390][T30785] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 852.465637][T30790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.496837][T30790] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.8359: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 852.520449][T30790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8359'. [ 852.529515][T30785] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: inode #32: comm syz.5.8358: iget: special inode unallocated [ 852.542221][T30785] loop5: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 852.556966][T30785] EXT4-fs (loop5): no journal found [ 852.574173][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.648443][T30804] lo speed is unknown, defaulting to 1000 [ 852.688437][T30805] Invalid logical block size (18) [ 852.701286][T30805] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 852.707697][T30805] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 852.722831][T30805] loop3: detected capacity change from 0 to 1024 [ 852.732922][T30805] EXT4-fs: Ignoring removed bh option [ 852.755986][T30814] tipc: Failed to remove unknown binding: 66,0,0/0:494132003/494132005 [ 852.758120][T30810] lo speed is unknown, defaulting to 1000 [ 852.765241][T30814] tipc: Failed to remove unknown binding: 66,0,0/0:494132003/494132004 [ 852.789082][T30805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.802751][T30814] tipc: Failed to remove unknown binding: 66,0,0/0:494132003/494132005 [ 852.804033][T30805] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 852.824419][T30814] tipc: Failed to remove unknown binding: 66,0,0/0:494132003/494132004 [ 852.925750][T30821] lo speed is unknown, defaulting to 1000 [ 852.935575][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.945152][T30820] lo speed is unknown, defaulting to 1000 [ 853.030893][T30821] loop5: detected capacity change from 0 to 512 [ 853.037945][T30821] EXT4-fs: Ignoring removed i_version option [ 853.106058][T30821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 853.126877][T30821] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8368: invalid indirect mapped block 4294967295 (level 1) [ 853.141017][T30821] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 853.141237][T30821] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.8368: invalid indirect mapped block 4294967295 (level 1) [ 853.164319][T30821] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 853.192610][T30821] EXT4-fs (loop5): 2 truncates cleaned up [ 853.212293][ C0] EXT4-fs (loop5): error count since last fsck: 2 [ 853.212328][ C0] EXT4-fs (loop5): initial error at time 1777421744: ext4_free_branches:1023: inode 11 [ 853.212381][ C0] EXT4-fs (loop5): last error at time 1777421744: ext4_free_branches:1023: inode 11 [ 853.244216][T30833] loop1: detected capacity change from 0 to 128 [ 853.251073][T30833] msdos: Unknown parameter '00000000000000000002442ÿÿÿÿ' [ 853.252946][T30831] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 853.266494][T30831] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 853.274475][T30831] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0009 i0007 l0 [ 853.374405][T30821] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.576810][T30840] loop3: detected capacity change from 0 to 1024 [ 853.584297][T30840] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 853.594170][T30840] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 853.604636][T30840] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.8375: iget: special inode unallocated [ 853.617378][T30840] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 853.617623][T30840] EXT4-fs (loop3): no journal found [ 853.635827][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 853.635863][ C0] EXT4-fs (loop3): initial error at time 1777421744: ext4_get_journal_inode:5896: inode 32 [ 853.635923][ C0] EXT4-fs (loop3): last error at time 1777421744: ext4_get_journal_inode:5896: inode 32 [ 853.697834][T30846] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8376'. [ 853.711165][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 853.730019][T30846] SET target dimension over the limit! [ 853.747819][T30846] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8376'. [ 853.802096][T30851] tipc: Failed to remove unknown binding: 66,0,0/1:1472871530/1472871532 [ 853.810853][T30851] tipc: Failed to remove unknown binding: 66,0,0/1:1472871530/1472871531 [ 853.819892][T30851] tipc: Failed to remove unknown binding: 66,0,0/1:1472871530/1472871532 [ 853.828503][T30851] tipc: Failed to remove unknown binding: 66,0,0/1:1472871530/1472871531 [ 853.879581][T30854] Invalid logical block size (18) [ 853.885551][T30854] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 853.891912][T30854] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 853.904766][T30854] loop3: detected capacity change from 0 to 1024 [ 853.913767][T30854] EXT4-fs: Ignoring removed bh option [ 854.018549][T30854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.031359][T30854] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 854.107955][T30866] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8382'. [ 854.117999][T30866] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8382'. [ 854.225174][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.844746][T30878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8387'. [ 854.854212][T30878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8387'. [ 854.912141][ T28] kauditd_printk_skb: 784 callbacks suppressed [ 854.912160][ T28] audit: type=1326 audit(1777421746.073:48028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 854.915018][T30889] tipc: Failed to remove unknown binding: 66,0,0/1:3125613134/3125613136 [ 854.920987][ T28] audit: type=1326 audit(1777421746.073:48029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 854.942224][T30889] tipc: Failed to remove unknown binding: 66,0,0/1:3125613134/3125613135 [ 854.944493][T30889] tipc: Failed to remove unknown binding: 66,0,0/1:3125613134/3125613136 [ 854.944600][T30889] tipc: Failed to remove unknown binding: 66,0,0/1:3125613134/3125613135 [ 855.011743][ T28] audit: type=1326 audit(1777421746.073:48030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.035624][ T28] audit: type=1326 audit(1777421746.073:48031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.047398][T30894] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 855.088024][ T28] audit: type=1326 audit(1777421746.073:48032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.112182][ T28] audit: type=1326 audit(1777421746.073:48033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.136055][ T28] audit: type=1326 audit(1777421746.073:48034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.159903][ T28] audit: type=1326 audit(1777421746.073:48035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.198734][T30901] loop1: detected capacity change from 0 to 512 [ 855.205089][ T28] audit: type=1326 audit(1777421746.073:48036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.230391][ T28] audit: type=1326 audit(1777421746.073:48037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30888 comm="syz.5.8391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8ba46cdd9 code=0x7ffc0000 [ 855.271044][T30901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 855.290819][T30901] ext4 filesystem being mounted at /504/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 855.845800][T30913] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 855.947089][T30915] loop3: detected capacity change from 0 to 512 [ 855.995909][T30915] EXT4-fs: Ignoring removed oldalloc option [ 856.001951][T30915] EXT4-fs: dax option not supported [ 856.109709][T30915] loop3: detected capacity change from 0 to 1024 [ 856.150336][T30915] EXT4-fs: inline encryption not supported [ 856.167813][T30915] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 856.208565][T30915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 856.579028][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.852856][T30936] Invalid logical block size (18) [ 856.853737][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 856.864036][T30936] EXT4-fs: Ignoring removed bh option [ 856.952618][T30936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.974633][T30936] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 856.981787][T30943] openvswitch: netlink: Missing key (keys=1000040, expected=2000) [ 857.059079][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.077994][T30948] netlink: 168 bytes leftover after parsing attributes in process `syz.7.8409'. [ 857.135627][T30954] lo speed is unknown, defaulting to 1000 [ 857.218778][T30958] xt_TPROXY: Can be used only with -p tcp or -p udp [ 857.255677][T30962] lo speed is unknown, defaulting to 1000 [ 857.370842][T30965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.451601][T30965] set_capacity_and_notify: 2 callbacks suppressed [ 857.451616][T30965] loop7: detected capacity change from 0 to 4096 [ 857.606241][T30979] loop5: detected capacity change from 0 to 1024 [ 857.686040][T30979] EXT4-fs (loop5): can't mount with commit=, fs mounted w/o journal [ 858.113409][T31011] Invalid logical block size (18) [ 858.116689][T31010] lo speed is unknown, defaulting to 1000 [ 858.123783][T31011] loop7: detected capacity change from 0 to 1024 [ 858.133174][T31011] EXT4-fs: Ignoring removed bh option [ 858.188017][T31016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8436'. [ 858.197781][T31010] netlink: 'syz.1.8434': attribute type 11 has an invalid length. [ 858.198801][T31016] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8436'. [ 858.215170][T31010] loop1: detected capacity change from 0 to 512 [ 858.223616][T31010] EXT4-fs: Ignoring removed i_version option [ 858.230533][T31010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 858.239999][T31011] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 858.241809][T31010] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8434: invalid indirect mapped block 4294967295 (level 1) [ 858.253155][T31011] EXT4-fs (loop7): Online resizing not supported with bigalloc [ 858.266239][T31010] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.280763][T31010] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8434: invalid indirect mapped block 4294967295 (level 1) [ 858.304135][T31010] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.304524][T31010] EXT4-fs (loop1): 2 truncates cleaned up [ 858.319988][T31010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.411752][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.446913][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 858.490970][T31025] lo speed is unknown, defaulting to 1000 [ 858.515209][T31027] lo speed is unknown, defaulting to 1000 [ 858.563868][T31025] loop7: detected capacity change from 0 to 512 [ 858.578120][T31025] EXT4-fs: Ignoring removed i_version option [ 858.588962][T31025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 858.604289][T31025] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.8440: invalid block [ 858.616481][T31025] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.616754][T31025] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8440: invalid indirect mapped block 4294967295 (level 1) [ 858.639913][T31025] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.640157][T31025] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8440: invalid indirect mapped block 4294967295 (level 1) [ 858.640626][T31027] loop1: detected capacity change from 0 to 512 [ 858.649472][T31025] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.650661][T31025] EXT4-fs (loop7): 2 truncates cleaned up [ 858.668993][T31027] EXT4-fs: Ignoring removed i_version option [ 858.692234][T31025] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.706649][T31027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 858.724081][T31027] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8439: invalid indirect mapped block 4294967295 (level 1) [ 858.738476][T31027] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.738670][T31027] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.8439: invalid indirect mapped block 4294967295 (level 1) [ 858.771681][T31027] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.772038][T31027] EXT4-fs (loop1): 2 truncates cleaned up [ 858.787544][T31027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.977982][T31047] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8446'. [ 859.058430][T31057] Invalid logical block size (18) [ 859.070245][T31056] loop5: detected capacity change from 0 to 1024 [ 859.078561][T31056] EXT4-fs: Ignoring removed bh option [ 859.162964][T31056] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.176118][T31056] EXT4-fs (loop5): Online resizing not supported with bigalloc [ 859.234952][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.285751][T31069] loop5: detected capacity change from 0 to 1024 [ 859.301971][T31069] EXT4-fs (loop5): bad geometry: bigalloc file system with non-zero first_data_block [ 859.301971][T31069] [ 859.325456][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.434895][T22896] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.479588][T31069] SET target dimension over the limit! [ 859.509798][T31074] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8455'. [ 859.744810][T31079] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8455'. [ 859.839793][T31069] loop5: detected capacity change from 0 to 1024 [ 859.847559][T31069] EXT4-fs: Ignoring removed mblk_io_submit option [ 860.121467][T31069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 860.185608][T31069] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.228543][T31069] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.8453: lblock 0 mapped to illegal pblock 0 (length 1) [ 860.509458][T31091] loop3: detected capacity change from 0 to 1024 [ 860.580356][T31091] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 860.589993][T31091] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 860.625505][T31091] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.8458: iget: special inode unallocated [ 860.649790][T24985] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 860.669232][T31091] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 860.669403][T31091] EXT4-fs (loop3): no journal found [ 860.678645][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 860.678676][ C1] EXT4-fs (loop3): initial error at time 1777421753: ext4_get_journal_inode:5896: inode 32 [ 860.678709][ C1] EXT4-fs (loop3): last error at time 1777421753: ext4_get_journal_inode:5896: inode 32 [ 860.751368][T31098] netlink: 'syz.5.8460': attribute type 6 has an invalid length. [ 860.790610][T31101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.814025][T31101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.836463][T31096] lo speed is unknown, defaulting to 1000 [ 860.924044][ T28] kauditd_printk_skb: 202 callbacks suppressed [ 860.924061][ T28] audit: type=1326 audit(1777421753.460:48240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 860.928701][T31103] tipc: Failed to remove unknown binding: 66,0,0/0:3093278766/3093278768 [ 860.930372][ T28] audit: type=1326 audit(1777421753.460:48241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 860.930402][ T28] audit: type=1326 audit(1777421753.460:48242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.024753][T31103] tipc: Failed to remove unknown binding: 66,0,0/0:3093278766/3093278767 [ 861.037324][ T28] audit: type=1326 audit(1777421753.460:48243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.061145][ T28] audit: type=1326 audit(1777421753.460:48244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.084881][ T28] audit: type=1326 audit(1777421753.460:48245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.108869][ T28] audit: type=1326 audit(1777421753.460:48246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.132572][ T28] audit: type=1326 audit(1777421753.460:48247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.161299][T31103] tipc: Failed to remove unknown binding: 66,0,0/0:3093278766/3093278768 [ 861.178283][T31103] tipc: Failed to remove unknown binding: 66,0,0/0:3093278766/3093278767 [ 861.189559][ T28] audit: type=1326 audit(1777421753.460:48248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.217045][ T28] audit: type=1326 audit(1777421753.460:48249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31102 comm="syz.1.8463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a77b3cdd9 code=0x7ffc0000 [ 861.330979][T31112] veth1_to_bond: entered allmulticast mode [ 861.349917][T31112] veth1_to_bond: left allmulticast mode [ 861.412666][T31120] lo speed is unknown, defaulting to 1000 [ 861.495461][T31120] EXT4-fs: Ignoring removed i_version option [ 861.507645][T31120] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 861.581148][T31120] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.8466: invalid block [ 861.593382][T31120] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 861.601773][T31120] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8466: invalid indirect mapped block 4294967295 (level 1) [ 861.656338][T31120] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 861.657886][T31120] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.8466: invalid indirect mapped block 4294967295 (level 1) [ 861.681101][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 861.681123][ C1] EXT4-fs (loop3): initial error at time 1777421754: ext4_get_branch:178: inode 11: block 4294967295 [ 861.681172][ C1] EXT4-fs (loop3): last error at time 1777421754: ext4_free_branches:1023: inode 11 [ 861.711677][T31120] EXT4-fs (loop3): 2 truncates cleaned up [ 861.717937][T31120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.738113][T31130] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8469'. [ 861.755254][T31130] netlink: 14 bytes leftover after parsing attributes in process `syz.7.8469'. [ 861.926111][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.982403][T31146] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 862.006604][T31146] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 862.039440][T31146] EXT4-fs error (device loop3): ext4_get_journal_inode:5896: inode #32: comm syz.3.8475: iget: special inode unallocated [ 862.056513][T31146] EXT4-fs (loop3): no journal found [ 862.153316][T31158] netlink: 'syz.3.8478': attribute type 15 has an invalid length. [ 862.394030][T31171] tipc: Failed to remove unknown binding: 66,0,0/1:342300504/342300506 [ 862.402500][T31171] tipc: Failed to remove unknown binding: 66,0,0/1:342300504/342300505 [ 862.422957][T31171] tipc: Failed to remove unknown binding: 66,0,0/1:342300504/342300506 [ 862.431590][T31171] tipc: Failed to remove unknown binding: 66,0,0/1:342300504/342300505 [ 862.476755][T31169] Invalid logical block size (18) [ 862.488649][T31175] lo speed is unknown, defaulting to 1000 [ 862.488840][T31169] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 862.500820][T31169] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 862.533181][T31169] set_capacity_and_notify: 2 callbacks suppressed [ 862.533199][T31169] loop3: detected capacity change from 0 to 1024 [ 862.546710][T31169] EXT4-fs: Ignoring removed bh option [ 862.689691][T31175] loop7: detected capacity change from 0 to 512 [ 862.698810][T31175] EXT4-fs: Ignoring removed i_version option [ 862.714518][T31175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 862.735977][T31169] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.735983][T31175] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8485: invalid indirect mapped block 4294967295 (level 1) [ 862.736263][T31175] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.8485: invalid indirect mapped block 4294967295 (level 1) [ 862.787951][ C0] EXT4-fs (loop7): error count since last fsck: 2 [ 862.794442][ C0] EXT4-fs (loop7): initial error at time 1777421755: ext4_free_branches:1023: inode 11 [ 862.804141][ C0] EXT4-fs (loop7): last error at time 1777421755: ext4_free_branches:1023: inode 11 [ 862.836075][T31175] EXT4-fs (loop7): 2 truncates cleaned up [ 862.849006][T31169] EXT4-fs (loop3): Online resizing not supported with bigalloc [ 862.931412][T31151] syz.1.8474 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 862.945959][T31151] CPU: 1 UID: 0 PID: 31151 Comm: syz.1.8474 Tainted: G W syzkaller #0 PREEMPT(full) [ 862.946059][T31151] Tainted: [W]=WARN [ 862.946124][T31151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.946136][T31151] Call Trace: [ 862.946144][T31151] [ 862.946153][T31151] __dump_stack+0x1d/0x30 [ 862.946182][T31151] dump_stack_lvl+0x95/0xd0 [ 862.946209][T31151] dump_stack+0x15/0x1b [ 862.946233][T31151] dump_header+0x80/0x240 [ 862.946332][T31151] oom_kill_process+0x295/0x350 [ 862.946374][T31151] out_of_memory+0x97d/0xb80 [ 862.946412][T31151] try_charge_memcg+0x62f/0xa10 [ 862.946455][T31151] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 862.946552][T31151] __alloc_frozen_pages_noprof+0x18a/0x350 [ 862.946583][T31151] alloc_pages_mpol+0xb3/0x260 [ 862.946655][T31151] ? mod_lruvec_state+0xe0/0xf0 [ 862.946696][T31151] alloc_pages_noprof+0x8f/0x140 [ 862.946725][T31151] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 862.946757][T31151] __kvmalloc_node_noprof+0x3d4/0x640 [ 862.946858][T31151] ? futex_hash_allocate+0x190/0x9a0 [ 862.947043][T31151] ? futex_hash_allocate+0x190/0x9a0 [ 862.947113][T31151] ? tick_program_event+0x79/0xc0 [ 862.947148][T31151] futex_hash_allocate+0x190/0x9a0 [ 862.947186][T31151] ? cap_task_prctl+0x13f/0x6b0 [ 862.947266][T31151] futex_hash_prctl+0xd8/0xf0 [ 862.947333][T31151] __se_sys_prctl+0x4f4/0x1400 [ 862.947368][T31151] __x64_sys_prctl+0x67/0x80 [ 862.947399][T31151] x64_sys_call+0x2533/0x3020 [ 862.947508][T31151] do_syscall_64+0x12c/0x3b0 [ 862.947538][T31151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.947616][T31151] RIP: 0033:0x7f2a77b3cdd9 [ 862.947639][T31151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.947723][T31151] RSP: 002b:00007f2a7654d028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 862.947750][T31151] RAX: ffffffffffffffda RBX: 00007f2a77db6180 RCX: 00007f2a77b3cdd9 [ 862.947769][T31151] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 862.947809][T31151] RBP: 00007f2a77bd2d69 R08: 0000000000000000 R09: 0000000000000000 [ 862.947824][T31151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.947837][T31151] R13: 00007f2a77db6218 R14: 00007f2a77db6180 R15: 00007fffeba6c2d8 [ 862.947858][T31151] [ 862.947867][T31151] memory: usage 307200kB, limit 307200kB, failcnt 3049 [ 863.003976][T31175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 863.022152][T31151] memory+swap: usage 258088kB, limit 9007199254740988kB, failcnt 0 [ 863.233689][T31151] kmem: usage 86648kB, limit 9007199254740988kB, failcnt 0 [ 863.253111][T31151] Memory cgroup stats for /syz1: [ 863.253451][T31151] cache 64610304 [ 863.281460][T31151] rss 12578816 [ 863.290970][T31151] shmem 64065536 [ 863.302174][T31151] mapped_file 20480 [ 863.316009][T31151] dirty 12288 [ 863.320920][T31151] writeback 0 [ 863.327163][T31151] workingset_refault_anon 6597 [ 863.341930][T24480] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.359626][T31151] workingset_refault_file 1541 [ 863.370514][T31151] swap 3170304 [ 863.382301][T31151] swapcached 106831872 [ 863.386742][T31151] pgpgin 994183 [ 863.395588][T31151] pgpgout 975338 [ 863.399207][T31151] pgfault 1013154 [ 863.405929][T31151] pgmajfault 860 [ 863.414079][T31151] inactive_anon 64114688 [ 863.421048][T31151] active_anon 12529664 [ 863.444619][T31185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 863.479544][T31151] inactive_file 0 [ 863.486441][T31151] active_file 544768 [ 863.490484][T31151] unevictable 0 [ 863.497496][T31188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8486'. [ 863.509677][T31151] hierarchical_memory_limit 314572800 [ 863.524445][T31151] hierarchical_memsw_limit 9223372036854771712 [ 863.545246][T31151] total_cache 64610304 [ 863.597583][T31151] total_rss 12578816 [ 863.601610][T31151] total_shmem 64065536 [ 863.605684][T31151] total_mapped_file 20480 [ 863.610024][T31151] total_dirty 12288 [ 863.613884][T31151] total_writeback 0 [ 863.618771][T31191] Invalid logical block size (18) [ 863.624822][T21562] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.648721][T31151] total_workingset_refault_anon 6597 [ 863.654758][T31151] total_workingset_refault_file 1541 [ 863.660390][T31151] total_swap 3170304 [ 863.664550][T31151] total_swapcached 106831872 [ 863.669417][T31151] total_pgpgin 994183 [ 863.673713][T31151] total_pgpgout 975338 [ 863.677977][T31151] total_pgfault 1013154 [ 863.682412][T31151] total_pgmajfault 860 [ 863.686604][T31151] total_inactive_anon 64114688 [ 863.691743][T31151] total_active_anon 12529664 [ 863.720791][T31151] total_inactive_file 0 [ 863.728600][T31151] total_active_file 544768 [ 863.733346][T31151] total_unevictable 0 [ 863.737357][T31151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8474,pid=31143,uid=0 [ 863.755347][T31151] Memory cgroup out of memory: Killed process 31151 (syz.1.8474) total-vm:98536kB, anon-rss:13504kB, file-rss:26520kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 863.860037][T31205] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8494'. [ 863.913502][T31213] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2306498525/2306498527 [ 863.932857][T31213] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2306498525/2306498526 [ 863.958826][T31220] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2306498525/2306498527 [ 863.969102][T31220] tipc: Failed to remove unknown binding: 66,0,0/2886997162:2306498525/2306498526 [ 864.107300][ T2979] ================================================================== [ 864.115533][ T2979] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 864.123755][ T2979] [ 864.123768][ T2979] write to 0xffff88811c7c0f30 of 8 bytes by task 29832 on cpu 1: [ 864.123789][ T2979] dentry_unlink_inode+0x6a/0x290 [ 864.123827][ T2979] d_delete+0xc8/0xe0 [ 864.123853][ T2979] d_delete_notify+0x32/0x100 [ 864.123885][ T2979] vfs_unlink+0x289/0x490 [ 864.123916][ T2979] filename_unlinkat+0x1e2/0x410 [ 864.123948][ T2979] __se_sys_unlink+0x2b/0xe0 [ 864.123980][ T2979] __x64_sys_unlink+0x1f/0x30 [ 864.124012][ T2979] x64_sys_call+0x2eb6/0x3020 [ 864.124039][ T2979] do_syscall_64+0x12c/0x3b0 [ 864.124062][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.124105][ T2979] [ 864.124112][ T2979] read to 0xffff88811c7c0f30 of 8 bytes by task 2979 on cpu 0: [ 864.124132][ T2979] step_into_slowpath+0x12c/0x4c0 [ 864.124154][ T2979] path_lookupat+0x330/0x500 [ 864.201581][ T2979] filename_lookup+0x190/0x390 [ 864.206440][ T2979] do_readlinkat+0x74/0x2f0 [ 864.211042][ T2979] __x64_sys_readlink+0x47/0x60 [ 864.215899][ T2979] x64_sys_call+0x2b51/0x3020 [ 864.220845][ T2979] do_syscall_64+0x12c/0x3b0 [ 864.225443][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.231346][ T2979] [ 864.233671][ T2979] value changed: 0xffff88815fad58a8 -> 0x0000000000000000 [ 864.240910][ T2979] [ 864.243244][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 864.249397][ T2979] CPU: 0 UID: 0 PID: 2979 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 864.260008][ T2979] Tainted: [W]=WARN [ 864.263818][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 864.274079][ T2979] ==================================================================